Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
File: aMIYjATCDkkjq7YttIckmDVLSv0.cer (raw, json)
Hash identifier: mlzq+LlXPJ17OBi2MgN112ccZYs8g32v8YkU1sWC3E8=
Subject key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6654
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Jun 2025 06:21:53 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 18:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26196 (0x6654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 11 06:21:53 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:07:c5:41:ce:f3:7f:a7:21:5c:e4:39:e5:
32:29:e2:6a:d9:2b:db:ec:03:ec:57:e1:66:d9:12:
0a:33:40:8f:7f:b2:1e:47:a6:d1:ae:52:31:c8:98:
6d:69:4b:bc:f2:e0:b7:02:6f:8c:f3:d5:33:d9:4a:
70:0d:ae:c7:22:1f:8e:c3:8f:e9:6c:a2:c0:c0:3b:
ba:80:7e:13:d7:9f:56:50:3c:63:7a:e1:37:f4:f3:
c8:e0:a0:6a:83:97:59:2f:8b:14:1c:2a:8f:45:fe:
96:37:d4:fa:20:44:fe:a1:34:ca:1b:dc:78:0e:c6:
07:9d:72:7e:b0:f4:f7:38:c3:57:85:b1:c9:49:cf:
3a:1e:81:e3:a2:31:97:10:94:1b:25:9d:4e:be:c1:
47:84:8e:7f:fd:69:38:2c:8f:8b:d6:ea:e6:7b:c5:
66:99:28:68:06:4a:ea:53:11:67:d4:bb:db:d3:9e:
d2:f6:2b:1f:d1:3b:98:f5:e4:5b:89:81:12:f6:76:
39:2d:a0:cd:47:c6:fa:82:7f:26:e1:26:22:9d:df:
f6:eb:00:e8:7e:ff:42:20:78:55:75:bd:f2:95:ab:
b1:0e:87:6d:02:aa:51:9d:0a:57:fa:ac:78:c9:98:
4d:f7:1f:74:61:c9:94:a9:44:7e:c4:a5:a0:34:4a:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.240.0/23
Signature Algorithm: sha256WithRSAEncryption
51:46:a5:b1:fd:5c:3c:ec:9f:19:ae:ea:7a:27:14:24:46:55:
b3:a8:05:4f:9d:6c:3a:86:69:e5:c7:12:b4:87:97:78:f0:e9:
6a:f6:ee:f2:20:71:1c:df:08:13:3b:13:49:59:70:6b:ff:3b:
58:ed:94:6e:de:2f:2d:1e:ad:79:6b:6b:60:0e:f2:4e:f4:f0:
71:3b:2f:f3:83:36:a9:ff:26:48:ff:37:99:06:7b:19:ef:a4:
f3:42:f7:22:24:71:54:b6:3e:4b:56:a4:37:76:a0:a9:bc:8b:
89:1e:9a:a2:48:8e:9f:b8:a8:99:39:8f:d7:58:ff:cc:13:78:
24:04:25:42:23:de:f9:ec:05:a5:b9:57:96:9d:3e:dc:1d:98:
aa:43:1a:a4:24:bf:57:3c:7a:b6:a1:45:aa:63:06:da:4e:3b:
82:cd:10:fa:5b:f7:ae:27:a4:ae:df:54:ec:19:4e:7f:de:bf:
cc:eb:9b:bd:24:cd:3f:b8:d5:93:d9:0b:b2:06:90:5f:80:1c:
6e:e7:e4:ba:be:ef:c7:c0:ba:a1:ef:24:66:14:e7:13:af:e8:
12:a2:86:40:b9:e3:d4:0e:2d:f7:2f:5b:db:67:35:9b:3a:9b:
a6:a5:db:44:24:af:f4:21:fd:8e:ab:09:56:95:fa:05:09:aa:
4c:91:66:23
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNjExMDYyMTUzWhcNMjYwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTExNzUwQjExMC8GA1UEBRMoNjhDMjE4OEMwNEMyMEU0OTIzQUJCNjJE
QjQ4NzI0OTgzNTRCNEFGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AM5sB8VBzvN/pyFc5DnlMiniatkr2+wD7FfhZtkSCjNAj3+yHkem0a5SMciYbWlL
vPLgtwJvjPPVM9lKcA2uxyIfjsOP6WyiwMA7uoB+E9efVlA8Y3rhN/TzyOCgaoOX
WS+LFBwqj0X+ljfU+iBE/qE0yhvceA7GB51yfrD09zjDV4WxyUnPOh6B46IxlxCU
GyWdTr7BR4SOf/1pOCyPi9bq5nvFZpkoaAZK6lMRZ9S729Oe0vYrH9E7mPXkW4mB
EvZ2OS2gzUfG+oJ/JuEmIp3f9usA6H7/QiB4VXW98pWrsQ6HbQKqUZ0KV/qseMmY
TfcfdGHJlKlEfsSloDRKB9kCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRowhiMBMIO
SSOrti20hySYNUtK/TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc1MEIvNUIxQzFGQUU0NjhDMTFGMDg0QjZBNTM5QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE3NTBCLzVCMUMxRkFFNDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRD
RGtranE3WXR0SWNrbURWTFN2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVj8DANBgkqhkiG9w0BAQsFAAOCAQEAUUalsf1cPOyfGa7qeicU
JEZVs6gFT51sOoZp5ccStIeXePDpavbu8iBxHN8IEzsTSVlwa/87WO2Ubt4vLR6t
eWtrYA7yTvTwcTsv84M2qf8mSP83mQZ7Ge+k80L3IiRxVLY+S1akN3agqbyLiR6a
okiOn7iomTmP11j/zBN4JAQlQiPe+ewFpblXlp0+3B2YqkMapCS/Vzx6tqFFqmMG
2k47gs0Q+lv3riekrt9U7BlOf96/zOubvSTNP7jVk9kLsgaQX4Acbufkur7vx8C6
oe8kZhTnE6/oEqKGQLnj1A4t9y9b22c1mzqbpqXbRCSv9CH9jqsJVpX6BQmqTJFm
Iw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:55:42 2025 by rpki-client