Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
File: dE87SIpTzJP_qdl19F0f9emsipw.cer (raw, json)
Hash identifier: SrcX9h+SHyK/TEVlWwO8V4XULU8UyFL3huITetRF9dc=
Subject key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6825
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 13 Jul 2025 06:43:54 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.28.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 04:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26661 (0x6825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 13 06:43:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:69:2d:65:03:7f:64:ee:9f:4e:9b:b5:14:
b8:a4:70:28:2f:54:73:00:c3:c3:f6:65:8f:a0:73:
32:7b:32:43:b9:3d:a9:03:a2:a8:8e:28:48:e8:7b:
e2:12:df:b8:7e:dc:90:c5:6d:5f:1d:f6:a8:63:a2:
98:e8:a0:ac:53:36:9a:76:26:66:bb:37:35:f8:2b:
5e:19:ea:02:d3:f2:f3:83:73:a4:ac:e8:57:7b:8b:
15:db:1f:65:2f:48:92:da:fa:3c:44:6d:3f:34:1a:
91:5a:81:4a:ab:c1:d8:4e:9c:ab:41:5e:ab:2f:ae:
66:a8:bd:ff:47:4f:da:60:94:26:09:4d:ec:d7:52:
ee:50:8e:33:82:e4:3e:c2:c4:3b:94:4a:2f:bd:5e:
1a:5b:71:a5:aa:58:ee:54:a9:09:60:22:c4:ad:c4:
6d:52:08:76:b6:45:bf:98:0a:fe:14:d0:39:90:c1:
ab:0b:05:6a:61:85:16:fd:b3:10:e6:39:0d:8b:c3:
17:ab:bc:de:4c:6b:81:e7:de:0a:c1:e8:7e:b7:9a:
37:1e:f2:ea:e2:e3:50:e5:aa:0f:3c:f8:3d:7b:d9:
0c:3c:46:a5:04:b3:45:cb:b7:71:97:2d:09:65:91:
78:6d:25:50:04:1f:95:0c:4b:d8:53:fe:c5:66:30:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.28.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:50:f8:96:cd:32:88:95:88:1b:71:ed:ad:a9:68:74:62:24:
6d:a3:91:63:bd:0c:ae:a3:30:60:ba:62:fd:b2:77:d5:00:a8:
b5:f9:13:62:b1:d8:3f:67:89:cc:a3:d9:c1:e4:70:a8:88:08:
6e:8d:79:d3:98:b8:e8:7d:08:66:34:20:bd:c7:52:fc:89:e9:
95:6d:e0:fd:37:51:12:fb:fc:80:cc:e4:50:e0:e7:98:8d:fc:
42:51:27:e5:bf:b7:6c:fd:c9:8b:1d:36:9a:b9:d1:a4:84:39:
4a:fb:77:c5:79:35:36:e8:ea:e1:4d:6a:d4:55:ab:0a:63:b5:
6f:f4:63:95:74:8d:01:3b:d1:01:5f:0b:be:60:1c:1b:1e:8a:
2f:fd:95:9b:9e:3f:01:d4:07:1f:58:d5:cc:65:0e:3a:92:6e:
53:42:f2:7d:a9:c8:a1:12:44:39:fc:1b:b9:3a:80:60:f4:01:
87:a4:99:77:15:49:e4:da:0e:d3:0b:d7:e2:e9:72:3d:7f:1c:
78:cf:a9:5c:7e:05:a5:94:7e:66:12:4d:42:11:45:37:ab:ca:
ef:7b:ff:39:26:bc:67:07:67:07:cc:20:e5:23:23:ce:53:30:
45:28:20:6f:cc:46:72:16:a8:8f:b5:a5:a8:f6:a2:7c:3c:35:
a6:9e:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:21:00 2025 by rpki-client