Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.cer (raw, json)
Hash identifier: ivI0C51H24B6644H3k33/Y0qdxiSqC/WT7DHyQcTuBo=
Subject key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 68BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Jul 2025 03:45:01 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.213.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26815 (0x68bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 24 03:45:01 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:f0:6e:2c:f7:c9:77:e3:3f:37:c3:65:97:
04:b8:02:3e:6b:fb:06:a8:b4:3f:b1:49:f4:13:af:
42:95:5d:df:18:77:5f:be:c3:5e:73:3b:e3:e8:5b:
18:6f:48:d1:ab:5a:a7:39:ac:40:5a:b9:37:3a:0b:
d6:21:65:6c:c2:6a:a6:23:d6:a7:26:95:de:34:00:
28:f0:79:00:81:c2:14:b4:1b:65:b1:11:9b:90:32:
cb:ad:de:e9:c2:38:9e:23:9a:4b:07:3c:80:e3:6c:
09:b9:d3:5b:ce:7c:d7:ef:4d:99:09:2b:6a:2f:14:
b9:81:29:fd:c3:4d:52:d1:d0:37:b5:0f:bb:de:44:
1d:cc:0f:4c:41:f8:6b:1d:6a:2a:b9:ee:7d:eb:ef:
46:85:7a:13:f8:d5:dd:1a:83:7a:7a:5a:5a:29:d6:
a8:ae:c7:82:77:6c:f6:0d:31:d6:7d:38:12:2c:aa:
fd:3f:a3:61:6f:50:e6:7c:d7:42:f2:94:b2:0f:96:
cd:ce:90:1c:34:ed:68:f5:bb:a5:98:3c:4c:83:2d:
56:3f:c9:ff:42:8c:a8:42:5e:61:cd:82:a3:12:f5:
10:ee:1f:eb:8d:4e:a2:2d:48:fa:72:07:e6:60:ea:
d5:4d:b4:6e:ce:9c:bc:91:55:e8:9d:49:3b:5a:84:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:dc:29:9f:86:da:25:25:65:1d:b0:77:30:6c:93:11:74:06:
8a:ba:c3:ef:56:25:fd:90:77:4a:2e:f0:c0:dd:9a:7d:48:38:
25:a7:72:e9:5b:db:9f:3e:49:f0:1c:a2:f1:7a:4d:d5:0a:34:
f2:6e:b5:f5:26:6e:25:4e:48:56:ba:66:65:4d:a1:54:f1:56:
61:b3:13:7f:da:66:84:c7:d0:40:34:8d:f0:9c:ac:75:67:ac:
af:ba:66:20:12:8f:ce:d2:d0:9a:73:f3:03:ca:a4:48:fe:4f:
f6:ba:1a:3d:11:68:1d:c5:63:ab:1d:a1:a4:e9:51:ef:0b:08:
5a:ab:8c:31:82:64:5b:3a:99:77:3d:be:c8:c0:52:93:07:ec:
f3:94:18:ba:68:07:cc:24:be:44:d0:15:9e:d2:fb:53:06:a0:
d9:10:55:f6:cc:3b:09:68:58:18:0c:4a:f7:9d:7a:36:e3:1e:
0a:d1:09:c3:16:4a:31:98:a6:fe:42:f9:d3:df:b0:ac:91:7e:
a7:cc:5e:db:39:12:b9:42:56:ed:2e:05:1e:05:00:07:7a:e3:
0c:36:9e:f9:d1:d7:3a:3c:98:dd:1e:cc:4c:84:12:d5:5e:5e:
88:94:14:1f:8d:37:01:35:6f:9e:17:9d:ea:c9:0b:de:66:d6:
9b:f8:0a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:36 2025 by rpki-client