Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
File: Yt3ChdqLPiCesA6qNnGEXaps8oY.cer (raw, json)
Hash identifier: 3UGQbnh4LEOkV1NVkp1uYma5rqtEUu/A2Gdqy5SEmTs=
Subject key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6404
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Apr 2025 19:47:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 129.127.0.0/16
IP: 192.43.226.0 -- 192.43.229.255
IP: 192.160.71.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25604 (0x6404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 14 19:47:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:70:68:e3:1e:96:74:b1:95:e5:34:d6:cb:
2d:9b:3e:de:86:8c:41:5a:42:b7:83:98:d4:8b:73:
32:23:6b:ae:eb:cc:46:9b:e0:f7:fe:e8:c3:e1:d1:
58:83:02:e8:f1:65:88:ad:76:55:29:5b:2a:dc:4c:
01:49:94:cf:bd:7e:e5:a6:5c:ba:1d:a7:d0:2b:47:
9d:9c:d1:29:06:7c:70:c8:10:9b:89:4f:a1:30:09:
98:c0:bb:34:e0:bb:67:fb:cc:7e:9e:95:8a:7c:23:
58:3d:ce:27:74:47:60:16:7c:97:af:b8:db:ce:16:
76:69:71:cc:19:5a:58:e3:19:7d:a7:ea:1c:0d:ae:
a1:06:a9:97:9f:07:ae:3e:90:9d:81:d7:f4:eb:b2:
04:e2:09:e9:c9:09:24:c6:b7:67:89:cd:b3:b7:b3:
a2:92:1c:5f:11:60:a8:c3:de:b4:22:70:be:ae:a9:
22:38:b5:ca:80:26:ff:26:99:78:0a:77:92:6c:84:
77:b8:a3:18:9d:75:ea:99:9b:2f:13:f6:da:0d:74:
06:84:77:16:45:f4:94:89:38:dd:5e:82:27:b9:0d:
3a:eb:29:68:bd:26:1a:34:fa:69:3f:a5:76:69:85:
c7:68:30:ff:9d:1e:d1:cc:5c:2c:4a:41:25:94:b9:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.127.0.0/16
192.43.226.0-192.43.229.255
192.160.71.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d9:c7:69:30:c8:e1:1c:6e:0b:fa:a8:bd:75:41:a3:d7:0f:
8f:0e:45:c3:a1:b0:a4:19:ef:78:a1:a9:a4:b1:a4:ab:69:81:
31:9f:2e:28:d8:52:04:e7:e5:d0:f3:eb:bd:30:32:cd:73:87:
f4:82:dd:b2:be:af:c8:d1:fe:98:42:0e:e6:2f:02:7e:f0:a1:
46:df:6a:b3:c2:70:c3:a3:9f:8f:9a:32:e9:f2:63:cf:af:e9:
3f:7d:c0:28:a6:44:53:8e:e5:93:ec:06:8f:cd:3e:ab:96:b4:
ec:87:f7:1e:2b:5b:46:17:d3:bd:61:c2:3a:6a:a1:f8:57:6e:
c0:4b:1a:6c:b6:89:1c:71:e3:00:25:1e:f5:01:74:34:83:83:
34:59:a7:09:2c:cf:a3:11:e7:ec:36:a8:e3:7f:11:3b:af:0c:
0d:e1:c2:05:d1:88:71:1c:31:f6:b0:0b:12:c1:3b:d5:eb:e3:
a0:2f:4a:6a:f7:b0:32:49:d9:8b:c1:1d:fb:fe:d6:09:33:7b:
2e:e7:c3:c0:29:db:49:fe:ff:f7:d7:fa:91:ec:0d:d1:b2:47:
8e:39:61:85:d5:33:b1:bd:5d:09:f0:b7:a4:8d:a7:11:ca:91:
cc:99:d2:3b:49:72:25:11:58:6c:b4:38:ec:aa:ec:b5:47:56:
27:a4:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:49:58 2025 by rpki-client