Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
File: v3H1vxFop4QFduAAbzu8ZfxINAs.cer (raw, json)
Hash identifier: 2z0hEVx82PIhsTPjLQRi4LiSmwKsP1+mZVy2tsO5ms4=
Subject key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 68AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Jul 2025 01:00:00 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.132.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 Aug 2025 23:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26797 (0x68ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 23 01:00:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:58:df:61:41:52:88:79:8c:27:de:fa:37:
74:66:60:06:fc:18:5f:03:98:f3:fa:db:d4:b5:bc:
d8:ca:d9:68:66:8e:bb:aa:1e:86:bf:f4:11:9f:78:
49:11:be:1b:15:80:96:1c:4f:e3:b5:14:be:80:50:
7a:6c:d6:c6:65:50:59:d1:74:96:d3:5b:17:c0:14:
0d:fc:51:86:5b:f2:84:31:75:52:62:94:3b:94:0b:
9c:a2:a8:a3:ee:7e:f4:d2:d1:3b:5b:a6:06:b2:e2:
d7:15:f0:21:79:64:d0:c2:52:a5:35:84:f2:b2:31:
54:be:5e:37:17:49:10:b1:d8:27:b1:3c:1c:3c:ff:
62:4b:c8:ea:dc:c7:b2:5c:de:2b:c3:c0:ab:fc:e8:
00:9a:4b:00:2a:0a:3a:15:98:45:11:f2:b5:51:6e:
de:50:af:2c:ca:c3:8c:9d:f6:8a:e0:c1:a3:23:d9:
52:42:22:f4:2f:52:54:14:8b:66:e1:4d:45:15:fd:
2a:e8:e9:e3:ce:fe:b7:79:72:1d:e6:1f:a9:4a:36:
1e:48:d1:7c:b9:82:bb:e2:71:38:38:ef:b8:86:0a:
c1:dd:8f:16:85:19:99:d8:eb:38:cd:2e:5a:fb:04:
53:9b:48:7d:42:b5:1d:4a:28:90:85:74:d0:8a:be:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:0f:59:cf:1e:06:b0:80:19:ab:d8:db:40:a4:aa:8a:02:36:
de:d0:29:17:7a:9b:cc:87:bb:56:89:6d:4c:e1:b6:f0:7f:9e:
d4:eb:65:96:1a:09:9d:00:57:9e:92:64:94:69:42:a2:38:92:
e8:c8:c7:14:d3:3a:0d:08:81:d5:bc:b5:66:1b:f9:e7:55:23:
fb:4a:d2:43:9a:03:a7:8d:1b:01:77:fb:cd:61:df:c8:01:d5:
77:1a:43:51:9c:21:5e:6f:d6:08:14:79:1d:de:65:58:dc:fb:
d3:49:88:16:f5:7a:ea:69:ec:07:81:d4:27:06:cb:c2:e1:2d:
4b:02:7e:a8:60:0b:8a:16:32:26:55:88:d3:9b:e2:52:0b:c4:
56:5e:0d:e4:70:12:ca:5a:c9:6c:eb:a1:ab:29:0f:88:ed:91:
bb:b6:00:e7:d0:af:a3:10:ad:97:d1:83:de:7a:77:23:53:ea:
92:64:5c:49:8a:ae:5c:17:29:66:ad:71:96:0d:da:3d:70:48:
0b:4f:a7:98:75:3f:3e:71:77:b4:16:73:51:72:bb:84:78:b4:
27:33:cd:81:c4:37:c6:39:33:c5:c7:0c:2b:6b:3d:db:a6:fd:
01:80:28:e3:61:46:20:f5:3d:bf:ec:eb:28:71:b0:f8:ea:be:
e3:6e:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:14:02 2025 by rpki-client