Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
File: 60yRrrkBmKp9PHgiHY4Ytwdd77k.cer (raw, json)
Hash identifier: AvNxeaxIBInQohTR6ErscPELt+9S5rKlxN7LSjXNm4I=
Subject key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6807
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Jul 2025 23:41:01 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 160.22.145.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26631 (0x6807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 10 23:41:01 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:a2:d7:80:a1:84:f9:c5:53:54:38:c6:17:
30:21:0b:8c:df:c0:83:1d:f6:39:41:e5:da:da:2c:
11:a8:ae:44:26:01:f4:ac:98:ca:45:cb:5a:9e:d0:
d1:17:58:0e:3d:06:96:94:75:e7:5d:41:4e:14:04:
98:c1:71:15:d5:a0:02:f6:6b:fe:16:73:2c:5c:40:
ee:78:f8:44:35:be:89:75:76:01:ad:22:e1:ef:19:
46:9e:4a:27:29:e7:3d:88:24:43:06:cd:f0:11:01:
4f:26:95:4e:20:a8:34:69:e4:a6:22:ce:0f:db:b0:
dc:12:09:8d:8e:b1:af:a8:e9:ec:ce:5b:91:72:85:
28:a5:5f:52:83:f8:0f:0d:10:a0:44:93:e3:d6:8d:
c5:0f:54:12:cb:3a:9d:11:82:10:bc:ef:12:e9:04:
1c:85:0d:c0:d8:6b:92:6d:0b:69:00:30:30:0b:c6:
9c:93:03:6f:e2:8f:b1:e8:f7:11:ab:5a:ca:27:71:
39:23:73:98:a8:68:00:84:5d:ad:ee:fa:05:dc:9d:
db:6e:b7:7b:e4:bc:0e:2e:3f:3a:a8:88:68:bf:ff:
95:43:5f:9a:f8:4d:78:bf:2f:b5:e4:63:af:3b:5c:
0a:44:0f:ff:da:0e:82:1b:2d:39:d9:ec:7a:a5:69:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.145.0/24
Signature Algorithm: sha256WithRSAEncryption
60:10:f0:b4:91:44:2d:e2:64:a4:d0:a6:20:fe:62:55:69:8b:
ec:5a:f8:39:2d:ef:fd:6a:2a:0a:3e:d7:3e:44:60:9b:4f:ad:
1c:e7:3d:6e:b6:84:4a:26:25:7e:60:6e:63:49:af:86:97:0e:
a5:9f:cc:78:3e:da:91:01:68:32:1e:39:24:46:8b:62:e4:2f:
b6:e8:25:8f:84:b6:ff:a1:89:e1:47:15:61:e9:80:20:1d:e5:
88:5c:93:71:4d:41:08:03:94:4b:3c:2f:24:cc:7d:b8:23:ff:
e8:ed:ec:bc:4b:37:91:26:79:7a:68:3b:ea:a7:85:80:eb:4c:
fa:57:58:ea:d8:e3:60:3a:e9:e0:7b:fd:bf:e6:cb:9e:fb:8a:
a6:6e:0c:01:3e:1b:99:71:62:76:6a:a6:f8:1f:78:00:52:ab:
01:6d:05:65:aa:67:96:98:6b:22:2f:cb:e2:f1:8f:f8:0a:5c:
46:95:77:a4:5c:c9:dd:3d:53:c7:4c:bd:fd:5a:d9:17:e3:2e:
c6:aa:8c:cc:c2:bc:12:c0:0f:cb:49:43:d2:51:ba:78:1d:eb:
66:04:01:80:aa:0e:af:36:db:43:ab:b0:eb:38:b2:5f:9a:b6:
08:1c:7e:fc:b2:75:0f:06:99:35:40:38:91:d2:7c:dd:0c:d8:
f1:b8:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:51:49 2025 by rpki-client