Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
File: s47RYTLcuXiWdncaiwnkUJue1Pk.cer (raw, json)
Hash identifier: MR/dYpozwlq18vWATDNs2a57xA4MogpzyuVJXby+VpE=
Subject key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6AEC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Sep 2025 01:08:29 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 137.172.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27372 (0x6aec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 10 01:08:29 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:5d:2c:ae:be:5a:49:c5:3a:a3:13:0c:36:
92:69:17:d0:bc:0f:e5:59:4d:46:cf:1a:02:82:f7:
ca:41:2f:0f:cd:31:99:86:e7:b7:9d:63:50:d8:29:
ea:c3:97:ef:af:62:c8:07:b1:e0:ed:bb:72:11:a3:
56:8f:17:da:89:74:95:91:d5:2e:30:17:22:d6:30:
65:ad:88:45:d0:7b:18:ea:5f:57:db:23:fb:2e:e6:
2d:7e:d7:ec:9f:26:ad:df:dc:c0:88:84:61:39:32:
6c:07:a7:b8:0b:7a:e5:a4:55:95:d3:24:f6:7e:1c:
5b:bc:97:24:82:9d:0d:65:f4:86:56:8a:60:72:6e:
1c:31:e0:9b:a6:1e:32:1e:39:d3:3a:6c:03:29:fc:
45:31:66:21:60:e6:b3:fd:a2:4a:e3:ad:23:00:1b:
76:a5:67:c8:36:4b:12:5a:db:a3:26:df:09:98:ac:
4b:81:56:71:e2:ff:da:41:59:ef:be:65:90:90:77:
b1:d4:f8:e2:68:c9:99:61:52:e5:44:93:9f:0b:ff:
75:ac:09:c5:8c:91:36:2b:06:06:21:e2:23:80:83:
25:cc:61:c2:87:18:3e:99:1f:94:84:45:24:76:66:
99:f0:6f:df:38:12:a9:53:73:54:69:03:e8:4b:26:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.172.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:86:66:4a:1b:12:fc:14:71:ad:55:bd:1e:3b:04:45:8e:30:
66:ac:47:56:74:e8:f8:37:b3:be:b4:4e:ae:30:44:9c:df:2d:
d3:b7:48:74:b6:7a:46:0d:77:1d:d4:3c:76:22:c2:df:e1:a5:
55:69:39:24:fd:86:fb:39:83:fe:f0:2c:9e:f4:53:41:87:99:
d2:e3:60:be:4f:c4:74:52:2a:2b:aa:f2:b1:3b:d1:49:45:f0:
97:f1:e8:61:0b:50:ac:64:65:c5:75:1e:10:85:6f:0b:4a:18:
29:f2:8b:c5:7f:ad:1c:00:ad:0a:b6:08:d4:42:77:73:06:f2:
2d:62:b8:76:b8:6a:f5:d6:69:5c:db:b5:bc:cf:e8:6e:29:66:
a3:85:60:1d:5d:4c:76:41:13:1e:96:5e:c6:1b:fb:e6:03:38:
7e:1e:fb:a8:55:b2:78:3e:5e:39:a5:b6:74:23:a3:ca:95:dd:
1c:85:d3:7b:d6:4d:00:dc:d6:bd:24:18:f0:c6:44:f7:a1:44:
3e:29:59:99:51:cd:21:29:53:d7:32:95:06:e4:61:fd:31:ed:
99:0e:ef:63:4c:1f:d1:9c:fc:43:64:3e:33:a1:d8:9e:0e:45:
e2:0f:3a:b6:6e:0e:52:56:bb:a8:f5:a5:58:8a:6b:82:9e:74:
26:88:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:19 2025 by rpki-client