Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
File: g8kBUb4XghT8FnWDNNO21Sd6PL8.cer (raw, json)
Hash identifier: HiANZH0PRO3s54RIsZSmZYg3xbXo7UId3KmUAzMMjdI=
Subject key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 65FE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Jun 2025 05:35:51 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 160.20.132.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26110 (0x65fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 3 05:35:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:6b:c1:c7:15:67:73:0a:62:ab:15:35:bb:
d7:46:45:6c:42:34:4d:18:0f:e7:8d:ca:89:c2:fd:
d7:2d:aa:56:af:14:b7:fa:d6:ea:93:b8:fd:5f:6a:
d9:dd:c0:57:b1:47:1b:55:69:d1:79:db:30:12:ad:
f9:04:d7:5d:fa:c4:44:25:fd:12:2d:75:7e:7a:ff:
c8:0f:8b:65:ca:ac:38:be:20:48:f9:a2:76:fb:82:
a9:60:0c:2a:99:cd:5e:4d:bd:af:90:7a:e9:1b:6c:
49:79:a8:fc:c5:11:e1:67:a2:bd:5c:02:29:db:49:
9e:dd:20:9b:c1:24:5f:fc:77:92:15:47:9c:39:e3:
e6:c8:a0:dc:11:d9:a1:c8:4e:cc:62:37:85:3a:51:
ca:2d:01:23:83:dc:f7:b2:51:d6:88:8f:33:bc:6a:
47:d5:67:20:c9:e4:c5:a9:bb:da:3e:70:e9:e6:f5:
05:66:25:49:79:06:70:df:94:0e:14:fd:e5:40:4c:
b0:6d:e9:d0:31:1d:62:f6:ba:01:03:34:0e:22:9b:
08:44:bc:6a:f6:75:3a:e4:f0:48:86:20:96:65:0c:
02:aa:98:8a:22:6d:fb:ad:37:7b:0c:e8:a1:7f:a3:
6f:b4:d5:7a:4f:68:24:f8:65:66:5e:06:1b:97:54:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.132.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:28:d8:7a:5c:51:34:83:6c:50:aa:e9:e1:b1:96:d5:47:ff:
dd:2e:3a:35:b4:1d:e7:f3:f1:d0:34:41:1c:f3:3f:4d:f1:ee:
89:43:2a:8f:ed:3d:37:cf:ee:33:23:59:55:db:c4:bf:58:1b:
29:61:28:84:16:f6:67:73:ba:63:93:fd:7f:7d:c0:af:44:a2:
9a:9a:8a:5d:e5:95:33:3b:5e:8b:c8:5e:7c:ff:9b:0d:d9:38:
ee:be:d1:8c:25:3c:7c:0b:5c:89:7e:19:f7:af:0d:19:29:f4:
3c:4e:42:ad:d4:c6:b5:38:55:a5:67:0c:19:a2:1a:c4:84:2e:
fa:b6:fe:59:11:63:a1:a3:3d:7f:f7:69:1a:60:2f:41:40:cf:
47:12:0e:e1:a4:d2:d2:91:9d:df:1f:9e:c0:95:cd:f3:db:e9:
d6:fb:79:e2:73:bd:23:61:3c:a9:d1:7d:48:90:9c:01:ef:6d:
cf:8a:07:69:25:bd:ab:44:bc:b8:bd:75:14:7d:20:ca:65:f2:
4a:01:29:77:1b:74:eb:9f:e7:33:ce:7f:0f:77:3f:8e:a9:2a:
ac:eb:dd:d8:b3:65:0d:e8:0e:5e:0b:47:65:90:a3:93:8b:9f:
d5:5d:a2:fb:27:18:c0:eb:fc:3d:52:aa:dd:1e:ef:eb:27:b9:
2e:2a:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:36 2025 by rpki-client