Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer (raw, json)
Hash identifier: O19n4E78zJ/Ze29dhKSIfhND2plNUQySd+50Y3LsRJU=
Subject key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6579
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 24 May 2025 15:24:41 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.90.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25977 (0x6579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 24 15:24:41 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:9b:9d:39:9f:6d:ae:44:42:5d:b5:10:5a:
27:79:91:de:6a:fb:89:cd:57:16:02:a1:e9:29:9a:
57:41:e3:62:83:cf:c6:b3:1d:c3:9e:4d:1f:72:9c:
eb:9d:3f:2a:dd:33:11:f9:0d:4b:ee:e2:c8:aa:b9:
d8:d2:5a:56:f8:f1:0d:e1:8c:5d:21:79:c4:b2:35:
ca:70:24:0d:7a:ec:29:1e:4f:1b:48:b9:39:3c:a5:
c6:3b:09:86:21:74:9b:de:e3:51:1e:30:c7:82:21:
d7:fc:e5:3f:41:db:33:f4:c6:8e:27:03:7b:59:5e:
86:f8:d1:fe:fa:3b:3f:35:93:7a:f8:d9:ec:9f:29:
4f:ad:b1:dc:96:cc:0e:16:b7:af:85:4f:75:27:bf:
4a:dc:63:de:ba:0b:5c:79:87:8d:3b:d5:35:a0:c6:
8f:e4:8f:5e:3f:42:12:5f:97:73:e2:5e:a8:8e:07:
b0:00:3b:f0:76:77:6d:94:15:3f:fe:d5:f6:da:a1:
e0:7c:02:96:f1:79:19:96:a3:f9:b7:bb:d2:a1:89:
42:ce:ad:90:db:f5:2f:34:3a:93:a4:19:cc:f7:4f:
63:8b:17:9f:d7:77:a9:ed:9b:cd:4b:16:8c:72:57:
4d:16:3d:fb:51:ee:17:ed:77:a0:e4:d5:e3:40:48:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.90.0/23
Signature Algorithm: sha256WithRSAEncryption
60:ee:17:be:c3:89:8d:f8:38:48:15:0d:5b:19:65:10:4c:2b:
0b:6b:32:51:14:be:1e:9d:77:27:c7:dd:f4:34:7c:79:80:52:
b1:87:76:b0:81:e6:47:cf:c7:74:e9:69:91:d1:41:69:cd:d5:
8c:26:e4:50:ce:c0:4a:f0:f7:46:39:ba:f5:3c:86:2e:99:1a:
1f:79:58:1e:87:64:78:1b:59:59:b2:e4:f0:fc:3f:93:c5:e8:
80:8b:bf:f4:7d:4c:1b:1b:6d:76:1d:73:e1:99:6a:64:91:c5:
03:58:4b:98:b5:2c:17:a7:9b:39:05:1d:44:cc:49:ba:8c:0c:
97:33:cb:5e:d0:f3:6f:a0:98:4c:50:9c:cd:ee:9a:28:53:85:
b2:2a:25:f8:01:af:87:52:43:ca:f1:2a:fd:ca:7d:cf:1a:70:
d0:00:f7:d0:cf:f4:97:dc:57:88:e3:40:71:97:e8:93:6e:18:
33:f0:28:ba:71:f5:9b:aa:7f:15:6d:03:e1:31:25:e4:1c:2e:
4c:d2:93:51:c6:72:9f:a2:00:4d:ba:8d:2c:f3:64:42:3a:19:
71:1b:1b:f5:3d:6a:31:6d:76:5e:0f:92:20:34:ed:a0:06:44:
5b:48:b2:e5:fc:96:37:f1:86:74:48:6c:60:76:bc:51:02:83:
93:e4:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:33:32 2025 by rpki-client