Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
File: X60bOb5FVSYiBtGfWmabx7afcsg.cer (raw, json)
Hash identifier: dMRLa9x7gyM4x9Lzpk6qmiw9CKTOWvU2/ONurP+M75w=
Subject key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 679C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Jul 2025 18:37:42 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 192.150.129.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26524 (0x679c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 3 18:37:42 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:59:7f:fd:0a:a1:41:b5:be:76:33:9b:f3:
35:32:3b:4a:df:12:92:75:6d:44:36:05:b7:21:51:
fd:a6:da:bf:13:5c:ae:6c:35:5a:a5:54:e3:dc:83:
53:35:df:19:78:dd:c7:d8:fd:b0:9e:87:9c:7f:ea:
7c:b3:90:e9:25:77:94:07:23:99:07:b6:97:31:11:
43:4c:fa:f0:69:8e:e7:a5:a8:69:ad:2c:1b:ea:9f:
f1:63:37:0b:b7:ee:0c:a0:72:c2:be:49:be:f0:8d:
44:da:b3:a7:1f:a6:06:27:92:4d:1b:aa:bf:9a:39:
f8:83:6b:56:1b:34:98:fa:e9:01:a1:db:c8:88:f1:
f0:70:ff:6e:89:24:6a:e1:fa:68:da:4b:1d:ea:00:
5d:54:da:36:b0:b3:8f:46:69:ef:0b:40:7a:46:b9:
ea:fb:d4:fd:2d:37:51:99:d2:60:d3:4d:73:f9:99:
a3:9a:54:0a:59:0c:7d:d3:89:21:7f:91:69:73:79:
76:4b:2e:de:92:d2:42:d7:07:8e:89:49:fc:8a:16:
d0:8e:85:2b:2e:fa:2e:56:fb:ea:25:bf:6e:5c:ca:
f3:71:70:80:02:a8:bb:0b:d5:f2:b8:e8:3e:15:c3:
4b:48:ff:22:cc:ce:0e:b9:62:02:1a:49:9d:06:bf:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.150.129.0/24
Signature Algorithm: sha256WithRSAEncryption
65:dd:5f:ff:cf:ff:27:5d:1b:78:d0:55:da:43:32:38:30:cc:
e0:b9:51:91:3d:2d:e8:0f:d6:60:58:fe:83:da:fc:76:8d:6a:
48:72:cc:a5:ca:d5:77:39:f4:bc:27:9b:40:16:16:90:13:e3:
5c:b2:a3:28:9d:cb:a2:5d:9a:76:09:f7:7a:73:e9:2f:f9:01:
0d:f2:60:01:80:a0:c8:76:67:d0:ae:ec:44:a5:89:05:8d:e9:
32:8e:99:95:b7:e9:ac:e3:db:fc:ff:88:d9:9e:26:ed:98:93:
f9:dc:75:38:65:b0:e6:bf:3e:4f:74:74:3c:72:d1:c8:b5:ff:
77:42:64:6b:fc:a7:87:6a:da:b7:10:da:f0:3f:40:ed:8b:6d:
e4:9c:29:ea:3f:49:fc:c3:fa:bf:70:9d:9a:52:90:b8:36:50:
12:8f:3e:87:f6:9d:78:2a:42:a8:16:6d:34:f9:39:08:28:78:
fb:5d:f6:36:bc:91:d8:a3:ac:8e:e0:33:b5:0c:7c:30:71:ff:
9b:28:7f:5b:c0:7a:f0:94:bb:59:15:ed:93:79:01:15:6b:25:
29:08:dc:ec:bb:8e:fc:d1:6b:26:7c:44:4a:eb:ab:a1:84:32:
bc:3f:89:d1:d1:0d:e1:75:0d:56:27:fa:17:c6:0a:3b:9f:8d:
ab:b0:08:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:22:29 2025 by rpki-client