Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
File: _zNBly3YofaHHt6Gmjod2SUorrY.cer (raw, json)
Hash identifier: /QrVBxkMZw/i6HU9Equei4BzUPGdYrhs5YwYXyOuF0Y=
Subject key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4C62
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Jul 2025 17:07:18 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 46.250.160.0/19
IP: 62.245.0.0/19
IP: 80.238.128.0/17
IP: 83.101.0.0/17
IP: 87.119.0.0/18
IP: 89.150.192.0/18
IP: 94.45.160.0/19
IP: 94.74.64.0/18
IP: 94.244.128.0/18
IP: 176.52.128.0/19
IP: 188.119.192.0/18
IP: 188.239.0.0/18
IP: 212.34.192.0/19
IP: 213.250.128.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 04:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19554 (0x4c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 8 17:07:18 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:19:c1:b3:f4:d2:c2:a3:be:76:a9:ec:f4:
28:81:bf:ea:bf:f1:74:92:44:3d:79:5a:ee:83:48:
03:c9:e6:9c:6d:f1:47:03:6d:ef:1c:56:c6:53:e8:
5f:fd:b5:de:ce:9b:1a:00:f5:3f:f1:16:87:45:89:
c0:31:ee:78:43:49:62:6f:93:77:24:c4:c0:8d:f4:
4d:50:cb:d4:ee:b7:d6:b7:7c:e3:4c:39:f3:a6:71:
5d:76:25:e9:36:29:85:a0:b7:05:8a:f6:2f:f5:14:
44:ff:80:2e:16:6b:ee:17:89:52:63:ee:2c:85:20:
c3:76:da:db:7c:47:b3:e1:00:9e:d3:b2:52:de:39:
e3:50:c4:87:9c:03:10:5a:73:2e:c4:74:a4:7b:ff:
af:cc:c3:e1:7d:fc:50:a2:7b:7d:95:65:7e:57:5b:
12:1f:e2:2a:78:50:fd:a3:92:1b:8f:de:e0:6c:3d:
f3:47:96:81:b6:68:79:8f:07:1d:49:49:d5:71:4d:
7d:5c:a0:0b:3b:56:72:c3:30:26:76:b2:30:5a:f6:
bc:41:09:fc:c2:6c:00:eb:30:8e:ba:9c:a7:2d:01:
4e:8b:25:58:58:47:81:57:6e:42:57:b6:c2:d6:39:
c5:ff:18:65:4a:c1:4d:dc:33:c8:36:c3:db:5b:cb:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
46.250.160.0/19
62.245.0.0/19
80.238.128.0/17
83.101.0.0/17
87.119.0.0/18
89.150.192.0/18
94.45.160.0/19
94.74.64.0/18
94.244.128.0/18
176.52.128.0/19
188.119.192.0/18
188.239.0.0/18
212.34.192.0/19
213.250.128.0/18
Signature Algorithm: sha256WithRSAEncryption
71:3d:05:d9:fc:38:4c:be:6f:76:21:c5:d7:5b:a5:0e:d3:fc:
9e:c0:01:7b:4c:14:2f:67:21:b6:8f:ef:6c:e0:19:1c:e9:a1:
b5:d5:0b:9a:f4:79:fb:18:c4:b2:7c:da:7f:0c:8f:ee:2a:71:
b6:c3:fc:14:51:95:cb:22:fa:a6:2d:1b:f4:15:7e:bb:52:fd:
45:c7:b8:9a:62:12:11:e9:2d:04:68:da:cb:1f:c9:e7:17:2f:
b6:e4:b8:3d:fb:a6:8d:38:e7:6c:3b:6d:fd:b0:67:5e:59:7b:
56:74:05:e0:d7:6c:ff:9a:0d:57:47:5d:ce:fe:6e:4c:7c:37:
51:d6:5f:df:90:0b:17:1c:84:7d:d1:6d:d6:26:78:60:b6:c0:
7c:1f:fd:6f:65:5b:3b:b8:56:1e:e1:80:9e:a9:02:d3:66:5a:
e0:ca:7b:3b:c9:a1:ae:9a:f8:2d:17:eb:2c:e1:75:d2:0e:50:
cf:0e:b6:5a:be:a4:1d:f1:b0:84:31:76:8f:67:7f:91:e8:f2:
02:a8:47:58:7a:46:3c:be:f9:cd:38:09:f5:12:8e:a5:28:bd:
0c:f9:c3:81:58:a7:b4:28:2c:a4:14:47:63:15:e8:28:7e:c1:
55:71:28:1f:23:46:cd:f8:17:44:15:e6:84:83:2b:56:d7:7d:
cc:8b:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:41:52 2025 by rpki-client