Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer (raw, json)
Hash identifier: S4dMeJLz6QMxzXVmWKxm+2qkQRhwbL0PbtYQECzixwo=
Subject key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 64A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 07 May 2025 16:21:07 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 168.70.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Jun 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25763 (0x64a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 7 16:21:07 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:43:af:54:39:e4:a9:e5:a4:64:03:ee:4c:
c2:d5:09:6a:23:3f:83:97:7a:31:4e:d9:49:01:bb:
bd:c7:22:a7:b0:02:e2:22:55:97:d1:96:5a:11:4c:
34:d3:4a:0c:4f:3b:7d:81:7c:57:2b:3c:c6:39:8d:
f2:0e:74:3f:b4:6c:53:70:83:02:b6:9d:63:a3:05:
54:75:82:09:33:6c:d5:ac:bf:8d:f8:b8:40:10:44:
d0:5c:c4:16:7c:bc:12:1f:9c:08:06:32:a7:00:09:
40:47:de:80:a8:37:26:29:dc:8c:d3:09:61:87:e4:
67:82:cb:6d:67:ee:e9:49:df:30:8d:2b:ee:e3:21:
e7:67:fb:ce:39:56:75:71:aa:af:fd:9c:8b:58:6c:
20:4f:1f:c7:ee:77:a6:93:68:22:56:ea:bf:8e:4b:
ae:ee:f3:27:31:fe:a8:d5:80:68:6a:a1:4a:66:a0:
26:2b:89:8c:a3:cd:b9:28:b6:47:8c:ff:55:25:f4:
2f:57:bc:da:59:55:2b:a9:aa:0e:f9:9d:68:d7:99:
e4:ef:ed:49:fd:55:10:d5:79:03:2e:7c:fb:0e:df:
cf:f8:84:08:11:cd:d1:09:14:2e:56:85:d3:67:cf:
62:b4:c5:60:29:57:f8:da:ab:6c:1a:84:31:d4:96:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:ee:da:5e:a3:97:6d:e3:e6:e6:f1:24:1d:35:cb:46:31:6c:
9d:96:ee:9a:35:fe:78:68:65:3c:b9:c1:61:cf:65:9f:02:5f:
c8:44:40:3b:86:16:86:e6:fb:a7:39:3b:6f:c2:1d:d5:80:1d:
a6:b5:7a:b0:60:ee:d4:25:ac:a8:a0:0b:03:41:48:7c:de:ca:
f1:3f:1f:9a:5a:89:e7:d8:5b:d8:ff:b9:25:e5:72:c3:c6:2f:
90:cc:1c:08:e6:11:e0:a9:a4:0c:fc:5c:ee:10:11:9b:fb:cc:
ea:5c:f3:fb:c5:62:cc:f0:d8:31:aa:7a:9f:28:82:73:6d:2d:
f4:99:3e:24:dc:54:21:b9:7f:38:f8:6a:44:26:7d:0f:7e:29:
d3:76:81:1c:b9:13:98:ed:49:4a:d8:53:a6:ed:2b:b5:27:cc:
74:e8:db:1d:45:92:b2:e9:80:d6:d0:e3:8f:ce:90:72:38:eb:
e3:c5:ad:bd:fd:1c:39:82:8e:08:48:fc:56:e3:e9:22:32:f5:
ea:84:38:e0:d6:11:80:8f:75:a0:e0:4f:0b:bf:fd:1b:0c:ac:
34:79:c1:96:20:d3:71:0e:98:d7:6b:ac:ec:34:8a:03:47:da:
41:08:54:54:d4:97:7e:e4:7e:6c:c5:83:64:8f:ba:4f:f9:9c:
d0:d8:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 07:39:48 2025 by rpki-client