Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
File: cBtV7SDYPjSNgjfON1l5WevAGCQ.cer (raw, json)
Hash identifier: imo3d2V6/mHc+lumA2mUUr/NZgSSX9w0ztFrwfrPRdQ=
Subject key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6958
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Aug 2025 09:06:28 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 162.105.0.0/16
IP: 166.111.0.0/16
IP: 192.124.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26968 (0x6958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 1 09:06:28 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:ba:84:c4:6b:3e:55:99:e3:10:6d:b7:83:
9e:a7:c0:c2:85:48:b5:56:f6:7b:30:e1:a4:3d:fc:
d0:61:8f:69:50:7b:9c:37:69:84:78:72:a9:58:c7:
f6:a0:ae:df:c2:4d:c1:28:51:15:47:70:87:2b:4e:
21:19:32:75:c0:da:6a:02:5e:a2:b0:86:ab:48:76:
68:a0:2e:5d:0c:94:87:eb:ae:36:79:35:37:0d:47:
bf:b7:20:44:c0:e6:d2:9a:de:83:2b:8c:95:3b:dc:
ee:a3:e5:b8:79:a9:48:b8:34:e7:f4:1d:2a:ec:52:
60:83:6a:db:11:ed:7a:b5:b2:a8:61:05:52:eb:5e:
7d:bf:4f:13:b6:9b:8b:4c:96:39:8f:ad:59:97:64:
23:ae:c1:8f:60:85:22:0e:8a:1a:50:f9:df:f4:ad:
0c:5b:70:53:b0:60:1b:65:a2:fe:95:8b:6c:c7:a5:
4e:e1:31:7b:10:b3:02:36:ab:05:28:1b:d2:5e:8b:
a0:dd:2b:14:63:b1:0c:db:f7:75:52:a3:ef:f5:5a:
27:86:2d:00:42:63:f1:cd:c1:22:79:f5:91:9d:a5:
9b:de:bd:fc:19:72:d2:ad:af:09:76:97:b1:de:8f:
eb:99:ee:a5:16:43:3e:5d:dd:09:d0:97:46:0f:85:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.105.0.0/16
166.111.0.0/16
192.124.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e7:91:cd:54:df:e9:2e:05:48:aa:2e:17:f5:4d:5c:74:3b:
63:2c:95:83:7c:8b:63:e4:ac:80:6d:54:64:d5:d9:0c:13:74:
85:09:9c:6e:1c:38:f4:13:43:5e:10:b3:d6:33:5e:f9:02:21:
ec:df:2f:00:6a:15:61:33:d6:de:9a:ac:45:42:b8:e1:e9:a5:
4e:57:a1:28:13:60:cc:9a:e0:a4:83:45:0f:a8:1d:24:06:e7:
a4:3b:ce:cb:e0:2f:52:93:51:9e:26:33:37:49:1e:ed:aa:7c:
a5:42:8b:7c:cf:ac:51:2d:64:ea:08:79:e3:27:37:c0:89:62:
f9:cb:60:c7:93:68:83:27:9b:5e:c0:1a:cd:80:a5:87:66:7b:
42:1f:42:6e:2e:c8:17:4c:60:22:f6:43:96:44:fb:47:db:81:
a3:12:58:f5:fa:7c:21:30:83:bb:bc:a7:7e:c2:10:be:2a:be:
2f:c1:d2:04:04:18:87:b0:75:b5:f7:08:9c:d6:92:28:4e:02:
0c:84:e3:43:8e:e9:24:68:dc:f9:f0:5c:f5:19:59:3d:c0:e2:
47:c7:4a:88:c1:7a:2f:8f:bf:02:66:e7:9d:88:7d:2c:67:16:
8d:8b:fe:d0:fd:1d:da:8c:fe:e4:e1:be:4c:dc:39:ce:86:99:
fe:db:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:46 2025 by rpki-client