Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer (raw, json)
Hash identifier: uUMqK3vjaZrb1zJRB58Yk4/7h053rhY+Q76lzXJMKXY=
Subject key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6600
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Jun 2025 05:40:38 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.8.0/23
IP: 168.152.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Jun 2025 07:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26112 (0x6600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 3 05:40:38 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:e2:28:42:e3:e5:68:96:b0:67:54:30:7b:
59:f2:32:21:3c:9c:7b:c5:50:22:f6:f4:e0:7a:40:
a1:d9:b9:26:17:ac:74:58:97:42:33:94:10:7c:f0:
2e:2d:61:da:52:89:e4:eb:d6:51:84:a5:36:d0:6a:
ce:99:b5:e5:af:e8:f4:14:26:bc:86:4e:ab:a6:20:
1f:96:d3:89:26:85:ce:01:e8:cc:11:a2:e3:3a:fd:
6e:57:80:ca:84:2c:2a:65:69:72:52:57:67:e5:ad:
09:4c:15:20:2b:fb:d3:76:af:e0:74:79:5e:27:6d:
31:ed:71:80:ed:29:34:42:a4:fc:36:37:87:2f:54:
de:d6:51:c4:be:06:24:60:4d:ef:b0:fb:3f:f6:9d:
e0:2b:e3:5a:54:4b:71:4a:62:aa:90:50:66:ba:42:
6e:45:d1:b8:ae:6e:b1:e4:1f:07:7b:1d:48:a6:64:
5a:6c:5a:29:9f:8e:79:0e:f7:56:3f:97:ed:a4:f7:
1c:6b:48:69:d0:c2:e1:b9:08:0d:99:60:ea:0e:da:
ab:14:b3:7c:35:b3:39:fa:4c:d5:d4:4e:bf:21:c6:
da:05:5a:e4:bf:b5:73:40:97:98:1b:01:20:19:52:
f2:ee:2c:0b:54:64:6d:9b:9f:60:a0:ff:19:48:85:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.8.0/23
168.152.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:16:5a:b6:e6:dc:8b:32:fc:ea:03:5e:12:70:ff:91:88:38:
1f:ca:76:74:ad:ae:1e:d2:6b:82:80:c4:f6:91:5a:8c:12:59:
69:06:96:4f:50:0a:b8:67:38:e0:59:dc:52:46:96:31:ac:f2:
36:36:48:78:cd:31:43:74:31:92:a8:f1:6e:c6:06:fd:b0:8e:
e0:77:93:13:c7:a0:13:9d:d6:3d:29:51:8d:49:1d:a7:83:24:
70:ac:9a:46:fe:da:ad:7a:2a:6e:96:4e:df:6e:43:e8:d6:b5:
20:6d:5d:ab:d8:1d:1d:81:7f:4b:8d:72:4d:8c:33:4e:0f:d5:
a4:50:88:6a:03:b4:91:b6:2d:63:5f:25:a7:a2:c9:94:b7:42:
7e:fc:d6:53:9b:91:87:b6:9d:98:2a:ec:c8:bc:9e:ae:90:44:
f0:8d:26:af:d1:78:d1:39:5c:b7:98:39:8c:b6:0d:8d:d2:ed:
71:1e:3a:74:9b:47:47:3a:76:6b:26:39:f9:88:5c:fc:39:a7:
99:8e:e8:cc:85:6a:70:97:41:0a:cd:e5:84:e0:20:46:96:c5:
d2:3f:63:24:16:b6:25:ae:4e:24:03:c5:81:19:98:50:a9:9f:
ec:c8:6f:da:a3:af:4e:2c:ed:ca:51:cc:50:fe:ba:16:69:f4:
f4:40:75:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:38:26 2025 by rpki-client