Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
File: V4hJyblKNVp2IKl0eXPSG77aP1M.cer (raw, json)
Hash identifier: vDRPG7kI1gDsQ2nuOMS0oMQ11o7F+6MT3E8Jblm+1aE=
Subject key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6771
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Jul 2025 10:25:09 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.254.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26481 (0x6771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 2 10:25:09 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:9d:b1:80:55:40:75:04:6e:56:60:d8:7c:
47:72:ec:7e:76:29:1c:d9:44:20:00:1b:da:7f:c6:
1d:8a:70:85:b2:e2:c4:da:9c:65:db:cf:3c:c0:83:
2c:f9:b9:f0:ca:eb:ad:5f:c4:a5:97:ef:75:24:2b:
1a:c1:18:52:68:2c:a5:87:18:3d:a2:96:49:23:fe:
60:bc:ac:4c:f9:0e:95:24:9f:fe:ac:a8:11:f0:3e:
80:b9:6f:8b:72:7b:3e:5e:92:9e:2b:da:95:4f:3e:
83:c5:b2:b7:93:66:34:c1:46:c8:24:3f:d8:65:89:
e7:a7:b9:42:45:35:67:22:24:c1:71:43:4a:ac:c3:
ea:59:8f:ef:a7:aa:15:9c:a5:8d:ea:53:31:a6:02:
d1:06:69:56:ef:6d:00:b3:29:b7:f1:db:a2:b3:7a:
21:79:94:4e:bb:aa:46:a2:af:a0:de:f6:bf:00:f2:
1d:f9:f7:4f:15:3b:3d:22:52:99:6d:81:53:8a:a6:
2b:16:8a:7e:94:b8:db:bc:f8:f1:33:9c:2b:e6:1f:
90:3d:ec:63:ce:f4:6c:eb:57:79:75:ee:f5:8c:fe:
1c:9f:4c:32:61:5e:2c:3b:39:42:83:db:8e:5b:e3:
1f:0d:d4:a4:bb:80:ac:77:be:1d:01:72:4a:bb:81:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.254.0/23
Signature Algorithm: sha256WithRSAEncryption
62:5d:88:52:7b:2a:e6:6e:4a:6b:1c:08:af:7c:40:23:5e:65:
a4:16:76:5a:e0:7c:82:1a:49:0d:1c:73:24:32:bd:e3:f0:a7:
b8:c6:d7:19:a8:b4:86:50:d2:a4:ce:1f:bd:60:49:be:83:ea:
78:5f:6b:7f:7d:c2:48:23:e6:bc:e1:83:59:19:50:e3:2e:10:
40:70:15:c7:a6:25:18:35:6e:9f:c2:5e:94:08:7a:ef:c5:e1:
01:88:84:7e:06:d0:95:91:88:64:73:4f:e6:45:62:32:35:cf:
ee:41:5e:ea:a7:78:42:51:fd:10:f1:c1:c9:2d:4b:47:92:8a:
a0:18:e2:d0:34:5f:fe:7d:23:94:50:0a:e8:94:2b:6b:2a:98:
35:9e:1e:60:06:10:6d:00:da:17:8e:72:58:6c:dc:fe:3f:91:
b4:82:26:85:7c:9d:5d:32:2f:d5:6c:53:f6:87:89:16:23:51:
2b:94:9e:3b:7b:3c:31:32:83:ab:c3:cd:9d:c4:ce:f1:60:42:
05:03:64:f6:6e:c8:c3:6f:4d:35:92:78:41:d4:29:98:74:39:
ce:d2:82:72:9e:a2:a2:be:5e:20:17:a8:8c:35:ee:2a:64:06:
39:f3:b4:cf:3c:0b:ba:8e:c3:94:e2:b7:20:1d:e4:ee:70:69:
07:e2:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 10:41:16 2025 by rpki-client