Certificate
$ rpki-client -vvf ta/apnic/apnic-rpki-root-iana-origin.cer
File: apnic-rpki-root-iana-origin.cer (raw, json)
Hash identifier: j9kp39fXnMqiBhGTOhXFiDB1OuBWLDpOQLESgQJ4G3U=
TAL: apnic
Subject key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: A2177242F19E4DEC
Manifest: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
caRepository: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Jun 2025 02:40:43 +0000
Certificate not after: Wed 02 Jun 2027 02:40:43 +0000
Subordinate resources: AS: 1 -- 4294967295
IP: 0.0.0.0/0
IP: ::/0
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a2:17:72:42:f1:9e:4d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Jun 2 02:40:43 2025 GMT
Not After : Jun 2 02:40:43 2027 GMT
Subject: CN=apnic-rpki-root-iana-origin
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:56:48:be:b5:60:00:18:ba:61:22:53:cc:
fc:a8:7d:84:4d:52:0b:d3:58:a5:c5:99:73:20:bf:
49:61:23:91:30:de:42:9a:d7:fc:57:62:5b:94:87:
9a:95:2a:a0:39:31:a3:bd:28:c4:b2:25:7b:de:ce:
bb:cd:84:08:ec:2f:e2:48:e6:fd:ea:e7:f7:fe:cf:
3a:36:a6:f1:0e:21:50:18:df:2a:1b:b4:4d:71:d8:
15:b9:49:40:89:d9:7c:5b:1b:cb:34:8f:15:86:a6:
c0:07:9b:92:83:f3:2b:2d:e4:8e:bd:74:63:6b:4e:
35:56:9b:40:c4:88:5c:1b:30:cc:be:50:09:47:09:
2b:60:af:cc:a3:c3:f8:13:6a:d2:42:0c:2a:0a:06:
9e:d1:e6:d8:d4:2b:09:dc:28:df:8b:ae:c2:d6:7c:
3b:a1:7a:89:26:8b:ef:5c:9e:1a:a4:69:84:bf:c6:
b3:db:73:8b:0b:a2:a2:e7:85:25:fc:4e:b1:93:6d:
bb:04:5b:6d:a8:55:77:60:cb:4a:c7:8d:87:70:27:
03:55:96:72:d3:59:fb:26:3c:ef:3b:c7:1c:69:79:
87:22:04:7b:ba:d9:ea:84:14:4d:36:ae:57:73:96:
61:6e:4a:d4:b0:db:62:26:6a:d9:cd:59:60:53:a3:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Key Identifier:
0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
RPKI Manifest - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1-4294967295
sbgp-ipAddrBlock: critical
IPv4:
0.0.0.0/0
IPv6:
::/0
Signature Algorithm: sha256WithRSAEncryption
66:0f:05:8a:11:2c:97:9a:90:60:77:47:08:91:7d:93:d4:7e:
c0:0a:48:06:0b:d8:64:8e:56:17:f0:67:3c:a4:aa:6d:bb:d8:
d3:ef:df:92:1a:6c:50:4c:57:44:95:38:44:90:36:80:26:c5:
8d:88:af:8d:17:91:1e:1c:14:97:e0:30:78:55:0f:75:34:8c:
95:b6:19:27:d9:46:2e:6f:63:21:75:ae:39:d9:22:be:d8:ae:
5f:fe:83:d2:cb:d1:73:b2:bb:9b:14:cd:c1:35:72:b2:4c:d0:
8b:bd:40:14:b0:09:c6:2c:91:d1:c3:22:e1:59:ad:ff:f3:67:
10:f5:bb:22:2b:3a:f6:2f:3c:97:9b:1b:b2:f8:98:3f:62:42:
fd:26:90:12:28:d9:44:99:62:d0:92:5d:4a:28:fa:83:7b:46:
74:a8:6b:b8:04:e6:c8:06:6e:0b:13:16:d4:79:5c:4f:bb:1b:
68:00:40:1f:c6:6c:81:07:f5:7d:b1:ac:d0:94:f6:89:83:4c:
1f:8a:79:b1:58:0c:1a:52:44:d0:c9:6f:e7:46:e2:2f:a1:e0:
38:32:26:fe:a6:22:ad:04:db:e4:86:2e:c7:27:78:d3:03:ad:
b3:e2:99:b0:13:4d:b7:34:a1:e8:cf:94:51:aa:51:c2:00:e5:
af:e4:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:08:04 2025 by rpki-client