Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer (raw, json)
Hash identifier: oTGh3HvlXGOQBOm0sTnXZjF+f1yNUCLQ7kJnxv1Ivgs=
Subject key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6685
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 15 Jun 2025 22:45:40 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 22:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26245 (0x6685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 15 22:45:40 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:c7:2b:49:76:4e:df:fb:eb:09:c0:c5:98:
eb:9b:0d:46:4c:37:d6:f1:37:45:55:d9:ce:6d:b7:
ee:7f:d8:a0:fe:0e:f8:a1:0b:66:a3:02:88:16:52:
6f:fa:24:be:ed:a0:9b:cf:25:ce:e4:ca:ad:2d:d8:
85:46:3d:9c:e7:c5:36:40:cc:d8:88:56:4f:30:39:
8e:ec:06:1c:72:89:d2:f7:ce:04:df:c4:66:12:8e:
74:b7:be:8d:6b:51:05:12:5a:e1:7a:06:a7:fb:a6:
f2:80:a0:fc:28:b4:1d:b6:f7:94:42:48:7f:32:1f:
ab:7d:2f:2f:29:6b:28:25:8a:b4:74:0c:0c:f5:21:
2c:ee:06:b3:c1:5e:04:27:77:8b:d8:70:4a:1a:a7:
3a:2c:a0:9f:13:7c:97:fc:0b:4f:c2:04:55:9b:e1:
46:9d:ef:15:26:6d:b3:a0:51:0c:c6:c2:ff:15:34:
b2:fc:17:19:4a:47:40:75:67:ae:54:f6:2a:e1:b3:
50:00:af:ac:98:5d:fc:2a:a3:1c:75:0c:f7:34:fa:
55:6b:9d:f7:7c:2e:ee:bd:e7:e3:b2:e1:6d:ab:af:
32:b7:b5:45:e4:e9:66:c1:f4:53:3f:a5:26:65:56:
22:e5:2c:13:a0:16:8e:92:b8:66:38:2f:8f:bf:7d:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.122.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:09:47:e7:d1:a2:85:b3:a2:2e:3c:56:42:78:20:88:f3:4f:
c2:57:78:8a:3e:ac:00:da:88:8b:76:a2:be:06:bf:b4:67:c9:
bb:07:7a:10:0c:84:f4:bd:db:a7:33:2f:e1:de:da:d0:93:89:
ee:ab:cb:f9:b9:44:18:16:03:d3:f6:33:9c:1e:aa:db:07:f3:
48:51:ea:1f:b2:18:ef:ca:91:79:54:cc:b8:c7:ec:98:35:fe:
25:c4:7c:54:84:d8:0c:a4:4f:45:07:13:01:2d:19:89:b5:bc:
03:5a:e4:06:00:f0:17:dc:2a:5c:62:e5:ef:05:48:89:fd:25:
a2:0c:8c:2b:0d:7a:68:a5:8a:45:a7:80:14:73:00:38:3c:03:
bf:58:b6:58:88:9f:32:5f:30:4f:14:16:a7:29:db:fd:c2:33:
17:89:5d:05:f1:d1:f5:f6:d8:0f:2d:4b:88:9f:31:57:b7:da:
39:8e:a3:8d:f7:02:61:cd:d4:88:77:34:98:4e:d0:79:4f:b0:
55:45:5d:ee:14:e5:30:ce:38:1e:f6:d2:43:07:6c:67:31:29:
0c:16:47:aa:b4:75:a2:1a:1f:be:83:c1:3d:3b:d6:78:95:2a:
ee:45:09:00:b8:95:f6:f4:5b:12:60:a7:5b:87:e2:d0:2a:61:
be:77:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:12:38 2025 by rpki-client