Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
File: t88LJwp_2x1xeui5edHuD_iL1E8.cer (raw, json)
Hash identifier: CYzwzHqqlHt/7wDMTw8QWsQVuM4UMJykCuVyiJDZ4f4=
Subject key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 67FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Jul 2025 16:07:08 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.25.18.0/24
IP: 160.250.141.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 04:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26621 (0x67fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 10 16:07:08 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:a3:27:72:25:04:d2:bd:f7:4b:6a:32:92:
26:d7:00:55:1b:1a:ba:c8:5a:9e:93:eb:ab:00:fe:
32:f0:4d:32:c2:1f:08:07:7c:fb:5c:00:91:3c:3d:
6e:dd:0a:ed:73:81:1b:91:d9:47:3e:fa:52:97:2f:
b6:5c:24:42:e5:d4:89:35:82:55:bb:ea:f8:08:55:
c9:db:b4:20:2e:8a:e9:da:11:ad:1a:a9:5e:59:36:
43:80:68:59:35:83:f6:a3:b6:15:47:84:92:25:92:
60:48:2b:34:78:ba:d1:72:97:6a:57:bd:ce:41:77:
88:fb:39:0f:01:c3:17:ae:e3:b7:3a:48:da:ad:48:
b5:22:a5:1b:c4:60:8c:55:0a:25:23:b3:f4:da:d0:
9f:09:e1:4e:ec:0b:f0:45:2d:e2:81:64:3a:79:b5:
1b:6a:39:86:f9:77:cb:ae:7e:59:91:89:71:e9:ab:
d6:fb:8a:c0:d5:af:3d:a1:48:03:18:35:f9:64:95:
cc:15:dd:87:ec:9a:5c:75:70:cc:f3:c4:a5:38:88:
bf:8b:1c:4c:b2:a1:b9:13:71:b0:76:1b:96:ff:6c:
b2:e1:a3:ea:35:99:e2:cd:31:b8:f3:17:b2:5f:3b:
02:3e:03:05:95:f3:a2:fd:81:e4:63:85:3c:df:4e:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.18.0/24
160.250.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c0:89:c2:15:e2:9b:cf:c6:43:74:12:cd:12:db:cd:03:a1:
b7:51:ad:92:67:d5:fb:92:fa:22:64:28:35:bc:23:01:8d:10:
0c:c8:7e:37:71:4c:75:a0:74:b1:97:b7:c7:a2:16:7e:2c:2f:
87:59:e4:be:60:45:64:b3:f9:55:f9:cd:70:c3:28:28:53:c7:
37:6a:01:d9:1c:ab:30:dc:12:4e:e0:c8:a5:59:79:67:9c:cd:
52:8f:a8:fd:13:84:8f:2a:29:7f:25:87:e3:5a:50:20:19:f8:
cc:d6:1e:b8:0b:63:c6:a8:b3:f6:50:b6:83:83:bb:3c:75:f7:
70:73:a8:1b:8f:05:dc:fc:ed:c2:51:ff:a7:e6:e8:3c:a2:e5:
83:6d:e3:a9:1a:9d:62:87:e7:a3:48:e8:10:fd:ad:78:e3:33:
b8:29:92:7d:a9:b8:f4:9d:50:aa:e5:15:dc:d2:f6:9c:55:f6:
00:11:b5:1e:50:4e:ef:eb:dd:ae:01:7f:37:0b:df:b4:8f:14:
67:ce:b2:03:31:a0:3e:c1:24:9c:27:f2:a2:72:21:0c:bf:39:
53:b7:b6:71:37:72:2c:aa:f0:ca:7c:38:65:e0:b2:ce:2b:28:
ca:be:cd:bf:32:7a:cf:40:5e:78:11:b3:1f:24:ae:4a:1a:c7:
f7:c2:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:24:43 2025 by rpki-client