Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
File: eLB7yieVuFKmVslAPke8uKvgelo.cer (raw, json)
Hash identifier: YGRcNIbkaeXqghOyNYACP/N0OeQA4jlQTPLvtZ2yQcY=
Subject key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 67B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Jul 2025 19:24:12 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 198.49.87.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26547 (0x67b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 4 19:24:12 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:9f:a4:f9:13:d9:c9:a6:38:56:e7:4f:90:
df:4e:91:d4:d6:65:6c:4b:d4:a1:61:e0:7e:42:14:
a8:da:d6:cb:77:2e:31:cf:bd:44:ad:81:44:1d:31:
58:95:8d:9b:b3:14:bd:a9:16:4f:15:3b:a4:99:c4:
13:09:98:93:ea:27:87:06:6a:04:2a:8d:66:4d:52:
60:94:ca:79:12:16:4a:56:24:cb:9e:bd:ae:76:21:
0c:58:7b:ba:d8:59:6d:e2:d2:02:86:e7:1c:0d:cc:
76:9d:cd:2b:d3:e6:ae:0f:48:39:59:76:38:30:28:
0f:7f:be:89:7a:85:40:07:c3:8e:cc:86:75:8f:71:
c4:6c:17:ff:53:d9:89:81:a3:32:e3:d1:51:36:14:
c8:81:20:c8:4d:28:5a:74:ad:a3:93:67:a7:b6:f3:
8f:cc:2c:92:71:fe:c7:6e:6b:16:45:1c:11:d5:7a:
e4:7e:a1:17:e4:49:74:32:dd:66:bf:c6:20:70:5a:
99:4d:e1:38:c5:79:12:9d:53:c7:84:c1:a2:1a:1b:
1b:6f:8e:80:6d:9a:a1:cc:89:78:5c:0a:f3:2a:be:
94:05:bd:ea:48:33:64:c3:a3:bf:1e:b7:6a:25:d2:
0b:0b:01:80:ac:88:e4:25:79:e7:54:7f:37:a4:be:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.49.87.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0b:18:a8:28:33:22:68:3a:f9:8d:46:93:5e:47:50:ae:f6:
87:6a:26:cc:8f:06:3b:26:30:2f:b7:99:4d:ae:1e:c7:41:27:
fb:f1:be:d2:3a:37:cf:21:73:82:ec:48:d2:8f:53:62:1d:e3:
ad:ff:a1:25:68:2f:98:16:31:43:35:d0:1c:87:c0:3d:34:ac:
93:a0:ce:73:4a:d9:a5:36:1f:e8:96:74:ea:86:78:31:37:fe:
c5:be:e7:a3:d7:62:f3:09:53:ef:16:83:4a:6b:6d:fc:4e:44:
06:f3:a0:cb:91:f8:3c:bf:96:f2:84:a5:a5:48:9a:e4:99:74:
7a:8b:21:a3:c2:e5:e6:d8:34:7b:c5:1e:3e:9c:ec:ee:9b:57:
84:b1:f5:e8:07:29:ef:32:cb:f7:af:3d:d4:e9:13:fc:e5:84:
3a:4b:31:c0:b3:c2:86:8e:3d:cf:95:64:fa:84:7c:3f:63:17:
fd:a0:2e:5c:48:06:1e:fd:58:54:75:22:36:01:5a:c1:79:df:
82:2f:48:2a:fe:7b:f5:20:ad:d9:f9:56:fe:b4:ae:4e:7f:8c:
ff:a2:08:aa:bc:ef:26:9a:e4:d7:ca:05:33:b9:a5:04:99:47:
9e:68:6a:dc:fb:e8:06:e0:62:f1:17:0f:bb:51:b8:4d:c8:11:
b0:f8:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:51:48 2025 by rpki-client