Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer
File: 089k1dsXYfy2pVLwaAkTMMW19Ts.cer (raw, json)
Hash identifier: O1gyo9lWvK4b7ECd5a9CZOhz5mZ9VoueNIQWiMOE95E=
Subject key identifier: D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 681D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 12 Jul 2025 04:08:48 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.154.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26653 (0x681d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 12 04:08:48 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91A25DF, serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:33:19:1d:e8:30:66:47:71:e1:17:ac:68:
e5:41:45:b7:38:65:1b:de:93:34:7e:9f:14:09:db:
5d:ca:1b:7c:fa:af:51:68:e9:10:13:bf:a9:21:f3:
24:ec:24:40:30:80:b4:c2:d9:af:49:a4:77:f5:1c:
ee:50:9f:37:b8:11:fa:54:e6:42:b9:ba:f8:96:d4:
8c:15:99:cf:98:e7:b8:a9:84:30:e4:8a:cc:d3:65:
23:cb:2a:c6:4b:ca:09:de:5a:66:48:3f:f0:be:0d:
a6:87:23:e4:ea:03:10:cd:f6:d7:42:4b:5b:f4:a9:
8a:0b:f0:cb:0b:54:64:b0:75:7d:30:97:c8:01:fa:
e0:c7:f8:f8:7b:58:d9:91:b9:15:43:86:89:24:8f:
83:89:16:29:e6:e8:ff:bb:50:62:4e:4d:ba:c0:da:
bd:0b:10:6c:7f:f4:e3:d9:58:df:e3:90:25:07:fc:
bc:d1:92:95:c1:50:7b:2e:bd:79:30:2e:a4:58:61:
0e:25:0f:f7:8f:6d:ab:47:40:42:78:2c:8b:51:61:
6b:e8:91:a3:c7:8e:e3:d1:aa:67:3f:0b:ac:08:98:
05:10:93:90:03:96:c2:ea:25:62:58:cd:47:e5:56:
45:a9:d7:ee:55:33:fa:3c:40:93:a8:18:84:0d:c3:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.154.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:63:3a:6d:73:25:fe:b4:e7:dc:93:d9:5e:7b:53:4c:a4:0c:
57:ca:3d:21:dc:5d:b8:f0:74:a7:ea:1b:67:41:f2:ed:01:a6:
d5:a1:35:52:ac:04:77:ce:f3:21:c6:86:51:7a:30:b4:28:79:
c1:65:7a:05:b2:bd:80:64:83:18:7b:40:42:29:b7:87:f2:98:
53:e3:0c:67:00:e7:73:02:e7:9c:36:0f:6e:29:e6:f8:db:1e:
df:f1:d2:cf:6d:78:8a:5a:1b:32:79:29:4a:4d:d2:1f:4e:ba:
c2:4b:ff:5d:fe:7e:6e:e8:1e:a0:10:de:2e:72:b7:51:71:83:
26:36:05:ef:5d:b2:e4:6c:63:fd:88:87:b0:2a:4a:2f:66:d8:
a1:ac:a0:33:ef:50:cc:83:4b:dc:00:00:3e:cb:fa:20:31:04:
55:f5:24:5e:fe:67:39:69:6b:ad:42:c6:ca:b3:01:f0:62:d3:
61:0d:ce:74:d9:57:98:ea:dc:60:5c:f0:96:80:64:f2:3c:4b:
a7:b7:4f:c3:1d:94:6b:87:48:d4:ad:d5:e9:11:ad:6a:22:0d:
db:66:d2:e1:66:f4:f1:40:48:3a:04:2a:f5:3d:23:3a:ea:db:
37:b1:4d:97:0a:31:b4:e7:ec:27:6d:be:72:fb:bc:39:a7:b3:
ac:bb:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:54:31 2025 by rpki-client