Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
File: uoXZHSSsqengMR5VLb83WXY6Yro.cer (raw, json)
Hash identifier: vvlNvtFeHdX+V3jKwW5y/KWU7B5/2fWbZFJd5LfROAI=
Subject key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6951
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Aug 2025 07:15:21 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.25.230.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 12:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26961 (0x6951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 1 07:15:21 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:35:be:84:96:f8:b8:40:83:71:95:0f:2d:
82:03:c6:b9:be:5b:84:da:80:9b:3d:31:19:c6:4a:
ae:2f:76:0b:eb:ca:0a:6f:66:7e:9b:e9:69:ed:75:
81:79:87:04:56:07:f7:89:d7:ef:60:d2:80:bb:54:
65:ae:53:06:84:81:e5:20:d5:70:51:3d:b1:7a:e8:
4d:1a:d8:d8:3e:cc:b2:e6:55:e5:af:b2:fe:39:c1:
0e:21:6b:aa:af:dd:4f:37:f9:85:00:06:00:a1:6f:
e6:7e:c9:50:1c:89:cd:6b:b7:c3:d6:b1:63:c8:41:
0e:aa:0b:5d:62:71:ae:cd:9d:fb:08:99:10:51:b6:
e4:1b:ec:90:77:a3:f9:32:94:1b:62:cb:28:8a:5b:
ff:ca:eb:aa:8d:58:7e:9a:56:a1:12:8c:6b:ce:f7:
07:a7:de:51:9f:b4:ed:14:d1:3d:e0:b7:1d:f1:3e:
a8:fc:f2:93:44:69:b1:87:60:cf:c7:b8:b4:83:c3:
46:64:36:5d:a3:86:22:72:c2:0f:69:7a:47:5e:5f:
e1:45:9d:c0:ce:c2:18:40:ac:e9:ec:55:df:cd:1a:
0f:c2:38:c8:05:59:77:c2:27:3d:2a:13:24:c4:b9:
09:66:bd:d3:94:1b:fb:83:19:95:99:0d:75:c9:c3:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.230.0/23
Signature Algorithm: sha256WithRSAEncryption
35:4c:69:95:a4:e4:82:7e:44:1b:b5:e9:4c:26:f2:74:f6:4a:
87:8f:e9:3d:e4:dc:94:40:a7:1c:59:03:d9:49:35:6c:61:45:
51:34:b3:4b:ca:04:82:fb:dd:1e:55:15:19:7d:6b:39:a5:89:
7f:f6:0d:01:49:dd:83:92:09:dc:e5:0b:53:21:97:fe:1e:86:
0d:ee:33:da:c5:b4:39:20:98:0b:0b:f3:94:e8:78:df:a2:46:
29:76:d8:73:01:49:b1:ae:6f:8d:20:c4:02:11:aa:65:93:de:
96:ec:0f:2b:02:3a:fa:33:44:f3:f5:b6:65:a2:a5:5f:5d:a0:
9f:15:16:db:96:74:22:dc:eb:d7:ec:ce:7b:2d:72:6f:e8:80:
02:df:d6:8f:c9:47:7e:41:ee:8e:63:15:6b:a5:65:bd:46:be:
1b:11:dd:b2:a8:bd:8a:cb:29:46:89:e0:c6:d3:e3:19:54:b7:
21:42:c9:af:00:03:70:2d:56:48:cf:db:58:9a:c2:22:a2:39:
4a:44:0e:ca:29:cc:d5:38:e6:96:2e:8a:6b:39:82:9a:0a:bc:
34:6e:c2:e5:fe:08:9a:75:18:5e:5f:7b:dc:6d:44:9e:45:bd:
77:3f:43:3e:93:7b:31:5c:61:0f:b9:2b:06:b9:c8:07:9b:48:
6f:f8:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:31 2025 by rpki-client