Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer (raw, json)
Hash identifier: +B2P97AVkfrxWtmedhcMV4QCQprnl1Dz/uO2NrBsbeE=
Subject key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6468
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 May 2025 13:09:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 149.234.128.0 -- 149.234.185.255
IP: 149.234.187.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Jun 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25704 (0x6468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 1 13:09:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:9c:8f:79:ec:ee:93:1e:e8:26:ec:1d:e5:
5a:8e:16:6f:60:87:99:e4:47:8b:5e:3e:6f:52:03:
c6:54:29:22:e8:a3:8e:d6:de:26:b8:09:06:ad:ee:
32:24:26:8e:a5:08:dd:07:ff:bc:e2:f2:26:dd:7d:
7f:41:b1:a6:6b:97:71:a5:be:a7:c7:e0:8e:19:15:
f5:2c:d0:a6:87:1e:56:51:ad:ce:65:ac:65:36:89:
db:dd:42:e4:f0:52:79:3e:bd:e0:c9:71:72:dd:69:
d8:51:7c:a0:37:9c:23:18:b3:ed:54:15:ee:72:e1:
be:38:64:e0:df:f1:60:98:57:40:a0:1e:96:b2:7a:
4e:33:83:06:6b:44:91:0a:79:b6:c5:65:44:c3:03:
e8:77:c1:55:84:6d:9a:08:6a:87:a2:47:df:0c:64:
e8:8a:17:5b:7b:e4:9c:22:8d:94:e2:c6:60:02:e3:
e1:35:b4:f8:48:a5:b6:8f:52:d3:b7:6f:fd:60:a8:
c9:db:a9:75:32:2f:88:a3:47:3d:af:61:81:da:f4:
de:fa:ca:2c:a1:c6:d9:dd:4f:7e:5b:8f:23:19:e5:
34:c0:e7:67:50:e9:11:ff:40:d0:03:ad:2d:ac:25:
97:52:02:e0:51:5a:57:05:92:b7:05:f4:c6:40:16:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.128.0-149.234.185.255
149.234.187.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1f:cb:ac:bb:02:41:39:16:67:26:52:b2:ca:b4:53:62:81:
1a:8e:21:95:ea:6f:c7:af:43:08:3f:0a:bc:c3:a4:56:a9:cf:
1b:a1:5f:4b:6b:5b:a6:30:de:d9:81:0a:ff:72:3f:14:cd:f9:
03:1f:9b:12:9c:6d:82:5c:bb:8d:f2:65:36:ef:fe:7a:95:7d:
d5:78:e1:00:04:2a:01:3d:b0:e1:91:06:62:91:f5:92:9a:9f:
fc:f1:ec:c1:ac:ab:db:7a:4e:94:4d:73:c3:f3:0b:38:18:27:
12:93:eb:32:e5:e2:b3:b6:5b:56:28:13:e0:bb:97:c8:28:7f:
92:92:d4:2d:51:7b:06:fe:dd:44:d0:81:17:d3:0f:66:cb:bb:
16:b9:72:fb:2e:e2:8d:85:ef:a4:9a:a2:ca:10:c0:23:47:31:
49:32:9b:26:a9:5f:25:87:3d:7a:ae:d7:bc:3e:6a:73:b5:93:
a1:72:83:49:02:5a:99:ef:ef:b9:13:37:94:c3:b1:2a:b2:e2:
38:bf:be:2e:b7:71:d4:9e:65:af:f7:f9:cb:1e:78:53:1e:60:
86:95:49:b4:e5:01:7e:ba:0b:86:59:53:b1:e9:d6:e1:6f:b0:
e6:94:96:e6:21:d0:ec:66:1d:d8:3b:2c:01:0a:f0:9d:9e:d5:
e6:2e:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 07:29:56 2025 by rpki-client