Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer (raw, json)
Hash identifier: +V0cr7JlPRishjHcL/MfpHmqxcmscuZWYFYhdlIdd1c=
Subject key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 65AB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 May 2025 08:23:43 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.88.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Jun 2025 20:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26027 (0x65ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 28 08:23:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:08:57:a6:58:9e:f7:6e:80:1e:d9:82:6a:
2a:63:66:3b:96:86:0e:7d:26:17:f1:d5:40:b3:d3:
5c:2f:98:6c:dc:7e:6f:ba:69:d2:ab:f6:5b:1d:a6:
ee:16:66:68:64:84:6a:b6:3e:0b:49:79:bd:cd:a9:
fe:70:a5:4a:4d:0f:20:9a:0b:11:30:35:08:ca:00:
d8:24:49:23:04:e0:7f:02:51:f7:d8:e5:50:3a:44:
78:f8:65:a5:18:2f:ec:c6:8d:0f:e9:0a:87:23:2f:
20:f6:87:b5:27:25:23:7c:67:a6:fe:cd:fa:77:55:
ab:ae:b3:2b:06:19:84:cf:3c:b6:7a:34:ff:4b:cd:
3b:64:2a:d3:43:e4:67:65:d5:f3:aa:bd:a4:0a:f8:
fb:4d:a5:bb:d2:e1:19:ad:c2:75:32:fe:bf:0d:6f:
ab:a6:54:3a:5e:d3:74:41:0e:ec:54:29:fc:42:ed:
38:d8:e5:03:71:84:a8:e3:7d:c7:57:13:ca:6e:93:
56:16:1e:f3:b3:bf:fb:b2:a9:5e:5e:19:6d:4b:71:
15:9c:15:9d:fd:ed:4e:83:ef:15:69:e6:0f:e0:57:
37:6d:49:b9:2b:d3:47:4f:02:fd:6c:69:4f:6e:3d:
4d:3c:4d:e8:92:c8:05:b6:ee:15:78:0a:41:17:bb:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.88.0/23
Signature Algorithm: sha256WithRSAEncryption
97:87:4c:92:93:1f:0c:24:44:43:38:ea:f9:0a:b5:55:bc:e3:
9e:97:90:8e:18:54:05:3e:7f:bc:60:36:6a:19:58:9c:50:c4:
59:96:e6:cb:c3:9a:90:b8:1e:36:79:da:4f:48:d9:ad:c3:20:
1a:c0:b0:a6:0f:a5:54:f6:20:f5:58:79:30:37:7f:ba:82:41:
1f:83:3c:35:c8:dc:f7:74:ac:eb:c9:ab:f9:26:98:62:de:88:
9d:c6:2f:6a:d2:c2:0d:a6:44:c1:68:c4:51:e9:00:23:25:bd:
75:4e:1b:37:15:d6:d4:ab:45:b6:a6:5c:38:cf:93:5e:ec:69:
95:62:86:cc:6c:2a:77:06:3d:54:4d:6f:75:71:0a:65:db:31:
85:45:ff:6d:be:97:55:f9:3d:2d:5f:e6:fc:d2:60:0c:c7:2b:
c3:80:de:40:ed:fd:74:21:5b:2b:1e:64:aa:2f:65:a1:4c:46:
59:ee:cc:e1:0a:61:5c:69:76:9e:94:fa:5c:54:14:3b:ef:f4:
7b:db:89:66:90:46:6c:f6:53:ec:a0:73:f4:65:5b:cf:a6:3d:
c0:87:2f:78:fb:13:e0:e6:2f:e0:83:5a:02:f4:59:b8:53:8c:
7c:e1:11:58:9b:8e:2c:21:75:9d:9e:92:e2:30:86:37:09:8f:
9e:43:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:47:49 2025 by rpki-client