Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
File: NmIvmQC0aq380FRk8Q1CsTBiUXY.cer (raw, json)
Hash identifier: M2oIHFYm9UlySU1+l1coxD6ueuS59yJa63t7gCrYwvE=
Subject key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6864
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Jul 2025 07:29:07 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.214.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26724 (0x6864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 17 07:29:07 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:9b:b4:35:0c:8f:c2:07:5c:0f:21:1e:03:
63:79:91:d3:8d:13:ed:5c:95:02:89:7f:ba:8b:a4:
63:ce:01:0a:3e:30:11:4f:f3:ef:6b:ab:67:e9:53:
23:86:62:71:29:04:d7:da:2e:9e:91:12:f9:c8:e1:
34:45:50:25:21:63:ad:c9:d2:10:76:e5:c2:4c:1c:
28:28:8f:13:1c:c1:bd:9d:02:8d:1e:30:b4:3f:f1:
d5:0b:49:47:a9:2f:35:b5:ad:f5:1b:7e:de:bc:4b:
ec:dd:6a:67:1f:50:40:9d:d4:24:bd:a3:51:ca:6a:
c0:71:7e:00:eb:99:3e:91:44:32:76:74:d4:69:fc:
aa:b0:1e:b6:97:d2:a3:4d:5a:13:b6:51:84:fc:6f:
80:43:0b:86:19:5e:41:c1:ce:11:02:eb:56:44:3b:
05:3c:36:8e:d7:84:70:32:8a:cd:b0:cc:b7:65:80:
30:8e:02:b5:54:f4:56:dd:8a:d9:e1:36:2c:7f:15:
cc:00:fe:2d:80:0d:b8:61:72:a1:7c:f7:7e:9e:40:
c6:15:9d:53:bb:49:15:71:48:62:52:74:69:7a:a3:
4e:3a:af:b5:8f:ec:ad:4e:ca:01:ef:0a:a9:99:35:
00:2e:1c:64:75:82:6d:f8:30:6f:c5:fc:8a:27:a3:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.214.0/23
Signature Algorithm: sha256WithRSAEncryption
22:76:44:42:59:ad:c3:41:ac:0c:a3:1d:bf:96:79:99:ac:86:
8b:86:b9:9d:18:79:0d:c7:19:9c:8a:fa:57:54:71:04:14:82:
d5:b3:66:38:fd:71:17:d6:90:8e:30:14:92:bb:07:f0:d1:ea:
73:f6:2a:f7:3a:a7:2a:cd:d8:77:7c:a9:53:25:41:aa:23:33:
7e:3b:ea:14:fd:c4:53:df:ef:3f:3b:64:dc:86:f2:4e:85:a2:
9e:45:a5:9a:fb:63:6b:c9:16:50:f8:ae:8b:7f:12:60:b0:49:
f5:45:32:2f:29:c9:a0:ad:ab:9a:93:55:2a:96:2e:70:7e:02:
ea:9e:e6:37:82:a1:a8:f2:28:00:84:c3:56:c4:9d:69:39:30:
b5:50:db:4d:45:1b:95:95:c9:bf:a0:df:78:2b:d4:ce:7a:83:
8c:1f:0e:bb:58:98:9b:bf:52:99:ae:83:f0:f5:af:13:05:ff:
67:67:a7:16:ca:aa:e1:70:82:36:39:b8:9c:09:ef:5b:f4:c7:
e1:61:26:b1:7e:48:5f:db:2b:2e:86:a1:f8:6e:50:0e:8a:95:
37:27:ce:21:2f:72:79:17:bf:ae:2e:90:80:77:cc:2e:3c:09:
dd:93:7d:ce:57:3d:4b:e0:53:e0:0b:a0:0e:c4:1e:ed:df:7a:
9c:fa:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:06:44 2025 by rpki-client