Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
File: pYrazvnSRVOlVka1puvM6rGfL7w.cer (raw, json)
Hash identifier: oSF5Rsz/jpGS9WD7n+UhLrK2tZpBoqTpFuA6bnU583c=
Subject key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6602
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Jun 2025 06:45:05 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.188.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Jun 2025 15:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26114 (0x6602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 3 06:45:05 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:4b:56:7f:9d:cc:25:26:e4:fd:d1:02:b9:
0a:65:b7:db:32:d1:cd:fc:06:b4:9a:53:d6:b8:39:
5f:26:ef:21:48:3f:94:78:a5:5a:f1:1f:42:db:7a:
e0:0d:8f:59:0a:47:5e:00:b6:09:fb:20:23:db:b5:
8b:c7:9b:96:f8:19:c3:19:d4:9c:30:9d:c4:d1:1d:
9b:00:6b:15:24:2b:23:d2:4a:5b:7a:e2:08:00:46:
2a:33:99:d6:51:05:4f:0d:42:0e:96:1f:e8:b3:0b:
a3:c8:1b:e7:77:ba:38:49:e2:bc:70:ab:c1:5b:f5:
20:31:fc:a6:11:41:0a:e2:74:be:5a:fd:55:e4:94:
95:00:7b:5d:07:71:c9:05:2b:74:0e:36:d1:c6:ca:
22:e6:3d:01:65:53:d8:f9:90:92:75:39:e8:91:be:
3e:2b:bf:04:83:7b:7b:ae:87:67:27:e3:4c:ee:01:
c4:f6:ee:52:96:23:27:d0:0a:0b:b4:cf:f6:58:1c:
06:bf:96:24:76:34:86:68:0e:67:b3:92:53:60:e7:
9d:96:72:e6:51:2f:9c:b6:4a:75:73:46:b4:ca:48:
02:12:d7:bb:a7:b0:1a:d3:37:3c:6d:5d:0a:be:1b:
79:e8:c8:7b:96:2b:e7:29:ca:84:82:28:6a:1b:eb:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.188.0/23
Signature Algorithm: sha256WithRSAEncryption
56:75:90:c1:80:fb:e0:16:69:54:1e:52:db:b6:88:4d:1d:8d:
b3:c3:df:7c:fe:bb:2c:5b:c0:18:32:0f:c5:03:ce:db:4b:04:
14:4e:1f:8c:e8:b3:e2:bb:34:8d:a2:ed:dd:1b:27:44:da:48:
30:12:0d:c1:1f:af:c4:a3:80:a5:b6:91:7e:77:8d:dc:4e:62:
31:51:84:ee:7c:e4:62:8f:09:1f:d3:ec:cc:58:f5:9b:90:7e:
26:e2:21:81:76:6d:b2:69:d1:61:d7:2b:39:1f:f5:75:52:69:
f0:c5:a3:60:fe:ac:17:ad:31:9d:37:2c:bd:ac:91:a3:f2:1d:
8d:1b:c1:9a:97:05:4e:1a:ee:57:45:ab:80:c5:e6:0b:b3:24:
d9:be:49:a5:41:db:ac:e1:90:a2:79:f3:49:f4:62:41:7f:c7:
71:d6:b6:5e:34:25:31:2f:71:86:24:8c:75:8c:ec:70:e8:f8:
bd:60:93:27:65:23:92:3a:ad:e5:f4:da:3e:b2:ee:d3:9f:77:
79:0b:62:48:1a:66:82:e5:f1:a2:5e:a0:31:4c:c2:f3:ae:22:
2f:87:f9:c5:b9:20:bd:8d:ec:a6:f5:b7:cc:67:fe:20:20:b3:
1e:3e:a2:4f:77:b0:53:67:0c:41:1c:2a:54:a2:5c:79:58:94:
57:5c:b4:cc
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNjAzMDY0NTA1WhcNMjYwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3NEM3QTExMC8GA1UEBRMoQTU4QURBQ0VGOUQyNDU1M0E1NTY0NkI1
QTZFQkNDRUFCMTlGMkZCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMpqS1Z/ncwlJuT90QK5CmW32zLRzfwGtJpT1rg5XybvIUg/lHilWvEfQtt64A2P
WQpHXgC2CfsgI9u1i8eblvgZwxnUnDCdxNEdmwBrFSQrI9JKW3riCABGKjOZ1lEF
Tw1CDpYf6LMLo8gb53e6OEnivHCrwVv1IDH8phFBCuJ0vlr9VeSUlQB7XQdxyQUr
dA420cbKIuY9AWVT2PmQknU56JG+Piu/BIN7e66HZyfjTO4BxPbuUpYjJ9AKC7TP
9lgcBr+WJHY0hmgOZ7OSU2DnnZZy5lEvnLZKdXNGtMpIAhLXu6ewGtM3PG1dCr4b
eejIe5Yr5ynKhIIoahvrEG0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSlitrO+dJF
U6VWRrWm68zqsZ8vvDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzRDN0EvNDRGMTRBRkM0MDQ2MTFGMDlCRjBEODRGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc0QzdBLzQ0RjE0QUZDNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5T
UlZPbFZrYTFwdXZNNnJHZkw3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVjvDANBgkqhkiG9w0BAQsFAAOCAQEAVnWQwYD74BZpVB5S27aI
TR2Ns8PffP67LFvAGDIPxQPO20sEFE4fjOiz4rs0jaLt3RsnRNpIMBINwR+vxKOA
pbaRfneN3E5iMVGE7nzkYo8JH9PszFj1m5B+JuIhgXZtsmnRYdcrOR/1dVJp8MWj
YP6sF60xnTcsvayRo/IdjRvBmpcFThruV0WrgMXmC7Mk2b5JpUHbrOGQonnzSfRi
QX/Hcda2XjQlMS9xhiSMdYzscOj4vWCTJ2Ujkjqt5fTaPrLu0593eQtiSBpmguXx
ol6gMUzC864iL4f5xbkgvY3spvW3zGf+ICCzHj6iT3ewU2cMQRwqVKJceViUV1y0
zA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:21:07 2025 by rpki-client