Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.cer (raw, json)
Hash identifier: 8Ja4X+CHvObkrrp9H9QuuiuUNfW0HoZf9CYUw3MWDTs=
Subject key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6831
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Jul 2025 13:14:57 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.188.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26673 (0x6831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 14 13:14:57 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:05:25:23:3a:2b:5d:32:8b:e0:d6:5c:c9:
c5:e4:c2:1c:fc:d2:3c:46:b3:cf:dc:8a:e7:3d:c3:
aa:d3:fb:b2:df:42:cb:98:ce:69:1b:b3:05:7a:39:
e3:23:23:56:f8:7e:0e:63:3b:ab:e4:e7:37:ad:22:
fc:75:8b:78:20:6d:2d:db:69:1a:8c:e4:df:6a:99:
f7:67:d0:ef:12:03:9b:7e:b6:00:f1:17:05:8a:b4:
f7:fa:fc:3c:56:aa:54:0e:be:c9:5d:2f:ae:9a:94:
6b:b8:fd:96:21:04:14:23:7e:5c:cb:18:eb:89:64:
4d:08:fe:8f:41:45:85:3a:85:56:57:a1:46:07:5b:
59:6a:2a:9a:a8:94:f5:3e:04:0d:5f:4e:48:fe:64:
7e:6b:55:dd:f9:69:88:0b:76:0c:eb:ed:67:ff:b2:
42:b2:fe:c1:03:0a:d8:6d:ae:29:d1:56:43:bf:aa:
be:f7:69:16:ab:e7:e9:97:97:d3:f0:87:6c:3a:b1:
51:1f:19:e5:54:f9:8e:08:02:85:d3:1b:3f:38:c7:
37:0a:33:c4:88:c0:69:36:0b:90:7b:58:ad:ce:cf:
df:ea:41:5b:93:e2:f8:90:12:d2:fe:a0:22:bc:bd:
76:a3:de:1f:df:a1:36:6c:28:9c:0a:30:10:f3:c9:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.188.0/23
Signature Algorithm: sha256WithRSAEncryption
01:e4:f4:7d:1b:4c:ee:4b:fc:bc:46:c6:19:7d:07:86:ea:1a:
8a:77:74:c4:5a:4e:b7:d2:fd:9d:2f:03:ea:40:f7:00:cc:0e:
f1:f2:d4:59:df:d8:6b:88:7b:0f:da:20:74:fe:db:4d:5a:ab:
6b:76:04:8b:c7:48:d3:e5:76:04:91:ae:05:c5:26:64:96:c6:
69:76:f5:4c:bb:4a:fb:4e:31:b7:bb:3f:7a:63:e8:1b:c0:12:
a0:2d:7c:74:c6:20:ae:d4:51:b7:47:cd:45:83:9b:9c:3b:d6:
1a:1c:e7:75:22:dd:a1:58:46:13:9b:b8:0f:04:09:f8:af:e7:
65:7d:b8:53:dd:16:df:d3:a9:c7:7d:59:0e:44:6c:92:f2:0f:
13:86:7d:b7:85:ae:ce:dd:9b:74:02:3c:9e:5e:17:d3:93:f0:
f2:d6:56:21:a1:39:ca:7a:4a:f4:54:30:0f:93:78:31:40:34:
92:f2:77:3d:88:3a:a0:6d:6f:2b:d5:3f:91:14:42:41:d9:18:
31:1e:fe:7e:0b:f5:91:e1:34:12:25:db:ed:3c:04:99:dd:c7:
3a:91:2c:06:87:c9:8a:29:1e:14:ec:ea:12:ac:91:55:a7:7a:
8c:f4:17:5d:45:d6:86:a5:ad:4f:56:5e:55:27:44:af:c5:03:
d5:32:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:11:47 2025 by rpki-client