Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer
File: xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer (raw, json)
Hash identifier: zfykqTBtZpsaWMcVUxRf1rDbK7zKYInzo4e+NmfLuNc=
Subject key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 68A2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 22 Jul 2025 15:25:59 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.25.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 11:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26786 (0x68a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 22 15:25:59 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:5d:4f:82:3a:f4:d4:8b:17:86:81:55:11:
8f:3e:31:46:95:8d:1d:36:14:b6:ef:84:f7:21:ab:
b0:d5:51:2a:2c:49:6e:1d:b7:6e:ec:7f:d9:33:d2:
d7:16:e0:84:81:91:f2:3e:b3:b6:df:a0:8f:0f:e1:
17:99:c6:67:3a:66:9c:c3:ed:f5:79:80:80:96:ce:
d2:05:0c:b4:b6:fb:d6:a2:46:6b:13:c7:9b:b8:fe:
df:26:ab:ee:83:e0:88:b1:6c:24:22:a7:d4:8c:c8:
a9:7f:35:dd:8e:7c:51:cc:58:4a:6a:55:bb:42:af:
ab:a3:5c:7c:fe:c9:17:3e:a2:8c:18:40:77:54:88:
b4:75:67:8c:a3:10:6a:a0:0f:dc:1c:36:a3:a3:85:
11:03:84:d7:e2:0d:15:8e:89:8e:de:be:8a:63:a4:
01:43:e6:b5:97:4a:b5:99:1a:34:f3:37:d4:74:55:
0f:87:f2:34:2a:3d:78:94:6f:2e:3d:9d:3b:9c:1c:
19:77:c3:a9:12:53:32:24:fc:e1:ef:4d:19:42:af:
a9:ea:fa:50:cb:e0:b8:1f:03:ac:d8:17:c9:0b:96:
80:8f:a4:87:0f:70:e8:71:9a:79:4c:9d:46:09:38:
e1:91:fa:d9:2b:85:a0:1f:0e:0f:db:e5:d7:a4:a1:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.25.0/24
Signature Algorithm: sha256WithRSAEncryption
08:24:81:13:54:63:d7:1c:36:8a:96:1c:de:31:e9:c4:a2:43:
b8:16:b2:e4:68:79:3c:d9:ff:b3:eb:c1:7d:58:ae:d5:ca:41:
84:64:3d:ff:88:d3:53:e9:b4:53:ed:cc:7e:ba:47:e3:8c:6d:
aa:30:50:8d:f4:7d:a3:2d:63:79:38:8a:6b:74:5e:ab:ba:61:
50:25:62:12:a7:31:b5:64:22:57:19:52:14:a4:95:d1:d7:33:
83:5c:48:b3:f4:5e:ee:43:8f:9a:bf:49:a6:11:3d:6a:0e:47:
f6:ad:3f:6e:b8:30:48:72:32:9b:cb:98:d1:6d:f1:5f:a7:55:
72:61:43:cf:c3:a9:36:45:0e:01:5f:2d:14:03:4a:fa:8c:41:
a4:70:b3:3a:7a:69:ee:bc:70:9f:c7:dc:e8:28:b4:af:64:04:
e6:8b:6d:14:9c:d4:ae:ed:f2:8a:3d:e9:f3:81:53:38:92:a5:
9a:3f:c6:83:d7:9c:3a:7a:81:72:29:4b:70:b7:14:05:f2:77:
71:22:41:d4:8a:5b:70:82:b2:17:93:f5:14:e7:6f:95:0a:48:
57:58:44:b7:c7:77:ea:0a:44:e1:c0:ac:58:bd:4a:b5:0e:6f:
eb:c7:4f:fe:0b:6a:ae:bf:7f:fd:5d:9d:f9:7c:41:67:bc:b1:
d3:0f:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:54 2025 by rpki-client