Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
File: kBpDycSAhnF-284lXAKi8DU9qvo.cer (raw, json)
Hash identifier: gx6wvwMhJVflRa96cy8hunwiUgfn1Y6v1K3F5rQkMk4=
Subject key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 697A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Aug 2025 16:40:16 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 137.111.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27002 (0x697a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 4 16:40:16 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:50:4a:7c:b6:f0:63:aa:02:dd:eb:b4:1f:
68:8d:5f:02:de:d9:28:23:76:4d:1d:e3:cd:f5:e7:
b9:b1:d8:88:5b:6d:b2:8a:39:d5:95:3e:5f:61:20:
7b:32:39:a7:35:86:af:12:82:bb:20:fb:d4:7d:0e:
98:3e:10:f5:8d:bc:08:0c:07:57:53:0c:bf:a2:24:
f6:35:6c:b6:92:a8:90:5e:93:ee:6e:b9:14:ce:9f:
e2:47:a2:16:bc:61:b0:27:23:b3:fe:00:d2:77:0f:
b6:12:4e:43:a4:0e:4d:d6:8d:17:f4:64:17:a2:a8:
73:f3:f4:6f:a7:d2:db:e5:7b:27:6f:2b:0a:ac:53:
13:ff:13:73:df:e1:06:ce:0d:35:ce:11:79:f5:43:
d1:b7:7b:e5:89:8e:b8:bf:ee:9d:6f:65:ca:c8:c4:
8a:42:43:90:3f:66:6f:aa:43:e9:d5:5f:93:70:6d:
9b:09:05:5b:fd:4e:ee:e0:42:b9:a6:3d:9c:df:9b:
4e:ea:a0:2e:7e:7d:2e:56:6e:21:51:ce:a3:ff:6f:
67:5f:6d:26:53:e9:67:f5:da:8a:4f:e1:a5:30:b8:
4b:03:3a:1b:5d:94:4d:9f:8a:f5:4e:13:fb:0f:47:
5e:78:0c:ce:b4:1a:33:fa:c4:5e:e6:5a:69:1d:05:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.111.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:9e:04:f0:3b:eb:a9:c9:9e:e6:b3:0f:5a:c0:7a:ac:8a:86:
f6:69:15:b8:d1:a4:ce:8b:f8:f6:bb:04:8f:3f:e6:1f:23:16:
7e:b6:58:90:ed:24:2e:47:26:86:33:6d:61:02:95:a8:2b:72:
3d:70:b1:e4:87:ec:43:e6:38:7e:ea:ce:eb:35:95:bb:3b:89:
98:2a:95:a9:83:10:02:09:37:10:6e:81:74:e0:6f:c5:c7:15:
ea:8a:63:2d:64:4b:8e:06:05:d3:78:0d:c5:13:74:fc:d3:89:
15:3f:93:ec:ef:17:6a:78:bf:d7:db:4e:96:2d:25:d0:69:36:
fc:ad:e7:09:b0:7e:38:ec:76:f9:56:a6:8f:32:95:45:74:fc:
46:6a:93:31:21:8c:49:48:d2:e2:6f:83:59:3d:f8:57:d7:ba:
7f:4a:fd:db:ec:03:cf:af:57:07:cf:37:d0:56:7a:72:27:a7:
81:5f:8f:49:21:52:e2:d7:63:d0:0a:5a:9a:f2:7e:77:3f:12:
5e:32:7b:34:b7:50:a3:e5:0d:7e:ad:16:c0:a8:d9:06:10:b0:
7a:b9:28:2c:32:e2:28:e4:b0:e8:a1:f0:23:37:7b:26:5b:49:
b2:72:b6:89:d6:78:e0:63:7b:18:d6:ea:9e:c7:bf:0e:ec:0e:
52:be:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:11 2025 by rpki-client