Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
File: yq12WnMFvBUlSxWyW1vTm2Oow68.cer (raw, json)
Hash identifier: dt4D+qvOTqGWvfPidnmpJU/29eThe8OJPREKIapA6ao=
Subject key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 689D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Jul 2025 09:59:18 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.103.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26781 (0x689d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 22 09:59:18 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:5c:70:94:ec:16:75:10:9e:28:c0:f5:f7:
4e:cc:c9:0c:39:56:f5:4b:b9:97:29:8a:ac:00:4a:
44:62:cd:5e:d3:2e:25:68:c7:06:62:24:be:44:bd:
b9:40:a8:37:9c:7d:32:00:bf:b9:f4:df:18:d4:56:
d8:be:08:58:4f:38:c5:07:a3:46:41:0d:a2:94:a1:
15:8c:ad:f3:5f:f3:f5:c5:4a:f1:d3:4d:00:b4:ce:
9f:e3:93:b6:d2:df:45:51:26:61:22:e0:fb:81:11:
b6:12:ce:1f:86:2d:28:02:f1:2e:4a:c3:32:2b:28:
d3:7b:9d:72:78:28:5c:ec:d8:db:4f:73:8a:42:24:
0a:09:2d:3e:6d:25:a6:a3:fc:7c:a7:af:c8:ca:73:
e6:4c:26:0f:53:46:6d:4a:50:ca:81:57:35:02:3d:
e8:93:f7:e2:0b:59:34:cd:54:61:c6:c2:79:07:7a:
43:42:b0:64:0d:ea:a0:56:ca:66:53:1a:e5:14:6b:
14:c7:25:f4:43:5f:76:be:d5:d9:ec:6b:17:54:64:
35:ea:25:bd:ec:a7:91:da:0f:d8:df:64:7a:18:09:
1d:ba:5c:4b:c0:88:a6:07:27:f5:e0:d5:90:e8:f2:
f6:ff:52:18:30:1c:63:b2:1f:80:cb:03:01:9d:77:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:a0:23:2d:30:35:15:84:e9:80:10:ba:a2:fa:1b:d9:36:d2:
9d:54:4a:7e:ef:c1:3f:7b:c9:bc:ea:c4:27:57:bb:a6:fc:62:
94:78:42:ee:b8:92:18:f0:3d:70:a0:06:bd:3a:ec:41:91:c8:
d2:c9:e4:39:ac:21:08:4b:cf:9d:e3:c7:a9:bd:56:7d:9d:e1:
c0:0d:4f:d3:2a:15:e9:26:ea:d8:d0:60:f6:95:82:f2:af:ca:
80:69:e3:69:6c:36:ce:b2:4f:23:e6:13:a5:f4:37:6b:61:d5:
44:6d:37:9c:bc:ee:55:52:b1:d5:22:d0:74:a6:cd:42:39:95:
e9:08:ee:c9:6d:a0:26:0d:db:4a:9c:95:3b:62:05:6a:39:fb:
21:28:ae:fb:0c:65:49:6d:3d:5d:79:d2:8c:4a:c3:fd:24:a5:
63:b2:3f:14:ae:2e:54:b3:86:f2:2a:a7:66:c9:90:cd:c3:1e:
e3:0e:60:6c:82:58:97:6d:a8:ae:a3:ec:9e:5e:a9:2e:ba:f9:
8b:c1:75:64:8f:96:3f:ba:69:41:75:54:8a:10:1c:1e:87:b8:
f9:fa:53:48:b7:30:cf:7c:89:35:f5:56:e4:ea:3f:d1:8f:52:
a4:1c:d1:b5:f2:5a:32:a7:6f:23:dd:44:0e:ac:42:4c:c2:97:
9d:15:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:30:11 2025 by rpki-client