Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
File: fiRDENekVusSe5JsQvJteems24g.cer (raw, json)
Hash identifier: ydVWcyZ87Ds08It3v6ObKEAv3VxR7xijT3RgqdQv5mg=
Subject key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Jun 2025 20:30:25 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 169.136.64.0 -- 169.136.191.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Jun 2025 10:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26281 (0x66a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 17 20:30:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:a3:fb:1b:9c:3f:a6:2d:3a:c2:21:f4:f0:
b4:7a:f8:90:3a:c8:a1:57:e2:f7:4f:b6:6d:fa:7f:
96:de:ac:5a:88:b8:8f:b5:a2:1d:e1:42:d2:3b:12:
1c:54:32:86:b2:0b:20:82:43:26:81:28:3f:35:7f:
08:a5:76:79:2f:e1:f9:c0:a5:70:49:ed:d7:3d:74:
95:61:da:37:df:31:16:ca:b1:f8:aa:1a:cb:4d:ba:
31:c7:c8:8d:28:db:79:10:ba:e0:dc:a1:c0:48:ac:
2f:4b:a2:4d:9e:69:44:ba:d8:3b:ad:cc:de:73:bb:
5f:0f:90:74:e6:7a:8c:ff:09:1f:6d:79:90:0b:20:
27:95:7f:ef:fb:74:b1:80:41:6d:9b:f2:2e:07:5e:
fb:90:8f:b8:85:09:30:17:ee:f8:17:a7:c5:d5:be:
d1:9a:01:9f:33:90:c0:ea:24:3e:1c:46:e7:3e:95:
6a:50:17:31:7f:0e:e9:5f:85:ad:27:82:2b:9e:48:
c9:d8:e3:5a:ab:27:0a:8a:5c:dd:e4:be:49:0e:37:
f2:c8:af:89:bb:15:b5:e4:0e:b0:d6:5f:ab:92:40:
80:3f:0d:4c:4b:6d:20:9d:d4:28:ad:74:f0:4e:09:
23:0c:e4:95:2b:70:c8:27:b1:f8:cb:54:6c:92:55:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.64.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
5d:3d:f3:17:2d:e4:5b:cc:11:5f:de:5c:5a:25:20:b2:30:45:
9e:96:ff:87:1c:d5:32:66:6c:d8:4c:04:76:1a:ff:dd:a1:e9:
15:8d:8f:e4:a4:7d:3c:1e:f3:eb:61:65:cc:c2:17:15:92:b2:
64:f2:b0:a6:39:4b:ad:a4:db:29:7d:98:5a:ec:21:01:ca:55:
56:a8:17:ba:b0:ab:4c:1d:cf:8b:db:a4:00:f5:11:e1:7d:aa:
89:c5:c1:4d:7a:c0:91:5f:fb:6b:78:83:c5:92:43:4a:7d:0f:
06:00:49:cf:46:09:16:0a:a5:23:e0:dd:cb:93:d0:7d:ab:3b:
d1:10:88:f8:a1:6f:e2:36:11:d6:19:0e:3a:a8:40:5d:c6:18:
fc:66:02:a5:ed:b4:3f:f9:62:df:70:6b:ca:e7:ae:5a:fa:db:
da:01:5f:65:17:9a:35:07:2b:5a:bd:d0:86:ad:3d:1c:b5:12:
73:26:ed:02:fe:00:23:95:75:59:96:5b:7b:8c:58:89:9e:91:
b4:53:24:8c:be:bd:fc:66:77:c2:e4:84:b6:9f:3d:33:e5:bb:
cf:e3:74:05:b2:35:96:9c:86:b0:95:e3:e8:9b:c3:52:06:44:
1d:68:cb:1e:77:46:e2:61:6f:48:52:0a:9e:37:05:9e:15:99:
db:8d:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:30:02 2025 by rpki-client