Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
File: kTOsvs_e7PTaOiIigng09bc6-qc.cer (raw, json)
Hash identifier: RshazEpr9yWrYfYceLMNUnbaWjvwIf+kLi+GkWw5CtY=
Subject key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6652
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Jun 2025 05:14:04 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26194 (0x6652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 11 05:14:04 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:dd:15:fe:35:f4:45:86:a7:3d:fa:37:72:
db:b3:75:f2:c5:d2:d4:e8:16:2f:fe:0f:68:b2:98:
e6:33:9f:b8:48:2c:13:7c:c0:b1:d5:b2:c1:92:a2:
92:fa:5f:02:f3:ba:02:1e:5a:31:0e:4f:b6:2f:93:
4c:9e:cd:f2:3f:0f:ef:d0:ec:d6:82:bb:60:4d:57:
2e:66:69:36:2d:dd:7c:71:6f:0e:a0:a9:bd:74:44:
8a:15:d7:75:03:a4:b4:19:fe:87:eb:c2:7d:3f:1e:
a2:62:e8:1b:e0:0d:8e:8d:c5:87:16:d3:54:60:d9:
a7:54:d7:9a:61:01:b2:89:63:79:bc:61:df:e3:58:
63:06:a9:3e:8d:74:6a:fc:ba:2e:8e:d2:92:db:fc:
d6:a3:03:70:d6:8d:82:68:45:d4:8f:43:d6:30:e5:
1d:a8:f8:54:5a:8f:8e:89:06:2a:cd:12:85:12:b1:
2a:94:b8:6f:55:df:b2:68:1d:52:9e:53:a8:e0:19:
b0:94:8a:6c:d9:59:d8:f3:79:f7:97:fc:1d:e7:4d:
3d:73:32:16:49:23:c0:7d:1c:4f:98:af:fe:25:5e:
ad:7a:b9:5f:1a:76:80:e0:10:9d:7e:ab:a1:88:5a:
90:c2:7b:46:f7:9f:b9:80:e5:a3:5d:65:13:22:c2:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.180.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:9a:2f:af:df:d5:76:74:33:0f:91:5e:d1:9b:11:39:ee:97:
7f:2a:0f:d2:9f:b7:3c:3c:b4:25:5e:77:f2:2e:48:15:94:65:
7c:1c:ea:fd:9b:56:ad:0a:d5:71:73:1b:de:d2:c1:bf:55:08:
67:08:aa:4e:77:0d:97:85:9f:60:51:4e:d0:46:99:35:cb:c3:
b2:eb:34:72:dc:94:b4:fc:14:7c:86:d9:16:76:ce:c4:93:82:
62:c8:eb:15:c9:ee:87:06:24:6d:ac:16:30:8f:61:44:3b:ed:
f1:01:f6:68:a5:bd:39:59:87:f3:52:e9:b7:8f:54:f8:80:71:
63:94:8f:ac:58:f8:1f:44:fb:39:fc:e0:1c:d3:89:9e:77:bf:
3f:38:bb:31:68:bd:e3:3a:1e:c4:5d:fb:34:5e:3f:87:69:85:
63:c4:96:d6:eb:48:d9:50:7d:ec:1c:06:7f:b2:f5:87:ee:f7:
75:99:8f:bc:aa:a7:2f:07:a0:33:c5:26:cc:54:d0:9d:47:13:
27:44:d8:68:90:fe:19:e3:93:c7:a1:60:be:ec:d6:d4:24:31:
9a:26:9e:1b:6d:42:b8:81:e1:b5:2b:e7:a4:cb:cf:aa:3e:a6:
f7:18:63:51:de:29:2a:67:6f:07:af:84:58:ac:74:b7:aa:dd:
a8:7b:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:54:50 2025 by rpki-client