Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
File: FzwmoIboW4_bkXqo2RHhwAq2o6E.cer (raw, json)
Hash identifier: AMoxSn6EYkFz45kOZkYeqBPsxN8p6cnRBbsYkItN0jg=
Subject key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 67CB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Jul 2025 22:39:19 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.76.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26571 (0x67cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 7 22:39:19 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:47:6f:b0:a6:05:34:81:0b:4f:18:9a:d6:
7a:67:45:28:a1:47:c1:5f:ed:fa:6d:8d:23:32:47:
11:3b:87:8d:b9:c3:99:55:ff:9f:06:47:56:51:87:
77:bd:29:7b:49:59:db:d8:2c:a4:2f:53:c6:3f:15:
6f:d6:21:48:e5:5b:cf:d5:66:a5:e2:80:58:c6:27:
4a:3f:24:e4:99:0e:2d:57:a1:eb:f9:5b:29:96:5a:
75:06:25:12:1e:d7:6c:eb:ba:94:78:fc:11:f1:74:
64:b4:9b:90:8a:40:18:68:94:05:bb:1c:db:f2:0a:
39:11:7f:e2:dd:39:b4:1c:ff:1b:46:90:ef:58:0e:
47:92:33:79:a1:3d:19:d0:c9:76:7e:90:2c:1a:ee:
48:14:cc:2e:2e:2a:e6:c1:21:c5:29:05:cb:36:08:
37:cc:4a:e8:b9:cf:63:74:ab:6d:c7:47:a2:d4:c5:
dc:41:7b:c9:34:a5:b0:06:c7:68:27:fc:85:38:6c:
1f:da:4a:18:01:dc:57:c4:8b:24:ef:0f:b3:79:d1:
ef:60:a9:da:78:4b:15:99:27:82:98:06:f5:24:f7:
1d:d9:4c:08:b7:d8:cf:f8:8a:3d:f6:73:f0:fd:69:
47:14:4f:94:d4:33:82:da:a2:9a:0c:f0:34:28:2a:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.76.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:22:6b:b7:01:ee:6d:30:81:64:29:cc:f7:72:4c:0c:dc:87:
0c:d0:27:02:f4:a5:1b:dd:cd:b2:bf:6a:30:9d:be:49:f4:f5:
78:c8:1c:e4:3b:b2:3e:5a:c6:e5:60:c3:23:de:e1:3e:73:2a:
bb:bc:25:4d:4e:64:78:7d:e2:c7:23:bd:59:e8:71:cf:61:dc:
60:31:14:e3:54:35:00:99:71:ce:95:27:60:79:3f:c7:f1:09:
59:d5:ae:db:0f:8c:d6:b7:76:79:82:5c:37:0f:1e:36:58:03:
27:13:e2:c7:b4:f9:6a:83:b5:e2:3f:30:bb:90:67:18:7d:79:
98:34:4f:9f:5f:5c:35:e0:81:75:29:c8:fc:f5:6a:7e:a4:14:
27:f6:12:7a:3b:90:aa:fa:d1:5b:c9:82:99:e6:9f:ba:02:32:
85:2e:1c:68:a7:e3:8e:12:da:30:f4:08:c1:dc:6f:f1:1d:55:
88:11:2a:39:c6:74:6c:55:63:c0:7b:98:2e:e8:b5:71:88:4b:
c5:1a:62:3d:32:0c:a6:05:9e:d1:f7:85:a9:bf:7c:81:8e:e6:
52:eb:f7:eb:5e:04:64:88:f7:26:b4:f7:fc:ea:0d:90:3c:e7:
10:59:e0:d5:bd:ae:e1:a9:71:dd:0a:a8:9e:1b:9e:26:4b:40:
2c:74:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:58:47 2025 by rpki-client