Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
File: m505clsn1CAoE4UWNJL_dfFRE9o.cer (raw, json)
Hash identifier: SVX90zPqi3Ig6r7iZMhDkgz/EVAqHe+4cTETfd6eE2I=
Subject key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6868
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Jul 2025 02:46:24 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.222.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26728 (0x6868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 18 02:46:24 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:5f:ef:e3:61:19:f2:0b:ca:ab:54:fc:c2:
9d:de:57:68:54:7c:27:0c:31:ec:bd:b6:8e:ed:29:
6a:b6:56:09:70:f8:5a:a3:a1:2e:55:f8:4b:16:a6:
62:90:71:71:9e:40:41:33:22:26:55:e1:d1:c5:3f:
7f:38:58:96:a8:6f:72:e7:1e:ea:b2:36:44:37:ac:
85:ed:de:37:a1:4e:21:90:cc:94:58:29:ff:0f:b8:
3f:76:fa:45:05:a7:2a:ab:04:0e:88:e9:5d:19:f6:
2a:c5:a2:41:ee:d6:e1:08:25:f8:30:71:2d:3d:6b:
b3:be:b7:6d:7f:ed:a6:36:28:1b:1d:e6:31:09:f4:
b9:b3:1b:b1:c9:35:63:00:33:a3:7b:b4:0f:8c:2e:
5d:53:a6:d7:fa:9d:db:12:79:5a:2b:3b:eb:00:ca:
d4:d9:ab:7b:6b:83:5e:6b:32:54:86:f4:1f:87:1f:
6e:a2:bf:87:8c:d0:60:2e:68:cd:24:9b:95:74:0e:
b3:61:66:a4:5c:78:0f:0d:7c:ea:9a:aa:d8:38:d5:
bc:58:c3:c3:41:9b:35:f4:b9:96:34:23:d7:f2:2b:
6f:48:db:71:cb:8d:b2:b4:45:c4:a6:73:22:c2:7d:
08:c9:48:a9:b5:1f:5a:d3:16:03:03:f5:41:7f:6c:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.222.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:87:3a:37:b3:2a:f5:cb:e0:28:57:43:79:f9:1e:72:b0:b4:
0d:22:3f:a1:f5:a6:fa:f5:e6:48:7f:3d:b3:22:f2:da:1a:b8:
3f:b4:ff:6d:0c:e6:a9:49:05:97:b8:61:dd:3e:9a:13:98:7b:
b1:47:d1:19:7b:35:14:17:e9:58:c3:ff:bb:80:fb:3d:9c:52:
8f:55:14:a8:42:5e:7a:4d:64:26:37:05:34:93:4a:bf:45:b5:
2e:f8:86:30:9c:32:41:eb:25:31:6f:d4:5b:b5:81:ff:f6:36:
e3:b0:4c:29:d9:80:b8:ee:54:85:ef:99:dd:91:20:b7:ec:1f:
09:c7:a5:62:bb:a8:eb:82:89:25:dc:57:f5:1e:35:32:1c:ca:
96:54:39:47:2d:3c:12:0f:58:dc:77:24:21:bf:b9:0e:64:d0:
c8:a4:22:aa:73:2e:13:df:61:6e:9b:83:52:28:e2:45:91:dc:
9b:b0:5a:1b:a9:1b:de:09:20:67:8f:35:fd:12:3c:53:13:01:
b7:e6:0b:b8:c7:54:f3:59:75:cd:1b:19:32:cf:6c:26:76:9c:
9e:fa:98:5f:23:99:b8:40:51:ec:a1:79:c4:e0:cf:94:92:6a:
f1:57:33:83:32:7c:82:59:d7:50:2f:8b:4a:a2:51:e8:f6:df:
6c:69:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:35:55 2025 by rpki-client