Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer (raw, json)
Hash identifier: jtgiOqs5wCm+upARJVwTKaNSWEmsJfivbA0TCGSLCxU=
Subject key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 67D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Jul 2025 08:06:23 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26577 (0x67d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 8 08:06:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:f4:e8:05:5c:5f:37:0d:47:e7:33:56:ea:
da:bc:7c:7c:0d:72:c7:53:1d:20:72:f5:7d:f8:1d:
51:06:a2:4f:36:3f:70:f3:73:28:91:72:61:e7:1e:
b1:ac:f7:63:09:ed:c9:f8:2d:47:0f:5e:05:50:f3:
71:fb:ea:60:88:15:a1:2f:0d:4a:10:fd:14:6f:a7:
70:78:63:3e:13:c2:12:b2:18:9b:b5:06:38:ee:8b:
c7:38:a7:bf:ee:d5:9a:0b:10:56:0e:79:16:a7:2d:
3c:d8:de:5c:cf:b8:82:62:fe:9a:a7:06:cf:d5:68:
6a:11:34:02:50:3d:e9:13:f6:58:69:01:6e:74:fa:
84:0d:ba:70:88:ef:74:a6:eb:25:97:29:b2:cd:1f:
0f:39:09:80:8f:0a:74:b3:aa:62:df:fc:02:73:04:
a7:7b:35:9b:a7:e6:fb:36:41:cf:33:92:45:e8:b6:
b7:b1:2d:b4:d9:a1:f1:26:59:89:14:04:1c:f2:83:
1b:c4:9c:f4:7a:f4:89:a9:15:88:d8:ea:78:22:c5:
3f:2f:1b:37:f4:55:28:73:8d:70:5d:50:e2:37:a2:
f3:38:77:fc:d3:8a:86:65:04:48:e2:2d:b4:be:db:
17:78:a4:4e:e4:66:60:0d:a8:82:38:63:f7:37:38:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.122.0/23
Signature Algorithm: sha256WithRSAEncryption
72:33:7c:cf:df:d9:0f:6b:b9:4d:80:f1:07:fc:59:e9:19:5f:
16:88:bb:2c:d9:33:53:6a:2a:cd:81:74:d4:a8:7a:0d:fa:fc:
e7:f5:71:ed:a1:41:10:9b:8e:0a:f0:c1:25:01:4a:e5:79:cb:
b8:f1:75:eb:b5:ed:74:9b:5e:21:58:07:d8:a7:6d:b2:9f:2a:
dc:ab:f9:45:1f:04:ba:bd:3d:e6:cd:a6:83:52:8e:27:c7:4f:
4a:ad:9d:51:f0:3a:80:18:c5:cc:29:7f:7c:ce:8f:ed:1a:ff:
51:f2:11:eb:03:4b:75:7d:3f:a8:2e:d8:09:d5:16:d6:b4:ca:
07:9f:af:01:cf:e0:ed:bd:b3:42:5a:f6:12:d1:69:47:15:26:
f0:08:5c:63:af:2c:8c:21:cb:d2:e6:66:61:b3:9f:5a:3b:40:
af:f3:ba:a0:05:10:2a:b2:15:a8:74:ef:74:72:cd:b3:1c:5f:
68:1f:c3:e3:9e:28:fc:5e:63:2b:f9:96:81:ea:81:69:20:9e:
0e:05:9f:aa:58:f0:f7:3d:21:a2:dc:19:72:0b:0c:66:0e:ad:
04:35:2e:5c:5d:d3:c6:9a:1e:dc:bc:01:31:ba:f0:46:c9:48:
6f:45:bf:b9:6a:05:56:20:92:c8:74:1c:8f:d9:54:14:20:5a:
f0:e7:19:80
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZ9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNzA4MDgwNjIzWhcNMjYxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTExREY1NjExMC8GA1UEBRMoMUJENjMzNkI5Nzg2OEMyRjU0RUIzRDk0
NzhEMzlFNDE3MzFENDQ4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALvc9OgFXF83DUfnM1bq2rx8fA1yx1MdIHL1ffgdUQaiTzY/cPNzKJFyYecesaz3
YwntyfgtRw9eBVDzcfvqYIgVoS8NShD9FG+ncHhjPhPCErIYm7UGOO6Lxzinv+7V
mgsQVg55FqctPNjeXM+4gmL+mqcGz9VoahE0AlA96RP2WGkBbnT6hA26cIjvdKbr
JZcpss0fDzkJgI8KdLOqYt/8AnMEp3s1m6fm+zZBzzOSRei2t7EttNmh8SZZiRQE
HPKDG8Sc9Hr0iakViNjqeCLFPy8bN/RVKHONcF1Q4jei8zh3/NOKhmUESOIttL7b
F3ikTuRmYA2ogjhj9zc41lcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQb1jNrl4aM
L1TrPZR4055Bcx1EhzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MURGNTYvNkQ1RTZBNTQ1QkQyMTFGMEI3MzdENDVBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFERjU2LzZENUU2QTU0NUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVH
akM5VTZ6MlVlTk9lUVhNZFJJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVlejANBgkqhkiG9w0BAQsFAAOCAQEAcjN8z9/ZD2u5TYDxB/xZ
6RlfFoi7LNkzU2oqzYF01Kh6Dfr85/Vx7aFBEJuOCvDBJQFK5XnLuPF167XtdJte
IVgH2Kdtsp8q3Kv5RR8Eur095s2mg1KOJ8dPSq2dUfA6gBjFzCl/fM6P7Rr/UfIR
6wNLdX0/qC7YCdUW1rTKB5+vAc/g7b2zQlr2EtFpRxUm8AhcY68sjCHL0uZmYbOf
WjtAr/O6oAUQKrIVqHTvdHLNsxxfaB/D454o/F5jK/mWgeqBaSCeDgWfqljw9z0h
otwZcgsMZg6tBDUuXF3Txpoe3LwBMbrwRslIb0W/uWoFViCSyHQcj9lUFCBa8OcZ
gA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 15:39:14 2025 by rpki-client