Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer (raw, json)
Hash identifier: A0AEMG4MwA1+Wl+CbZcDM8VEt2SJt5bAB9RJiweH8JQ=
Subject key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 65C4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 May 2025 14:25:28 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Jun 2025 20:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26052 (0x65c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 29 14:25:28 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0d:ca:0c:25:5b:0b:50:58:8c:c4:87:56:27:
98:72:e4:79:ac:2b:8e:6c:cd:a4:50:ec:eb:f8:c5:
bb:0d:17:99:c7:1e:75:09:de:19:a6:a5:5e:22:96:
f3:c9:6b:44:cd:8a:ad:bf:42:fc:6f:4d:b5:9c:49:
24:87:95:76:af:8f:86:81:b0:c6:ed:96:48:64:92:
54:43:26:84:5e:22:2e:90:90:57:b4:6a:20:96:b9:
93:9d:29:a0:ec:12:56:42:21:0b:78:90:9e:bc:e2:
59:20:e0:1c:44:ad:89:72:29:26:65:e9:be:2e:39:
e0:91:0a:ae:1c:52:46:4f:c4:c1:97:0e:44:74:a6:
b5:26:ca:10:db:6c:c0:3d:d2:48:9d:40:28:86:fe:
0a:b4:2d:68:51:7e:a9:db:dc:78:9d:6c:56:91:5b:
e6:5b:28:ee:5f:fc:3f:44:c9:e0:98:a4:1e:a7:76:
cb:d1:93:1d:72:32:00:09:f0:ae:6b:1d:9f:80:29:
60:c1:be:18:ed:30:69:cb:99:8e:93:f0:e0:af:da:
da:84:80:e1:25:09:13:7d:8a:21:49:48:d0:5f:e7:
1d:13:2f:8e:cd:5a:6e:af:91:7b:4e:28:d7:61:0a:
69:1a:ac:90:25:e1:08:14:03:44:4e:09:e7:ee:ce:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:96:e6:1f:8e:59:54:7a:32:e5:e3:7f:9a:6f:4b:51:ad:7d:
25:7e:77:d5:e8:97:f1:02:ba:f3:56:65:88:f8:ba:0c:4d:a3:
2c:69:94:0c:d7:f1:9e:20:38:ba:0d:df:a3:51:ae:9d:4e:1b:
d4:87:6d:98:7d:e3:44:cd:22:34:28:2b:71:87:17:62:a3:a9:
ca:ba:7d:d3:6f:e3:ce:02:21:f2:23:79:68:82:86:51:02:fc:
4d:96:bd:04:a6:b8:ac:31:0c:00:dc:e7:86:cb:8f:ed:ed:e7:
aa:25:c2:af:90:94:c2:0d:9c:d8:79:a2:c2:7b:66:94:b0:85:
13:ea:eb:05:cd:cf:f5:f3:50:d9:19:50:01:ee:87:91:95:56:
53:fc:d3:2d:dc:5c:36:ce:af:63:aa:0c:50:46:98:3b:36:8d:
75:9b:ff:fb:c5:40:37:c1:4d:88:2e:97:ab:1a:d2:3b:a2:23:
25:8d:00:01:41:d4:76:c5:86:0a:13:87:66:88:f3:8e:5a:29:
f7:46:aa:a1:04:51:6d:5b:d7:e0:fe:44:a2:c6:cf:f9:9b:49:
78:4e:3f:84:ca:2b:2a:10:11:b0:9d:eb:76:0f:64:19:e5:e8:
06:7e:6f:22:99:1d:bf:b4:5d:46:a7:eb:c0:10:f6:e9:2f:f3:
4f:2a:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:37:35 2025 by rpki-client