Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer (raw, json)
Hash identifier: e1osMMQU8xkdrDFkWzPijGq3qqr4CkWLlUgXUAuHmQg=
Subject key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6829
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 13 Jul 2025 13:14:27 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.52.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26665 (0x6829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 13 13:14:27 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:d7:03:d4:37:03:c7:f8:a1:83:55:44:bb:
3d:5b:a1:5f:93:5d:c3:62:44:c5:0f:5e:88:19:7a:
ca:28:54:22:3b:db:1a:4f:86:17:2e:c8:df:a7:ab:
9d:3b:ce:87:cf:31:ea:37:10:2f:4d:ab:68:af:ab:
e4:d3:db:e8:77:34:a6:c6:70:e1:e2:a5:cb:90:95:
af:ec:93:a0:0f:ad:b9:8f:a6:25:c4:6e:d6:54:6d:
11:d6:fa:fe:8b:65:db:1a:98:e6:62:cd:12:bd:9f:
80:75:19:10:13:f2:af:c8:65:1f:47:bf:ba:0c:a6:
c3:89:e2:c3:77:97:9a:83:77:d7:d3:3c:9e:22:b8:
40:25:27:0c:51:f1:aa:88:3b:3d:63:7c:e5:b8:93:
31:d4:27:44:17:9e:7a:29:09:cf:83:2a:90:e3:42:
20:23:7c:1d:c5:d7:c8:fe:59:f2:d7:28:43:0c:18:
3e:65:49:21:f1:cb:63:a7:d3:69:0b:77:5c:f9:7c:
47:12:4d:1d:06:ac:66:cb:18:0d:81:dc:73:bf:9e:
e9:51:d1:b9:cb:e4:32:1a:9b:c0:78:12:8e:14:1c:
91:4c:f1:01:22:59:00:ff:df:39:0d:2e:09:ae:c4:
74:0e:a0:a3:ad:90:eb:ac:00:54:c6:ba:98:e0:97:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.52.0/23
Signature Algorithm: sha256WithRSAEncryption
67:d0:9a:38:ee:07:10:1f:d7:30:7f:13:09:aa:07:7a:22:83:
83:bb:27:3f:d8:36:8f:3c:c9:db:92:57:4a:ab:1e:66:0b:bf:
aa:9d:33:4b:f9:21:d7:16:ce:8c:ad:c7:11:03:28:94:e3:f1:
b0:c7:12:c9:4d:e4:43:6d:8e:b3:4c:7f:ba:dc:64:e4:28:9a:
4e:04:37:be:88:31:16:95:db:a9:98:c6:e2:60:44:32:ce:1b:
3a:f5:a3:8f:28:c8:25:34:4b:81:e1:49:5c:bd:87:3a:39:03:
93:96:25:77:1e:9f:39:c9:31:e4:87:b6:d2:d0:aa:65:c2:2f:
5a:5a:5c:ca:c0:ca:28:4d:10:29:a7:7f:f0:9c:ae:81:86:5e:
fe:5b:68:93:df:27:63:e5:c4:d6:48:e6:fb:19:a2:b5:c1:23:
7d:53:77:c4:87:74:00:86:95:4c:05:06:2d:e2:10:0e:e4:93:
d4:25:a4:83:af:3d:2d:f3:aa:3e:84:93:16:e2:60:23:49:e8:
8b:6f:ef:6c:70:9a:ef:71:7c:51:59:2d:04:3a:35:f2:2a:bc:
56:2b:ad:05:eb:75:df:16:04:93:11:0c:6c:f9:8c:e9:2d:c1:
89:5a:12:66:3c:5f:20:de:f2:0a:b1:56:22:46:88:a1:5e:28:
e4:7c:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:01:37 2025 by rpki-client