Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
File: wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer (raw, json)
Hash identifier: u5KlQF8dUvM8DcgDE0pPGI0vwqliCXyvzTrAAD0wKJs=
Subject key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Jun 2025 01:44:20 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.144.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 05:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26350 (0x66ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 24 01:44:20 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:9e:a6:7d:9c:0f:2b:60:c1:b0:6e:ce:b8:
59:db:28:73:b4:15:be:46:46:65:e6:d3:6b:f1:c8:
a8:9d:41:c3:8f:3c:3b:c7:eb:2f:37:a7:2a:fa:1b:
e0:25:1e:e2:d1:b9:27:40:56:0e:2a:e0:da:7c:1c:
d0:b8:4f:9a:a9:35:ef:4e:7b:45:ef:22:0c:f2:c6:
f2:87:b0:6c:b0:ba:8a:2e:4e:61:ad:0d:71:81:0b:
58:ff:1c:51:33:2a:fb:21:0d:c2:1a:a0:28:aa:b8:
8e:f2:01:21:7a:38:a1:a6:1c:73:f5:6e:59:38:fe:
dc:79:bd:1c:35:66:bb:04:f3:ca:65:33:70:66:53:
8c:c1:ab:1c:87:69:62:f9:db:ef:df:3d:6b:7f:72:
46:a2:98:63:11:18:cb:bd:03:82:3b:25:3d:83:3b:
55:2d:6c:58:10:59:79:36:a4:57:52:dd:26:d9:89:
54:5d:b7:4a:ad:d0:88:3c:3f:ee:ae:80:e4:a7:88:
99:bb:f3:43:ec:68:2d:21:c9:bc:21:1d:e1:79:71:
62:51:66:2c:55:86:ca:ee:77:93:80:d5:fc:1e:97:
3f:b4:64:e8:c3:93:8f:48:1e:d2:e4:76:9f:24:9a:
64:b1:9f:89:9b:cd:50:8b:37:d7:7c:c5:f5:49:27:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.144.0/23
Signature Algorithm: sha256WithRSAEncryption
31:7e:64:82:b7:9e:4f:ac:ba:f7:df:cf:8f:20:50:b8:15:32:
e1:c9:29:71:63:cc:28:aa:09:7f:28:b3:fb:3e:e0:b7:19:0f:
6e:af:50:ff:39:10:70:c6:41:19:4f:62:5c:4f:b6:9a:4a:84:
7d:a8:aa:4f:2b:0c:a7:94:87:d7:22:e2:53:6f:1c:6c:35:78:
48:25:dc:05:6c:9d:f1:3a:97:e7:8f:67:e0:4c:f4:a2:04:ff:
5c:5c:dc:ba:66:21:2d:b2:37:bc:f3:61:a3:2e:34:eb:fa:42:
11:2f:bb:d1:35:94:12:e3:42:b1:16:7a:3b:be:29:e2:8c:d2:
15:9e:37:74:ab:ca:2a:29:db:88:24:a4:1e:e4:a8:55:60:b9:
21:82:d6:a3:23:46:8b:91:d0:da:66:1f:ee:82:43:d6:18:01:
c9:39:d5:fd:7d:d0:37:1e:aa:25:51:cb:82:41:42:1b:bc:7d:
b6:6e:c1:6e:5f:0d:4f:9c:2a:8c:6f:c0:f7:b2:8c:43:36:9d:
e8:1a:10:af:ec:63:e5:fd:c5:bc:9a:8e:c7:dd:23:95:cc:fd:
40:ed:f8:f7:cb:d8:04:84:3b:08:03:42:06:48:26:75:66:32:
d5:24:3d:b8:6d:3e:d5:7a:43:d3:4b:56:f0:1f:98:e3:ac:68:
8f:ed:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:51:42 2025 by rpki-client