Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
File: wm9G_ZlSs686fXFd4b86YeJceYo.cer (raw, json)
Hash identifier: 03NtV8TIF11Mn7FguvhdTqzus96cLDwGHPC5yyaHaAA=
Subject key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66F9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Jun 2025 12:42:56 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 160.25.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26361 (0x66f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 24 12:42:56 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:ce:d9:70:4b:f8:83:49:cb:99:42:59:1a:
9c:69:40:75:42:57:b9:db:bc:8b:94:6e:d8:cc:6e:
f4:04:3c:16:cf:6a:d4:31:51:09:bc:45:6e:54:4f:
8f:3c:9b:af:8b:8a:9f:7f:b1:0f:32:11:eb:b4:54:
dd:79:b3:91:cf:50:e0:79:21:fd:fc:45:c4:e5:e4:
a6:80:43:b9:32:60:25:38:be:bf:91:a7:23:32:25:
de:29:b6:a0:9e:50:28:85:47:bc:c7:62:88:7f:d2:
c8:42:f4:13:92:a5:39:2e:87:80:b5:97:39:42:0f:
c1:a7:03:2e:12:fe:cd:c9:b8:31:c5:d1:9b:b6:4d:
ad:3b:40:23:16:4e:0b:1e:e3:86:29:33:7f:70:18:
29:1b:32:62:d2:f5:85:b3:1b:9e:c2:3b:04:d1:00:
95:f5:83:1a:01:7d:fb:98:80:b2:80:33:54:1e:42:
ce:8f:16:c1:b7:3d:51:87:33:58:d9:53:83:09:02:
e9:2a:ab:f9:15:2d:8c:25:45:69:52:f2:bb:b0:02:
f6:9b:ac:17:67:52:15:03:e7:c5:94:45:53:ae:ec:
45:fa:cc:af:f0:d1:ee:ea:75:6e:8a:1f:74:bb:85:
98:fe:d3:e7:a2:f2:94:a5:34:b8:15:aa:03:f9:55:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.20.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:b6:30:4d:c4:8b:5e:11:aa:93:68:ea:9b:a7:5d:f7:85:5c:
e6:30:c2:41:d6:85:10:f0:78:04:a5:0e:90:27:ac:be:53:d0:
94:f1:70:a4:0a:dd:bf:c4:88:ed:0e:2a:67:c0:7a:11:73:1a:
bb:fc:77:82:11:02:0a:d7:0b:f8:64:72:c6:bb:f9:16:9f:ee:
ac:b1:86:e6:03:8a:a6:00:a1:f4:7a:82:02:7c:24:9e:97:3b:
2f:4b:ae:f0:00:2c:90:c3:dc:cd:0a:f4:23:d0:d2:d9:c6:99:
d6:82:d8:89:21:08:23:fc:a6:a2:f2:6d:55:ba:e9:26:ef:13:
31:74:b3:eb:2f:86:a0:3a:76:d8:ec:cb:e1:67:5f:ec:9c:cc:
ac:d3:4f:bd:9c:71:ce:0f:31:f9:61:9b:c5:47:23:b5:d8:70:
70:03:a2:b2:2c:0d:ab:37:48:40:a6:57:07:3b:65:aa:cc:2c:
58:1c:a4:9b:35:1a:cf:17:c8:70:9a:b2:27:25:e4:26:1a:73:
8e:83:c9:e5:af:89:27:9b:40:61:08:01:f9:7d:7d:37:d5:13:
b4:03:51:de:04:72:78:5f:7a:69:d7:da:3b:b3:7f:e5:61:43:
16:24:15:23:21:b0:ab:6c:0c:84:f9:ca:21:31:8f:3a:44:65:
b2:b3:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:49:36 2025 by rpki-client