Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (raw, json)
Hash identifier: dEN04Vh3/XJUtldGAQqecGT8RVXi/7/2tEH5QIpc0iQ=
Subject key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4841
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 Sep 2025 18:02:20 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 196.15.16.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 02:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18497 (0x4841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 11 18:02:20 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:53:2d:73:88:b4:40:34:89:4f:89:ec:a1:
95:4c:71:a7:37:98:40:99:d4:9d:62:a5:e2:d8:02:
2b:ff:b5:86:12:29:1c:0e:de:69:40:5c:75:2b:d3:
d7:ca:cc:b9:dc:3f:45:89:18:6d:ae:dc:59:ec:bb:
c3:80:0f:ed:8d:14:cf:4c:cb:49:25:9d:3a:3d:7a:
ca:74:6e:85:28:e9:92:5b:f5:61:84:19:9c:06:52:
6a:3b:93:56:28:bf:db:3f:47:60:a9:18:bb:78:ba:
91:a2:b1:81:8e:02:6f:10:01:83:72:48:f8:66:53:
c2:41:fb:5f:6b:2a:88:6f:8d:4a:a7:b4:be:29:e5:
41:83:fc:d7:12:92:23:d8:c5:d0:44:e2:af:a4:c7:
fb:d4:64:ba:3f:2d:16:c7:ca:5b:8d:59:f7:80:ea:
3d:17:5f:1c:13:bf:13:35:d6:29:ba:a8:15:b7:60:
09:c8:db:d7:ca:02:fa:ee:e8:a7:c9:26:d9:f7:cc:
95:fb:90:49:44:99:92:5e:d9:c3:13:05:64:16:bb:
15:81:e2:58:c8:06:69:fc:66:48:df:f7:de:ef:44:
a7:ff:f7:56:6f:34:db:5c:4b:ed:7d:d5:61:71:a9:
1b:c0:db:87:4b:3a:16:1a:40:74:07:0f:56:e4:a0:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.15.16.0/20
Signature Algorithm: sha256WithRSAEncryption
77:61:30:b7:59:55:8c:2c:e3:85:10:22:f7:05:ce:7a:20:58:
32:5a:b9:cc:e5:79:23:c3:0a:62:8b:d7:30:18:7f:9e:33:50:
6a:da:8b:c4:09:17:01:17:01:a4:91:ac:27:5e:ef:9d:21:ae:
b4:c6:61:4e:77:ac:79:89:4e:50:6d:39:df:8b:5f:34:77:7a:
26:69:ec:6d:fe:43:e6:2e:91:24:60:e5:48:1b:67:c0:5f:fd:
3e:a2:93:47:2f:46:56:c9:26:67:3e:64:d8:4e:a8:38:1e:4b:
fa:c9:27:a1:6b:fd:7c:58:35:f6:ba:f1:39:6c:4f:95:77:6d:
b3:da:b1:04:e8:00:dd:16:37:97:0c:0d:82:4c:62:76:b3:d0:
fb:86:b8:8f:6d:c8:c1:c4:9f:bd:16:eb:ce:0d:1f:ab:f9:bf:
ca:e6:9f:3f:11:7a:ed:15:76:7c:1d:8c:93:f5:d5:99:79:52:
08:bd:b6:64:f8:7b:58:87:49:d0:78:76:7f:9e:55:3d:40:cd:
f4:8a:13:c8:75:f2:27:e6:6d:97:07:5e:ce:00:a1:1e:3d:ce:
77:21:38:f0:b1:af:ad:fe:65:6d:26:a5:ee:8b:cf:05:60:45:
a6:c1:b4:96:c7:3f:a1:f2:bc:3a:46:6a:86:f9:ca:31:a3:33:
51:8c:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:11:55 2025 by rpki-client