Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
File: 8eUBY6xQamLM-1qK9WURw48VBBQ.cer (raw, json)
Hash identifier: 4c7pmAaDXLD24O+avNsAdhahUpmSxXrtsp+7i7ifaxQ=
Subject key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 657E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 25 May 2025 16:38:46 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.12.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25982 (0x657e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 25 16:38:46 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:43:f9:13:ca:b6:26:f2:11:62:cb:e1:de:
2e:a4:9a:93:cb:73:e5:27:0f:85:5e:f4:fc:50:ef:
50:78:91:99:22:26:10:0c:76:05:4d:1f:39:80:c1:
4e:f9:53:5f:43:fc:a3:0b:d4:d1:1a:36:aa:76:53:
41:52:5e:1a:be:6c:58:a1:fa:e2:36:a0:b9:d4:e8:
97:40:50:e3:47:16:15:78:1e:a4:89:06:ec:56:6f:
59:61:bb:38:9e:1f:84:69:d0:a5:0a:9e:f2:44:aa:
2f:4a:60:cf:2b:03:e2:1e:bb:04:6b:f7:45:53:8d:
87:36:88:93:26:d2:7e:21:19:1b:25:27:ec:6b:bf:
21:93:47:7c:5a:e2:ff:6c:13:7e:57:20:bd:c6:96:
89:10:d3:f5:5e:28:2a:1b:7f:a1:19:87:69:ff:29:
59:ac:f4:ae:d2:0b:fc:68:cf:fe:b9:ee:3d:37:8f:
5f:5f:7b:a6:c0:45:29:f6:4f:24:d5:ff:7d:92:eb:
7f:96:ae:2d:d9:83:e2:5b:47:c7:f9:17:cd:df:b4:
fb:67:39:ae:42:34:e5:d0:de:09:74:08:fd:65:b4:
6b:ef:ff:ca:10:ab:09:8f:ec:e9:7c:36:0b:09:13:
52:19:4c:d4:ed:23:ab:b0:0b:ae:bb:e5:5b:a3:7a:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.12.0/23
Signature Algorithm: sha256WithRSAEncryption
41:fc:9c:32:6f:8a:9b:5a:59:0a:d7:4a:24:85:82:82:4a:5a:
28:a6:9f:40:37:ff:83:8d:e8:a8:92:c3:ba:33:15:2d:4b:65:
97:13:16:a3:b2:bf:dd:6b:f4:b9:b0:f3:40:9e:b4:af:25:0c:
fb:88:2f:a6:02:99:f3:87:07:34:7a:fa:a6:0b:91:57:6b:e7:
3d:73:df:92:02:37:d1:cb:33:5f:d5:a4:4a:50:a9:4a:e2:6a:
d9:4b:87:01:af:23:32:85:70:4f:f9:e5:a0:70:2a:77:eb:f5:
20:e0:8c:db:1f:3a:c3:f5:aa:32:50:48:73:20:46:43:fc:51:
e1:8e:45:21:e5:63:5b:b3:5e:d5:15:18:b3:e1:c9:53:2a:0d:
ab:53:7c:88:c7:75:a4:03:d1:71:4b:55:13:68:9c:c7:8d:e7:
5c:1a:22:dc:95:20:5e:d2:1c:6e:de:78:db:5a:71:c3:ca:6f:
45:67:16:78:f2:e4:71:cb:1e:b8:80:9b:b3:d6:c2:e9:56:7e:
4a:3d:9e:17:31:5b:a8:8f:a3:22:4b:78:63:f5:e6:78:20:29:
26:75:1e:59:62:b7:49:41:ec:35:93:80:c7:65:de:ad:ad:94:
7b:fa:cb:02:10:af:a7:a8:94:a1:c2:13:54:d2:4c:78:68:80:
e1:c8:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:01:01 2025 by rpki-client