Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer (raw, json)
Hash identifier: JTU2P02fQgS/BhX6IpllzQzeSurXpG4keSHqq1xMRj4=
Subject key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 669D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Jun 2025 10:31:24 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.196.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 17:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26269 (0x669d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 17 10:31:24 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:b1:25:7e:e2:5f:7a:50:9e:b9:6f:e9:ac:
fc:86:fb:c1:14:7c:61:22:25:89:9f:77:d5:14:35:
0b:ce:46:53:b2:9e:e5:90:a2:50:cd:00:c3:1d:e3:
ff:c6:39:52:37:8a:4a:fe:51:78:46:0d:b6:28:e4:
37:d8:f2:72:90:13:93:51:a3:ec:d8:2a:2f:30:af:
6e:27:f0:5e:02:43:7f:1a:c4:12:24:6d:fc:d7:4b:
0b:04:41:4a:17:51:5d:56:75:5e:8a:16:ea:83:cf:
0b:17:0a:be:27:89:e6:d9:00:48:3c:6c:ae:3e:4f:
a4:c1:8e:de:d3:2b:6f:33:c1:a2:2a:af:ca:59:a1:
e5:72:e5:0a:a4:6a:1a:7a:3c:82:f6:27:4c:b1:8c:
0f:ca:8a:55:b0:a3:da:c5:f5:6c:c8:b9:a6:a1:d1:
e3:e2:d1:d7:2f:3c:7b:b6:25:45:8b:d8:ea:39:9b:
72:b0:26:2a:f4:9a:75:61:2e:f3:31:fa:56:ee:78:
bd:bf:14:3f:b6:f7:2c:92:dc:d4:fd:6d:87:cd:11:
e1:e3:52:3e:a6:7b:ec:bc:cc:25:dd:5c:08:1a:59:
53:4f:02:f5:7a:89:48:0a:95:05:41:f6:e2:a6:57:
ba:2f:50:f2:44:80:3d:c8:72:32:72:c7:d3:0d:ed:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.196.0/23
Signature Algorithm: sha256WithRSAEncryption
29:5b:d3:64:f3:40:3d:06:3c:ce:00:a0:05:bb:32:06:5c:a8:
de:5c:be:b7:61:ea:49:ff:59:99:e2:97:ef:a7:8a:db:40:cf:
cc:05:f9:f5:ec:b5:ea:78:9e:49:69:51:3e:95:cb:97:72:d3:
12:2f:62:77:0e:21:47:06:e7:bc:02:41:2c:32:dc:4c:52:3d:
ef:6c:75:f2:e9:99:b0:5a:c6:5b:e2:12:38:12:0a:bb:3d:30:
80:34:b0:58:fc:7b:45:87:21:67:69:11:a3:3b:16:a2:3a:3a:
a5:ac:e9:65:80:76:90:fe:e2:cc:b6:73:d3:91:29:d5:52:2a:
2d:d3:71:6f:a5:18:f1:e3:00:90:10:7f:2b:93:2a:3d:69:0f:
bf:fc:26:26:2a:15:a8:8d:8e:a1:82:2c:39:90:3b:42:64:64:
29:1a:bb:50:f0:f6:55:72:eb:07:e4:41:0d:48:9b:17:23:e6:
74:bb:75:40:b8:5a:26:a7:69:10:0a:f1:32:fe:ba:6c:67:f2:
f9:9d:3c:3d:e2:13:66:af:cf:fb:98:5a:ad:26:94:93:fd:ba:
0e:b2:6a:3a:49:a3:b5:e3:dd:50:99:ec:d3:82:84:16:13:fb:
7c:9e:77:5b:50:f0:fa:eb:67:5c:a5:b3:de:33:12:2b:02:2a:
da:8d:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:25:48 2025 by rpki-client