Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.cer (raw, json)
Hash identifier: 8MlE2ikkycvK0RWxv5a6AHzeOhinXcyZVyv2mV4Idhg=
Subject key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6AB1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Sep 2025 06:22:56 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.37.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Sep 2025 03:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27313 (0x6ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 3 06:22:56 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:d1:c5:ad:6d:43:a5:9b:35:a8:97:f9:e3:
13:0d:b5:62:2c:12:18:79:17:2f:01:36:65:72:64:
da:27:1f:25:97:e1:19:a2:66:98:f2:ed:45:ff:e8:
09:83:58:30:b6:45:33:49:c7:4a:96:be:db:be:dc:
76:18:e1:ff:4c:71:67:56:8f:87:19:69:81:6f:b9:
97:3b:c0:25:d6:7c:e1:88:df:1a:ba:0b:f7:c6:fe:
10:14:17:84:1d:14:6e:18:d5:55:6b:de:2b:92:64:
36:57:5f:27:c0:98:9b:1f:59:b8:80:6e:8f:1d:87:
66:85:c7:74:a5:9d:ff:2d:b0:71:c6:13:0b:0b:2b:
5b:b0:87:89:1e:00:3a:99:97:cf:80:d3:84:7d:78:
bc:0f:bd:7f:29:e8:7c:25:3d:26:bd:04:1c:8e:92:
64:c4:29:6f:91:8f:06:b3:e0:cd:68:ff:25:96:80:
a5:b0:a3:46:d4:bf:73:c6:0b:dd:d8:0a:e1:b6:00:
1f:af:a2:80:e1:18:24:d9:7c:aa:1c:e9:ae:ef:3d:
cb:3b:fd:6b:f3:70:e2:94:bb:6b:d5:72:55:a4:aa:
c6:e1:dc:f5:a3:dd:86:d9:94:f6:78:90:08:26:7a:
d1:1e:50:4d:26:70:6c:0b:f5:d7:4f:e1:21:5c:75:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:97:5c:23:48:95:ba:e4:06:70:e4:ea:a0:0b:d0:50:02:0f:
81:21:c4:1c:d9:53:65:10:7c:57:f3:3b:e6:af:04:91:27:fb:
e7:4e:ad:76:8e:0d:9e:34:d1:9d:42:d9:52:95:04:bc:c0:75:
bd:cb:de:76:56:13:d6:0a:7b:15:6a:9d:18:d6:89:0c:38:9d:
30:42:98:fd:4d:87:44:5e:c9:05:34:ca:e2:83:27:16:1a:04:
f3:61:85:95:53:08:8c:0b:05:c5:6b:ee:6e:86:b0:42:8a:b9:
d0:49:20:6c:bb:62:0b:aa:e8:6a:97:0b:20:a5:a6:cd:b0:42:
2d:0a:52:24:37:f1:4a:6f:e9:d5:ea:04:f7:3c:b3:00:b7:5a:
7a:f5:8f:8f:02:33:63:d2:38:17:2e:84:bd:00:e5:8d:0d:e6:
13:0e:ea:67:9d:01:f0:71:44:df:d1:c4:d7:5d:c9:f5:70:c3:
02:c4:bf:0b:5d:32:02:4b:5c:21:49:70:8e:59:db:5e:8a:db:
2b:86:a3:a7:08:95:38:e2:0c:40:f9:36:21:34:55:79:04:12:
92:6a:c2:a0:06:58:73:db:69:10:e1:57:52:57:cc:97:b0:48:
ce:47:64:d2:88:6f:48:af:1f:25:f3:df:35:95:43:2e:b5:99:
46:71:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 12:22:12 2025 by rpki-client