Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
File: lddEZYkqyDm6JHn6BHVqXjBfJjw.cer (raw, json)
Hash identifier: fFqZaM+rEQ/xH8fYkjYAOJC1OzwJl+DHKh55DxJsBFc=
Subject key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 686F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Jul 2025 15:13:34 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 192.189.34.0/24
IP: 192.189.229.0 -- 192.189.232.255
IP: 192.200.64.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26735 (0x686f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 18 15:13:34 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:e2:c2:22:2a:21:21:91:86:c4:bc:12:97:
7b:1b:97:ad:6a:37:7a:1b:51:c5:cc:eb:ae:e1:52:
51:a2:f9:aa:71:47:ce:2f:c3:c0:40:43:36:9b:d6:
61:45:ea:4c:b7:db:5b:a6:6d:31:21:19:c0:eb:21:
cd:2e:c0:f3:28:03:8c:9b:76:6d:a8:cb:29:bc:5c:
18:75:8c:16:e2:a2:9c:84:e3:71:a6:2d:85:44:7a:
58:a7:84:8f:5c:df:1c:1f:1b:d7:83:b4:1d:74:18:
9e:5d:7f:32:bf:f0:20:69:a3:65:33:35:3f:f0:33:
b8:11:96:75:03:9e:20:cb:e9:7a:8a:f1:5d:26:bb:
cb:cd:3c:9d:53:50:58:c0:dd:e1:69:99:d0:35:1e:
79:75:b1:0d:08:31:c4:90:06:0b:7d:58:9b:af:f0:
2f:bf:9f:c7:a4:54:f0:22:81:aa:45:b0:02:bf:74:
ea:a3:76:42:09:39:1d:b4:44:c1:69:d9:6d:80:d0:
9a:bb:46:d1:08:e8:9f:6a:84:e8:7d:f8:86:1a:f4:
23:41:63:d7:e3:cd:7e:2f:96:4b:18:85:2c:4a:28:
9d:7a:7c:23:0c:32:e3:91:46:99:00:db:d1:3e:25:
52:39:e7:ad:0b:21:fe:d1:b2:cd:1b:0c:62:cd:0d:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.189.34.0/24
192.189.229.0-192.189.232.255
192.200.64.0/20
Signature Algorithm: sha256WithRSAEncryption
37:51:25:31:a1:ce:29:3d:e5:1d:ae:83:3e:65:a8:a8:2a:13:
2f:ab:0c:5b:c7:d7:bd:58:98:39:32:3d:79:43:f8:c6:fd:c8:
43:b7:27:7a:ad:02:84:89:b9:80:51:36:1d:79:20:52:0d:c4:
ea:61:f5:00:21:50:97:8c:bd:a4:fd:05:f1:b1:2f:75:85:af:
77:8c:73:61:7b:dd:70:e0:f0:1e:dd:a3:8e:7f:a0:18:ae:ad:
80:f7:d8:af:44:57:52:20:ad:ce:65:17:5c:af:0e:fd:1f:23:
aa:30:f7:6d:e1:2d:46:cb:c1:7d:95:a5:8b:7b:32:28:98:78:
35:f3:94:f1:b3:41:76:2e:e0:14:8e:45:45:26:11:e5:ed:3c:
0e:4a:46:f4:dc:94:9a:17:a0:aa:19:b6:90:a8:80:00:05:eb:
06:1b:b2:a5:c6:24:db:77:34:22:32:a9:6d:9d:08:71:b3:2e:
c0:6b:9f:71:12:ca:9a:30:9b:20:8b:03:c4:5e:a0:10:6f:14:
dd:48:f4:84:a4:37:7c:89:49:c2:d8:e1:fe:38:e4:c9:5e:29:
9f:02:32:a5:80:83:30:60:9c:b7:02:40:14:07:4b:84:03:a2:
47:b5:8c:e4:9f:5c:91:a0:1c:3c:af:76:7b:86:4d:e8:05:58:
4f:3e:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:42:33 2025 by rpki-client