Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
File: TT_EcGT06hvcqym55lsx103iZOA.cer (raw, json)
Hash identifier: D3xLOkIDo1SLPKW/YLFBZdhIm+4d7t8oNUYiEEsMZAM=
Subject key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 653D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 May 2025 07:16:10 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.24.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25917 (0x653d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 20 07:16:10 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:b9:07:28:57:c0:23:60:d8:06:0b:6f:06:
9f:1f:2e:f2:93:e3:29:1c:72:44:29:a3:45:f0:58:
93:cd:c7:2e:6f:ca:84:e3:76:9b:0a:1b:e8:f9:fa:
a1:c3:cc:04:e2:b2:f7:24:a6:07:a7:20:f9:7f:7f:
45:17:a4:f6:d0:ab:53:53:10:b2:e9:39:5b:d3:14:
7d:81:0f:e3:75:0b:b4:a3:b0:84:91:5a:05:5f:aa:
5b:75:15:2a:cc:45:11:e8:ed:0e:97:98:b5:6e:e8:
82:3d:2f:54:63:36:17:16:88:8a:6d:15:c8:bf:97:
0f:ee:3c:e8:1a:05:ed:c1:54:c5:e7:8e:00:a1:a5:
5b:da:32:cd:8c:66:31:f7:10:82:ff:64:97:dc:ab:
a8:20:4c:dc:3e:d8:11:16:bd:84:75:6d:79:06:f9:
99:f4:00:29:29:0f:58:45:fc:50:bf:fe:8a:41:4b:
82:f8:d5:35:ac:24:7b:7b:00:69:44:6b:38:25:65:
e1:20:0e:f0:4b:8c:a9:3b:8c:0e:40:18:64:ef:af:
b7:a0:02:4c:df:85:d3:0a:d4:82:01:e8:65:a6:24:
9a:d0:1b:9a:e9:87:9e:10:3f:1d:f5:10:43:db:4b:
23:38:bc:5b:9f:5a:af:5e:5f:84:c0:c6:da:d5:1e:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.24.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5a:54:a2:d4:97:36:0f:d3:b3:06:69:10:1c:71:04:99:48:
86:48:d2:ec:04:da:08:85:c0:aa:7c:70:03:24:5e:15:b4:11:
4a:9b:b1:48:72:10:ae:f2:e3:eb:30:ca:c5:38:2d:d1:7d:82:
78:f6:5c:64:5e:12:20:80:d5:7b:84:07:74:61:c7:89:09:97:
1c:33:92:73:c9:66:82:b9:cb:f2:2c:ab:b9:6f:2a:f9:06:33:
a5:7b:9e:c5:1a:b0:ea:4f:2e:01:1c:93:fa:f2:4f:39:6a:f8:
f5:37:6e:5d:9d:b5:69:1b:32:26:c1:17:e4:58:21:49:3f:2f:
57:bf:5e:f9:2f:4f:07:35:12:fe:a3:9d:7b:ff:ce:60:04:a6:
81:c2:c5:86:aa:a0:ba:eb:ed:58:fd:ad:23:42:ab:b6:0c:04:
d4:c0:df:14:56:9b:89:45:ff:86:5c:97:37:a9:f5:4d:b3:73:
ea:16:a6:36:6d:a0:19:d7:54:d4:c0:4e:85:c9:69:11:a9:3b:
65:2a:58:0c:7a:e6:b8:60:51:fe:c1:9b:f5:b9:57:f2:1a:8b:
65:bf:52:28:31:5a:6f:4b:a2:86:68:fb:f1:0c:96:45:25:04:
76:41:1f:00:aa:ba:bd:55:a3:3f:5d:25:52:1c:96:39:4c:b3:
7d:2c:54:89
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNTIwMDcxNjEwWhcNMjYwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBRkFBQzExMC8GA1UEBRMoNEQzRkM0NzA2NEY0RUExQkRDQUIyOUI5
RTY1QjMxRDc0REUyNjRFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL8HuQcoV8AjYNgGC28Gnx8u8pPjKRxyRCmjRfBYk83HLm/KhON2mwob6Pn6ocPM
BOKy9ySmB6cg+X9/RRek9tCrU1MQsuk5W9MUfYEP43ULtKOwhJFaBV+qW3UVKsxF
EejtDpeYtW7ogj0vVGM2FxaIim0VyL+XD+486BoF7cFUxeeOAKGlW9oyzYxmMfcQ
gv9kl9yrqCBM3D7YERa9hHVteQb5mfQAKSkPWEX8UL/+ikFLgvjVNawke3sAaURr
OCVl4SAO8EuMqTuMDkAYZO+vt6ACTN+F0wrUggHoZaYkmtAbmumHnhA/HfUQQ9tL
Izi8W59ar15fhMDG2tUeNisCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRNP8RwZPTq
G9yrKbnmWzHXTeJk4DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUZBQUMvNEFGMEM5MkEzNTRBMTFGMEJBNzY2RTRDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFGQUFDLzRBRjBDOTJBMzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1Qw
Nmh2Y3F5bTU1bHN4MTAzaVpPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaD6GDANBgkqhkiG9w0BAQsFAAOCAQEAjlpUotSXNg/TswZpEBxx
BJlIhkjS7ATaCIXAqnxwAyReFbQRSpuxSHIQrvLj6zDKxTgt0X2CePZcZF4SIIDV
e4QHdGHHiQmXHDOSc8lmgrnL8iyruW8q+QYzpXuexRqw6k8uARyT+vJPOWr49Tdu
XZ21aRsyJsEX5FghST8vV79e+S9PBzUS/qOde//OYASmgcLFhqqguuvtWP2tI0Kr
tgwE1MDfFFabiUX/hlyXN6n1TbNz6hamNm2gGddU1MBOhclpEak7ZSpYDHrmuGBR
/sGb9blX8hqLZb9SKDFab0uihmj78QyWRSUEdkEfAKq6vVWjP10lUhyWOUyzfSxU
iQ==
-----END CERTIFICATE-----
Generated at Mon Jun 2 06:45:05 2025 by rpki-client