Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
File: 0aHv0iQTWusJg56ovbjNxZnOZX8.cer (raw, json)
Hash identifier: A2Ww2XM7pteEV1ScPxun7nzbXY+sAAq1aPgqGhjD6ys=
Subject key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4B65
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Apr 2025 17:23:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.54.88.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 02:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19301 (0x4b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 29 17:23:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:9e:5a:d7:1c:dc:ce:eb:fa:f4:22:48:d7:
94:3d:cb:65:12:83:09:c8:e9:55:a5:82:4e:49:c2:
28:e6:6a:97:b0:69:dc:c1:77:80:cc:3f:fd:fb:14:
c2:d6:25:37:9b:00:3f:3b:f7:f9:8c:ce:cd:10:29:
5f:2f:19:31:2c:f7:a9:6a:ac:d3:2f:1d:13:51:f2:
b7:41:d0:c9:8a:f7:23:3d:f0:85:df:3c:c3:c3:06:
09:19:c7:97:02:e3:3e:08:90:9b:0d:0f:ea:6c:62:
72:0b:37:9f:b7:74:03:3c:65:49:b8:3b:8a:f3:30:
a5:67:3d:cc:59:82:3e:4f:79:10:50:5a:ae:ad:52:
23:47:2e:76:eb:60:49:9e:4e:94:84:81:48:02:68:
61:8a:23:9e:74:19:b2:cd:2e:77:f0:d3:9a:ba:03:
67:2c:8b:a2:8d:e0:47:c8:c2:e7:e4:da:57:f7:0f:
72:a8:b6:7f:fa:aa:ca:f1:c0:e6:b8:61:ae:93:85:
99:6f:a2:6e:b5:10:40:53:ae:4a:47:41:45:61:1e:
35:8a:80:11:7b:99:bc:1c:92:e1:3b:82:3a:ab:a5:
bc:43:75:c4:27:0c:9d:3a:c8:5a:68:9a:70:fe:fb:
3f:12:7a:c7:76:3d:57:78:57:0a:27:7b:9b:db:b1:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.54.88.0/22
Signature Algorithm: sha256WithRSAEncryption
86:cc:84:4e:8a:6f:7d:81:d0:30:63:a8:12:7d:ae:f3:cc:62:
59:0c:00:83:33:4f:d5:f5:df:48:48:e9:03:6a:f6:97:cd:7c:
fc:8f:d0:7c:5e:8a:d9:f0:a5:ee:d1:ee:eb:06:62:f3:d5:8f:
ee:b4:19:2c:f1:3f:5e:ff:04:36:c0:85:f0:b9:1a:da:4b:ea:
4d:72:b5:09:be:45:ce:ea:65:65:59:72:6f:1b:a3:b9:f1:51:
9c:dc:60:e6:ba:40:35:45:f4:bb:a5:6b:32:03:20:07:1e:62:
ff:65:04:d6:53:c3:5a:2a:c4:b1:22:b7:76:13:86:1d:8a:63:
e8:44:da:1d:d5:e1:2e:95:23:af:d3:0b:c4:e2:ad:09:71:9c:
86:35:60:be:51:79:83:da:15:0f:dc:15:0c:37:1b:d7:bd:0f:
c0:c2:51:59:a2:db:87:5a:9c:d6:5a:cf:54:4f:ac:50:8c:3c:
32:d7:02:84:c5:cf:b2:17:cb:7e:4d:70:92:d3:60:06:51:cb:
f8:2c:83:12:6c:9b:df:a7:c1:7e:6d:99:54:63:27:a6:29:5f:
80:fb:04:ff:95:25:43:83:b6:c1:f2:33:53:13:29:e5:73:2b:
81:69:30:06:56:70:ad:f8:4c:33:92:9e:68:29:1e:df:4e:95:
be:5f:fd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:13:38 2025 by rpki-client