Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer (raw, json)
Hash identifier: p9CH1sVrUCvcExiJzEZeARxnWDabgh0uVWBS5OZrric=
Subject key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Jun 2025 04:57:25 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.36.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26339 (0x66e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 23 04:57:25 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:8d:44:4c:3a:7d:27:e2:16:02:6d:6b:d7:
ad:1e:a0:8d:2e:ed:cb:af:99:e6:ae:f4:b0:f2:bd:
66:49:bd:84:f1:13:6e:81:32:56:fc:e3:d6:0b:9b:
7f:c7:e9:01:35:54:6c:55:71:c2:cc:5b:96:e1:d6:
83:9e:5c:ec:02:9d:a4:8f:61:77:e6:e9:f3:ac:d3:
29:62:4f:7f:a9:a9:30:1b:d3:a5:72:83:80:b4:8a:
9b:21:b9:56:6f:7e:3f:70:d0:84:75:a2:8f:6c:af:
55:f2:1c:dc:28:60:8d:78:fd:69:f5:f8:39:d6:20:
3d:f9:ee:7e:7b:6b:32:27:04:42:22:09:77:0d:cb:
db:e4:ab:38:cf:b1:fd:cf:0c:e3:3a:71:7a:3a:1f:
d6:eb:1a:17:87:a9:dc:46:e0:fc:29:83:9c:06:53:
29:46:eb:9f:01:fa:7c:ca:f5:1d:c5:fe:d6:fb:df:
30:7a:41:2c:9d:5d:9a:14:aa:c5:97:90:6e:99:5c:
3e:4a:31:67:c9:a2:28:39:3f:84:33:23:d4:6c:ae:
f7:5b:37:0a:1c:70:2f:d6:b9:aa:a7:4e:44:f1:35:
85:23:ae:72:60:a4:e9:db:24:b8:2c:47:09:31:69:
d8:61:07:92:b8:34:c2:a0:8e:99:bd:ec:d6:a4:8e:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.36.0/23
Signature Algorithm: sha256WithRSAEncryption
21:de:eb:62:7a:c7:8a:9e:b5:dd:06:06:f6:07:e5:96:05:ff:
62:f9:42:d7:04:6a:bc:6a:ca:e3:c8:57:e2:f5:b7:3b:ef:66:
8a:5d:e3:34:a1:33:d7:67:d6:e4:3f:d0:4c:b4:f1:ca:92:66:
bf:28:d9:0a:87:f9:88:5d:c3:74:6d:34:c3:e0:cb:83:8d:e7:
3e:d2:35:5c:75:73:e9:f1:3a:48:68:5e:90:3b:28:38:2b:2d:
72:bf:6e:64:f5:f4:9e:0f:31:b8:37:39:e0:02:e4:6c:c0:fc:
97:72:c9:52:be:67:bd:c5:34:7f:0a:fe:fc:b4:6b:6c:0a:96:
b9:2c:ae:7c:53:6f:76:51:58:cc:6b:e2:fe:de:d1:57:5e:6b:
1d:f6:93:ba:a1:bd:93:52:a5:1c:76:3c:c4:13:7f:c2:4c:8b:
fb:70:d0:eb:e9:dc:0e:72:0f:5a:44:c2:2c:81:c9:76:83:5d:
f6:14:c6:c9:7d:ad:b6:c2:42:1b:e8:8c:aa:36:6f:cd:b6:82:
aa:20:e6:c1:76:e7:af:4b:11:24:f0:ef:cf:b4:50:f5:ff:47:
01:8f:b4:87:45:25:9b:b1:1e:aa:03:ba:fa:22:6a:5c:41:b3:
b2:58:cf:0c:83:d6:9d:3a:8c:90:64:ef:db:55:b7:48:f9:11:
59:5e:e8:05
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNjIzMDQ1NzI1WhcNMjYwNzMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0OENDRTExMC8GA1UEBRMoNEU3RkVBNzFBNDQ3QTZBMTYxNzlDMjY5
N0VCRUU1NTUxOTlEQjA5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANwjjURMOn0n4hYCbWvXrR6gjS7ty6+Z5q70sPK9Zkm9hPETboEyVvzj1gubf8fp
ATVUbFVxwsxbluHWg55c7AKdpI9hd+bp86zTKWJPf6mpMBvTpXKDgLSKmyG5Vm9+
P3DQhHWij2yvVfIc3ChgjXj9afX4OdYgPfnufntrMicEQiIJdw3L2+SrOM+x/c8M
4zpxejof1usaF4ep3Ebg/CmDnAZTKUbrnwH6fMr1HcX+1vvfMHpBLJ1dmhSqxZeQ
bplcPkoxZ8miKDk/hDMj1Gyu91s3ChxwL9a5qqdORPE1hSOucmCk6dskuCxHCTFp
2GEHkrg0wqCOmb3s1qSO1YcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBROf+pxpEem
oWF5wml+vuVVGZ2wmDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhDQ0UvOEIyMTkwOUM0RkVFMTFGMDgwMzc5NDgyQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ4Q0NFLzhCMjE5MDlDNEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJI
cHFGaGVjSnBmcjdsVlJtZHNKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVjJDANBgkqhkiG9w0BAQsFAAOCAQEAId7rYnrHip613QYG9gfl
lgX/YvlC1wRqvGrK48hX4vW3O+9mil3jNKEz12fW5D/QTLTxypJmvyjZCof5iF3D
dG00w+DLg43nPtI1XHVz6fE6SGhekDsoOCstcr9uZPX0ng8xuDc54ALkbMD8l3LJ
Ur5nvcU0fwr+/LRrbAqWuSyufFNvdlFYzGvi/t7RV15rHfaTuqG9k1KlHHY8xBN/
wkyL+3DQ6+ncDnIPWkTCLIHJdoNd9hTGyX2ttsJCG+iMqjZvzbaCqiDmwXbnr0sR
JPDvz7RQ9f9HAY+0h0Ulm7EeqgO6+iJqXEGzsljPDIPWnTqMkGTv21W3SPkRWV7o
BQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 20:39:57 2025 by rpki-client