Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer (raw, json)
Hash identifier: C7wTHeYrs4tvWsnAgcGwx5Q0GTHefx4+iHo38EyIThM=
Subject key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A4B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Aug 2025 03:16:45 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.78.192.0/18
IP: 52.128.128.0/19
IP: 64.70.224.0/19
IP: 69.5.0.0/19
IP: 142.79.192.0/19
IP: 143.244.0.0/19
IP: 152.235.0.0/16
IP: 207.166.160.0/19
IP: 209.103.160.0/19
IP: 216.19.0.0/18
IP: 216.230.192.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Sep 2025 15:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27211 (0x6a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 27 03:16:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:f2:51:4b:45:dd:a9:b9:f5:c5:64:af:08:
c8:48:24:15:e2:99:1f:51:5a:1a:ba:9e:3f:ff:8c:
62:ce:59:f1:3d:33:94:a5:f1:94:fb:79:5a:7f:f2:
e4:57:c8:d7:28:7b:5a:86:54:c2:a3:d3:0a:49:d2:
bd:55:79:95:c5:2e:da:eb:53:de:21:0b:c3:b4:6a:
4a:a3:5b:02:24:ff:43:0c:4e:01:02:7c:32:5a:b7:
16:a5:57:1f:6f:0a:5a:4c:58:03:b9:6e:fd:15:f1:
27:e6:b5:fc:ea:97:c7:ce:e7:72:df:1c:29:bf:69:
34:35:89:30:3f:67:06:99:60:3d:77:27:bd:c8:31:
07:91:b9:5d:b2:fd:cb:99:18:95:83:4d:ce:64:7b:
37:ee:22:77:5b:14:51:fe:7c:77:35:fe:08:3c:45:
9e:ab:70:6c:f3:0a:58:47:92:2b:23:8a:38:d0:2c:
c8:5f:ad:78:f2:d3:52:3a:e8:a8:e7:66:a2:80:c7:
a1:4e:54:9d:a7:a3:37:03:9b:ad:3a:a3:24:30:b3:
89:f3:f5:59:c1:7a:f2:5e:e4:17:78:a5:c4:74:a7:
29:ac:de:cc:94:94:05:22:d3:ce:16:ac:d3:58:7c:
d1:06:97:bf:26:49:11:ba:46:f1:82:a1:80:79:2d:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.78.192.0/18
52.128.128.0/19
64.70.224.0/19
69.5.0.0/19
142.79.192.0/19
143.244.0.0/19
152.235.0.0/16
207.166.160.0/19
209.103.160.0/19
216.19.0.0/18
216.230.192.0/19
Signature Algorithm: sha256WithRSAEncryption
64:5e:5d:31:b1:31:50:d8:f7:28:9d:c0:2c:c5:fa:3d:a9:5a:
99:34:3c:dc:85:b5:a0:e2:18:33:4b:5a:08:b3:86:66:c8:8b:
78:24:68:31:93:4b:63:5f:11:af:cd:a6:a4:d4:5f:f5:13:30:
a9:b7:de:91:8b:be:49:d8:ef:09:a7:55:fb:6f:da:4d:39:4a:
62:70:d5:26:ca:36:c4:5a:b6:66:87:db:f9:ab:88:dc:d7:79:
df:01:3f:a9:b7:d6:87:6d:4f:ae:7a:e5:91:97:3e:a7:40:33:
8f:84:7e:a1:f5:a7:c8:1b:f5:4b:71:70:0c:d8:0c:14:74:48:
35:19:b1:60:8d:d2:8a:e7:5c:c0:c1:ec:00:a4:48:d0:a4:3d:
d7:8f:93:8e:5d:02:47:be:3c:52:95:3a:ee:dc:cd:17:8d:cb:
4b:49:34:0b:ee:24:e8:d2:a0:2d:cb:b7:6b:58:3f:80:6c:f9:
3b:45:5b:a0:24:d7:6e:0b:c3:b6:d0:73:b3:25:60:0b:33:16:
84:92:6f:be:79:ad:c7:68:be:66:31:fa:86:16:b2:a2:78:9d:
45:09:59:c5:42:d6:87:16:90:4d:31:01:9b:be:99:cf:34:b8:
3f:ff:3d:16:5f:ef:a6:96:ce:9c:b6:c3:a6:9d:96:de:c4:4d:
64:8a:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:43:24 2025 by rpki-client