Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer
File: NEG9O2ntc3NN-3NQWpXySCGmHoE.cer (raw, json)
Hash identifier: JG+sYFlmkQWZFQesDkeRBmey/3GdotJObkWoaYNd2ik=
Subject key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6537
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 May 2025 05:25:45 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.92.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25911 (0x6537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 20 05:25:45 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:1a:22:62:cd:d9:bc:e8:75:f6:bc:08:9a:
2b:8e:28:75:6a:e5:0b:8a:91:f2:02:51:39:a4:c5:
11:29:da:d7:bf:70:08:d9:e7:0d:41:ca:96:c7:77:
27:2b:a5:13:9e:c0:ab:c0:48:65:c7:8d:07:5b:0c:
94:71:45:e5:59:65:b9:ad:29:3c:63:0f:bd:a0:98:
a0:79:f9:42:89:60:50:ec:74:f1:47:3c:12:dd:8a:
7b:d5:cc:0f:ed:42:ef:4b:8a:28:92:cf:73:52:f6:
39:a4:dc:ac:2d:19:1c:3b:7e:58:6b:b7:a0:62:db:
27:25:81:5e:f6:25:08:9c:04:1d:cd:c5:1c:20:a0:
9e:9d:ff:4d:5f:74:b2:f0:41:29:42:c1:9d:06:fb:
13:96:db:e6:18:52:b3:7f:f5:00:a4:3e:eb:34:81:
08:ff:e4:37:58:32:bb:9d:15:a7:64:80:3c:b7:7e:
16:61:42:a6:d9:f9:57:cf:52:c8:43:48:72:a2:a2:
ba:3e:97:30:71:ca:ff:35:f6:9f:7f:aa:80:76:48:
2e:69:a6:a4:4c:84:af:20:d8:f7:e7:ad:41:e7:0f:
45:2b:03:e7:0a:21:c3:4f:49:f5:ed:08:1f:80:9f:
05:97:fb:ff:c0:72:60:67:d5:37:6e:d3:cf:0a:f7:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:69:ac:41:b9:7b:89:3c:29:03:a3:74:ec:b8:e9:c8:02:cc:
98:56:de:64:be:fd:51:a1:e8:46:68:de:87:16:f9:57:2e:57:
39:90:9f:c9:c5:26:af:58:f3:bf:9a:b9:22:11:8f:a8:f5:3c:
55:f9:01:e2:65:4b:1e:99:8b:70:75:e5:6e:b3:9c:48:7d:5e:
a6:e4:84:d9:10:36:54:9e:a2:ac:92:5e:c6:bc:c7:2e:22:7c:
86:f1:25:9e:12:73:ef:ca:df:14:03:c0:7f:1c:bb:77:8c:36:
d7:9e:9d:5d:1c:ff:5f:e6:c3:13:b9:38:74:7a:dc:f2:17:60:
60:1c:e9:5f:82:51:29:9a:80:4d:b7:85:07:0c:24:a8:07:43:
8c:bd:4b:2b:d4:45:1b:fd:c2:03:8e:ae:8d:d2:47:2e:32:6e:
61:7d:a5:5b:8c:1e:72:e7:a9:4c:ff:03:a6:8b:af:ee:c2:e9:
71:20:df:92:89:ea:61:70:45:b7:b5:b3:71:92:83:ac:51:72:
04:16:12:15:ba:ec:d8:95:a3:a3:14:cf:c0:11:3f:92:5d:53:
f9:b6:ac:69:92:28:4e:d7:43:d5:be:45:1f:4c:2a:39:13:43:
09:5e:fe:bf:f4:91:97:b7:7b:f6:86:55:03:25:d4:d4:2c:90:
83:a7:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:38:44 2025 by rpki-client