Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer (raw, json)
Hash identifier: UwpVdQBXhbgpZ3p3G/+ZCwnQ23yGGoo3ee18l+mnsKU=
Subject key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 651F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 17 May 2025 09:16:41 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.76.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Jun 2025 20:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25887 (0x651f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 17 09:16:41 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:18:46:28:b1:1f:f1:56:ee:07:cb:d9:53:
21:c7:1d:13:9d:2c:66:2c:dd:df:56:d3:5f:a5:7d:
d9:8b:3f:c8:cb:2c:f8:c8:0a:c9:13:d3:2d:4c:2f:
aa:a8:5e:75:91:54:1e:fb:e3:1c:59:9b:4e:f1:23:
87:39:ce:3f:d1:98:4c:76:f2:1f:9f:00:a2:fb:d1:
2a:3b:89:98:ad:85:56:5c:03:14:9a:b7:f9:53:03:
cd:61:d9:8b:69:99:d3:2e:ad:21:fb:0f:20:34:d1:
bd:fd:ee:03:30:53:f6:94:4e:5e:51:78:1d:a1:c3:
fd:d8:d3:26:51:c9:90:cf:5d:d4:8c:2f:04:40:f9:
4b:3f:79:f9:cc:88:97:77:75:39:e8:5a:fc:ef:ad:
d1:43:92:4a:49:f0:4f:e2:a0:21:93:31:f4:e6:e8:
be:97:ad:ff:37:6c:20:73:35:03:e2:5b:c8:8a:c2:
dc:e3:7b:c9:a9:c5:32:58:b7:e1:84:6e:99:05:73:
0f:48:60:40:17:ba:64:47:30:34:fe:40:4c:2d:8f:
91:89:6b:45:63:e5:3a:da:0c:74:11:cb:41:8f:7a:
6b:37:8f:6c:9f:39:86:84:4f:a4:77:a6:43:3f:ba:
7b:f7:a5:d3:01:ab:88:f0:02:55:b0:0b:3a:6a:00:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.76.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:2d:93:59:5e:4b:40:f8:9a:24:d4:2b:3a:91:6e:32:db:2d:
16:d5:4b:d2:a6:6f:dc:76:2f:31:80:1e:3d:0d:9e:92:ce:89:
ee:43:75:52:fc:fb:45:3b:79:88:07:f8:b8:15:df:19:5d:8d:
17:54:4d:c3:fb:e8:16:2c:40:44:f3:e4:47:f9:b2:bb:63:93:
69:e4:16:ad:fe:94:bb:3b:3f:9c:b6:e1:f0:a9:3b:4e:3f:16:
ad:65:e4:8f:d2:21:2f:12:6e:00:8a:dc:e0:e0:d0:e7:7b:47:
4b:5e:a0:9f:5e:fd:d9:bc:07:eb:09:68:3e:c3:ae:e1:89:71:
bf:a0:ba:3e:2f:d9:3e:ab:6d:d8:77:49:d8:32:ba:62:af:68:
e4:d7:fd:40:f9:e8:e8:47:e9:1e:19:6f:08:39:10:7a:d6:b3:
0b:b8:5c:4e:61:a7:64:dd:4f:e6:84:2f:6b:b9:50:54:49:43:
cc:d1:ea:29:c3:4c:e3:40:d6:e7:97:8e:09:5b:8c:ee:17:6a:
13:3c:1d:da:2d:51:ae:5d:0d:f6:02:24:a2:0d:37:9a:70:8b:
4e:f9:55:5e:3b:aa:73:42:5d:9d:6f:39:bc:ca:ac:f3:ca:a3:
cf:10:23:ab:56:54:d8:bb:b4:8a:8d:85:b0:38:7e:10:65:95:
fa:4b:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:31:36 2025 by rpki-client