Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
File: Os9EXPzs-7KROzR9Z6go4EChWh0.cer (raw, json)
Hash identifier: w5YqViEqB3CefKt7WiJPUiXJurqQ8sMOZae3xr4wBVk=
Subject key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6823
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 13 Jul 2025 05:15:23 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26659 (0x6823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 13 05:15:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:10:f8:33:a0:8d:cb:d8:c3:c4:ad:0c:ab:
9d:45:c4:7c:a2:53:34:08:b8:53:55:c6:0e:2c:f5:
63:68:a5:41:d4:42:3a:28:cd:ad:67:51:8f:21:e1:
04:b4:e8:34:5a:1e:81:bc:62:0d:38:46:ca:79:eb:
90:87:07:32:a0:a0:73:58:6e:ed:05:11:15:ce:5f:
ae:52:b9:bd:14:36:6f:07:3f:5f:b8:07:0b:ea:54:
ae:1e:99:dc:a2:c8:6e:82:dd:ae:ed:51:e5:ab:c0:
d3:41:42:01:f8:7b:19:78:b3:fa:27:46:ca:de:e5:
f2:10:4c:0c:44:e1:f1:cb:e8:0f:32:29:e6:70:21:
ae:29:9e:29:f6:fc:3e:3f:9e:32:ba:e1:4a:6e:c1:
7d:54:c0:c3:79:08:20:b7:ae:9f:09:f9:0d:6c:7c:
9d:24:bc:0d:9c:4c:1a:17:26:22:7f:a3:4f:7f:8f:
f8:78:d6:07:99:62:92:d3:ce:d5:bf:ac:48:8e:1f:
ab:20:4c:40:7c:01:cd:94:08:98:92:7e:d5:74:ab:
d6:f3:a0:ec:f7:f3:40:00:5e:87:5f:07:84:73:25:
21:a4:d4:e9:53:c6:ba:ad:d6:37:72:4e:e4:aa:73:
59:ef:ee:6a:e7:2d:95:32:64:f9:dd:03:47:b6:ba:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:41:f0:2e:9a:00:37:29:b1:83:f0:0d:13:48:45:78:29:83:
86:34:03:a5:37:fd:8b:4c:93:3d:11:5a:b1:bb:73:f2:25:95:
f3:65:52:1c:28:1e:ae:7b:2c:8e:22:c7:dc:4e:48:0b:5d:15:
a0:bb:88:db:7b:4a:da:53:5c:db:25:c7:57:6f:42:02:0d:19:
72:e6:cc:dc:07:a2:d5:51:28:fa:55:7d:49:c5:61:59:b8:5a:
97:79:6e:09:14:97:9b:59:2a:40:11:63:e8:54:85:9d:ec:92:
4f:1d:06:dc:ff:94:a7:d7:e7:e4:d7:d3:74:7a:b0:e0:5a:47:
48:28:08:e5:4e:85:38:14:91:ff:ed:31:23:5c:0f:04:d3:14:
d5:46:98:06:bb:14:f4:c2:db:4d:45:41:fa:40:57:ee:43:e2:
96:6c:95:90:a2:62:a1:d1:c0:24:96:12:b6:e5:0d:02:af:eb:
f5:d2:39:52:d3:84:4e:1d:2e:0d:7a:0a:88:d8:24:90:85:e4:
a2:50:36:47:c2:a8:50:67:62:ee:38:94:25:97:c5:f7:6c:ab:
5a:36:63:96:fc:9b:5a:fb:a7:34:36:89:62:2d:51:ac:e8:c9:
95:3d:cf:64:a9:bd:9c:6f:84:d8:da:21:8e:cc:28:19:4a:78:
e0:34:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:33:13 2025 by rpki-client