Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
File: nUVn--JSxmFkKqM-eASKhxf6fLM.cer (raw, json)
Hash identifier: HRmy7JnOrnHaM0HdWAir1HUL38h1dQ30w20bBuvuIO0=
Subject key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6909
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Jul 2025 08:04:48 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.132.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26889 (0x6909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 29 08:04:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:e1:72:f4:a9:87:68:e0:09:5b:94:e0:24:
da:9a:6a:31:63:30:47:a8:23:3f:71:51:08:15:8c:
9e:42:7f:1d:55:98:04:6f:e1:43:82:2a:60:5b:3d:
86:c1:21:88:30:07:3e:38:7d:b7:4f:e1:80:37:b8:
1d:b6:85:f5:4a:42:dc:de:24:ce:c7:90:00:85:61:
ab:fd:4d:51:52:08:d2:28:18:50:04:6d:eb:62:bf:
d5:7a:a1:68:5a:b2:a1:66:f5:9a:db:60:e1:f1:b8:
0a:16:f4:b5:cd:cd:66:83:f4:bd:30:9b:58:5a:03:
1b:ec:60:c1:0d:82:91:5c:10:ea:a8:f7:d0:89:07:
64:b2:f7:7d:32:28:50:4b:26:b3:ff:01:2e:ff:91:
9e:1e:a7:e6:3e:fa:44:f8:36:18:e8:2f:0f:a0:79:
38:f7:0c:fb:9d:94:6f:b2:8a:1a:87:94:fc:40:9c:
ba:61:ff:e9:1c:aa:37:53:4e:ff:c5:88:b2:9d:fb:
99:c9:38:fe:05:13:10:15:e6:39:16:4c:cf:87:72:
7c:26:8e:8a:1b:38:2d:ce:b0:e4:50:65:ad:03:25:
81:f0:37:1a:0c:0d:91:47:6e:13:a7:a1:db:52:db:
fc:9c:b8:ca:4e:37:77:0a:b2:aa:3e:77:fe:6c:4a:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ac:bf:5f:c6:66:dd:11:e4:70:f8:a4:82:b5:c5:1b:08:0f:
39:58:bc:12:46:65:84:23:e5:fd:d4:5f:bd:c2:6f:08:15:5c:
50:de:95:ca:89:45:ab:e5:bd:73:56:95:c4:34:c5:72:25:a1:
d5:af:54:b2:8e:ef:67:a4:05:5c:38:be:18:4b:ed:f1:2f:49:
26:0a:e6:be:e6:60:b3:b2:2d:e4:d5:99:8a:d4:01:c9:69:f8:
8f:bb:7c:4b:22:d9:93:40:95:48:c6:20:cd:10:4c:d3:e3:3d:
c9:f0:bb:1e:af:b7:db:90:ed:ec:20:35:48:f9:28:4d:73:e2:
3e:d8:0e:1c:90:5d:79:8a:67:85:3f:e3:54:63:0b:9a:39:71:
b2:49:77:6a:03:3d:7e:21:da:c1:2f:d1:d0:3d:22:c7:d6:7f:
9a:b6:3c:04:b4:3a:fb:79:0d:4b:b8:a9:43:0a:f3:96:92:34:
ca:31:9e:75:2f:fc:d7:ca:c3:ea:aa:ab:05:56:ba:7d:a6:1d:
c3:d9:73:21:6e:ca:36:8b:09:f2:70:d8:63:b7:e5:10:c6:db:
dc:d2:b4:7c:17:57:bc:b0:17:8b:81:7d:a7:1a:35:35:57:70:
70:59:ff:79:62:21:d4:b0:c4:0e:09:b9:6a:3a:87:ed:32:f7:
a1:9a:47:b7
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICaQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNzI5MDgwNDQ4WhcNMjYwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3M0ZBQzExMC8GA1UEBRMoOUQ0NTY3RkJFMjUyQzY2MTY0MkFBMzNF
NzgwNDhBODcxN0ZBN0NCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANPf4XL0qYdo4AlblOAk2ppqMWMwR6gjP3FRCBWMnkJ/HVWYBG/hQ4IqYFs9hsEh
iDAHPjh9t0/hgDe4HbaF9UpC3N4kzseQAIVhq/1NUVII0igYUARt62K/1XqhaFqy
oWb1mttg4fG4Chb0tc3NZoP0vTCbWFoDG+xgwQ2CkVwQ6qj30IkHZLL3fTIoUEsm
s/8BLv+Rnh6n5j76RPg2GOgvD6B5OPcM+52Ub7KKGoeU/ECcumH/6RyqN1NO/8WI
sp37mck4/gUTEBXmORZMz4dyfCaOihs4Lc6w5FBlrQMlgfA3GgwNkUduE6eh21Lb
/Jy4yk43dwqyqj53/mxKqicCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSdRWf74lLG
YWQqoz54BIqHF/p8szAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNGQUMvQUZGNTYzRTYxMDE4MTFGMDgwQkNDMzQ4QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTczRkFDL0FGRjU2M0U2MTAxODExRjA4MEJDQzM0OEM0RjlBRTAyL25VVm4tLUpT
eG1Ga0txTS1lQVNLaHhmNmZMTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKC7hDANBgkqhkiG9w0BAQsFAAOCAQEAD6y/X8Zm3RHkcPikgrXF
GwgPOVi8EkZlhCPl/dRfvcJvCBVcUN6VyolFq+W9c1aVxDTFciWh1a9Uso7vZ6QF
XDi+GEvt8S9JJgrmvuZgs7It5NWZitQByWn4j7t8SyLZk0CVSMYgzRBM0+M9yfC7
Hq+325Dt7CA1SPkoTXPiPtgOHJBdeYpnhT/jVGMLmjlxskl3agM9fiHawS/R0D0i
x9Z/mrY8BLQ6+3kNS7ipQwrzlpI0yjGedS/818rD6qqrBVa6faYdw9lzIW7KNosJ
8nDYY7flEMbb3NK0fBdXvLAXi4F9pxo1NVdwcFn/eWIh1LDEDgm5ajqH7TL3oZpH
tw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:34 2025 by rpki-client