Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer (raw, json)
Hash identifier: gBCzHsTI4NIrZnF+YatCMymyl2+O+Rc4p7iwzeEcTYs=
Subject key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 67A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Jul 2025 14:22:23 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 128.134.0.0/16
IP: 129.254.0.0/16
IP: 134.75.0.0/16
IP: 137.68.0.0/16
IP: 139.150.0.0/16
IP: 143.248.0.0/16
IP: 147.6.0.0/16
IP: 147.43.0.0/16
IP: 147.46.0.0/15
IP: 152.99.0.0/16
IP: 152.149.0.0/16
IP: 155.230.0.0/16
IP: 156.147.0.0/16
IP: 157.66.64.0/23
IP: 157.197.0.0/16
IP: 158.44.0.0/16
IP: 160.30.106.0/23
IP: 160.30.229.0/24
IP: 160.30.232.0/23
IP: 160.30.235.0/24
IP: 160.187.186.0/23
IP: 160.250.152.0/22
IP: 161.122.0.0/16
IP: 164.124.0.0/15
IP: 165.132.0.0/15
IP: 165.141.0.0/16
IP: 165.186.0.0/16
IP: 165.194.0.0/16
IP: 165.213.0.0/16
IP: 165.229.0.0/16
IP: 165.243.0.0 -- 165.244.255.255
IP: 165.246.0.0/16
IP: 166.79.0.0/16
IP: 166.103.0.0 -- 166.104.255.255
IP: 166.125.0.0/16
IP: 168.78.0.0/16
IP: 168.115.0.0/16
IP: 168.126.0.0/16
IP: 168.131.0.0/16
IP: 168.154.0.0/16
IP: 168.188.0.0/16
IP: 168.219.0.0/16
IP: 168.248.0.0/15
IP: 169.140.0.0/16
IP: 169.208.0.0/12
IP: 192.5.90.0/24
IP: 192.100.2.0/24
IP: 192.104.15.0/24
IP: 192.132.15.0/24
IP: 192.132.247.0 -- 192.132.251.255
IP: 192.195.39.0 -- 192.195.40.255
IP: 192.203.138.0 -- 192.203.146.255
IP: 192.245.249.0 -- 192.245.251.255
IP: 192.249.16.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26537 (0x67a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 4 14:22:23 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5f:b8:65:d9:57:24:56:e2:b8:22:75:98:a7:
55:b2:0a:b2:72:c7:17:59:7c:75:35:a0:5d:aa:04:
e8:e6:9b:9b:09:0e:27:5e:13:38:25:7a:14:8b:24:
c7:d5:41:94:3c:3a:8e:6c:72:f2:b8:2c:0f:3e:c9:
2f:c5:53:9a:a6:d8:21:61:ff:b8:31:27:e3:ec:7b:
7c:d8:32:82:16:7d:69:a4:ad:b1:4c:06:0c:c1:67:
f8:b6:90:63:82:87:7a:59:39:0e:e1:db:3c:1e:46:
0b:1d:6f:2a:d4:6c:61:d9:d6:fc:5c:00:c5:11:28:
37:9d:18:32:9a:b6:55:af:12:68:53:5a:0a:40:85:
ce:d6:f0:73:5b:48:3a:84:9a:c3:0d:3b:20:80:2a:
bc:6b:42:85:6a:3f:4a:32:f0:68:37:f3:a1:28:77:
0b:0f:e3:0d:2c:70:c7:7f:68:ec:51:41:88:43:31:
76:0b:c1:68:d1:65:b2:73:83:8b:c0:c9:77:6c:65:
d1:d1:dd:02:1f:64:8c:06:24:ee:91:11:9b:1f:5b:
79:67:36:3e:e4:8f:65:bf:24:ab:ef:db:26:c3:bd:
4d:a6:e7:82:37:a3:48:4a:d4:81:3e:53:89:58:13:
d3:f0:8b:f2:9f:e9:ad:fc:73:d0:57:97:5c:22:d0:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.134.0.0/16
129.254.0.0/16
134.75.0.0/16
137.68.0.0/16
139.150.0.0/16
143.248.0.0/16
147.6.0.0/16
147.43.0.0/16
147.46.0.0/15
152.99.0.0/16
152.149.0.0/16
155.230.0.0/16
156.147.0.0/16
157.66.64.0/23
157.197.0.0/16
158.44.0.0/16
160.30.106.0/23
160.30.229.0/24
160.30.232.0/23
160.30.235.0/24
160.187.186.0/23
160.250.152.0/22
161.122.0.0/16
164.124.0.0/15
165.132.0.0/15
165.141.0.0/16
165.186.0.0/16
165.194.0.0/16
165.213.0.0/16
165.229.0.0/16
165.243.0.0-165.244.255.255
165.246.0.0/16
166.79.0.0/16
166.103.0.0-166.104.255.255
166.125.0.0/16
168.78.0.0/16
168.115.0.0/16
168.126.0.0/16
168.131.0.0/16
168.154.0.0/16
168.188.0.0/16
168.219.0.0/16
168.248.0.0/15
169.140.0.0/16
169.208.0.0/12
192.5.90.0/24
192.100.2.0/24
192.104.15.0/24
192.132.15.0/24
192.132.247.0-192.132.251.255
192.195.39.0-192.195.40.255
192.203.138.0-192.203.146.255
192.245.249.0-192.245.251.255
192.249.16.0/20
Signature Algorithm: sha256WithRSAEncryption
04:7d:e0:95:7c:1c:f3:35:9a:64:69:c7:a3:33:e9:47:a5:47:
34:63:02:76:8f:ab:d2:dd:b6:3a:a0:8a:a9:7c:db:f5:a8:3a:
32:2b:54:c8:e6:2d:57:90:4a:41:85:06:34:19:35:26:9d:d6:
6b:b0:e1:9a:57:41:51:bd:f1:bd:36:76:ab:0f:33:19:27:44:
d8:0a:68:f7:43:49:84:88:57:bf:ac:ae:44:c3:48:37:94:06:
4e:7b:83:b5:ef:5b:bc:5e:51:05:31:4c:30:d5:4a:0b:12:66:
33:fe:4d:64:40:28:9b:24:63:3b:ba:ea:48:54:af:ca:39:13:
1b:4d:69:8a:47:08:a9:dd:91:55:6f:17:4b:a2:e6:be:66:b0:
d1:ed:a1:e2:1d:4b:6e:c9:96:d2:0f:a1:84:42:30:b6:c9:bc:
ee:68:ba:15:c3:73:55:24:1f:0d:f8:16:57:6d:9f:b6:a6:02:
bb:7f:f5:ce:d9:07:e1:9c:ed:07:92:10:eb:31:5e:55:77:66:
90:9c:8a:2a:fa:a6:1d:49:55:4f:3a:7e:64:5b:59:66:02:ea:
01:e3:fd:12:fb:09:89:24:3c:22:c2:eb:de:87:e1:72:22:5d:
61:20:ce:4b:85:e0:cf:12:87:b6:d0:78:47:d8:6d:92:c9:e8:
e5:61:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:04:00 2025 by rpki-client