Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
File: D6tO-YKPSvJnwW2K1HEKjuybu64.cer (raw, json)
Hash identifier: M8sDgquWE7a5U7eW65JbJTtylUrNda9qI96zTbD1t9E=
Subject key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4C34
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Jun 2025 21:53:19 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 217.10.226.0/24
IP: 217.10.229.0 -- 217.10.231.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19508 (0x4c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 27 21:53:19 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:0c:00:dc:df:2f:fc:c2:94:29:3a:49:98:
73:f1:dd:1a:15:12:bd:65:8e:35:db:50:6e:67:3a:
2f:01:fd:99:6f:61:55:3e:7b:3f:82:8f:af:8f:20:
66:b9:52:de:52:c0:d6:e1:2e:3a:e1:57:81:7c:17:
e7:64:fa:14:e0:91:0c:26:4e:5a:5c:27:38:11:5d:
a8:99:bb:fa:3e:34:1c:34:a8:35:a7:f1:7f:e6:81:
22:e0:9b:69:64:e6:32:81:82:14:42:f2:c2:72:17:
04:d6:99:13:8c:84:a7:05:9d:d3:86:5c:04:18:77:
1c:a3:aa:7b:90:56:b2:47:66:e5:4b:4d:31:ac:d6:
3f:36:de:fd:31:ce:a6:86:1e:ef:c6:00:ed:06:d7:
23:34:b4:2d:19:41:74:7c:95:22:5f:7e:29:b5:0d:
cb:b2:8c:76:8b:0c:e9:41:d1:2c:d0:38:8a:01:ba:
3d:18:71:a5:33:bd:ca:3b:b3:dc:d3:d3:cd:4f:18:
e4:20:48:45:a8:84:93:6c:31:23:c1:58:9e:45:54:
b2:19:28:a5:19:1b:13:25:cf:03:6d:de:50:39:a1:
e7:86:9f:39:01:71:6c:5c:da:52:cf:54:13:58:22:
be:39:c5:7d:40:2e:33:04:31:5d:b7:92:81:14:1c:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.10.226.0/24
217.10.229.0-217.10.231.255
Signature Algorithm: sha256WithRSAEncryption
0f:35:0e:78:83:7f:12:02:01:79:f5:77:6a:ff:fc:f1:67:62:
59:db:ce:4d:2b:68:e2:05:b9:0b:34:39:46:42:ac:11:5c:ec:
17:db:fa:ad:76:dd:3c:1a:21:53:b7:00:5f:8b:76:f7:00:46:
de:09:e1:4a:13:f1:8e:1a:b5:9a:ba:75:88:b2:04:83:37:9c:
a2:c5:59:da:5a:5c:ac:cb:10:b7:9f:02:81:37:f8:86:d2:72:
1c:00:27:66:b8:4a:45:37:0d:08:fa:81:b9:cf:42:c6:72:ac:
cb:05:ad:3e:fe:a0:57:6b:82:06:74:31:55:7f:8f:58:1e:f1:
50:73:f0:2f:97:13:9e:d4:e3:4e:11:bf:91:47:63:15:e2:5b:
2a:02:04:39:a0:09:96:5a:d7:0b:c5:37:a8:f3:c9:ad:76:1c:
a6:3d:b7:17:78:b5:33:a0:98:1b:03:83:b4:f5:8d:8e:b0:02:
c4:38:b4:74:a4:62:15:ce:f5:04:65:19:83:78:da:70:ab:34:
31:9f:79:91:5e:00:6b:51:a2:a0:1a:24:6a:6e:7d:2f:26:d3:
37:97:1c:38:77:8a:04:0f:4f:c2:e1:55:d3:85:6b:dd:2d:3a:
db:a7:90:2d:c2:48:a0:a8:a5:34:21:79:e2:94:72:0d:e6:40:
4d:57:b5:0d
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgICTDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjUwNjI3MjE1MzE5WhcNMjYwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCRUJFOTExMC8GA1UEBRMoMEZBQjRFRjk4MjhGNEFGMjY3QzE2RDhB
RDQ3MTBBOEVFQzlCQkJBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL0jDADc3y/8wpQpOkmYc/HdGhUSvWWONdtQbmc6LwH9mW9hVT57P4KPr48gZrlS
3lLA1uEuOuFXgXwX52T6FOCRDCZOWlwnOBFdqJm7+j40HDSoNafxf+aBIuCbaWTm
MoGCFELywnIXBNaZE4yEpwWd04ZcBBh3HKOqe5BWskdm5UtNMazWPzbe/THOpoYe
78YA7QbXIzS0LRlBdHyVIl9+KbUNy7KMdosM6UHRLNA4igG6PRhxpTO9yjuz3NPT
zU8Y5CBIRaiEk2wxI8FYnkVUshkopRkbEyXPA23eUDmh54afOQFxbFzaUs9UE1gi
vjnFfUAuMwQxXbeSgRQcWPcCAwEAAaOCAwEwggL9MB0GA1UdDgQWBBQPq075go9K
8mfBbYrUcQqO7Ju7rjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkVCRTkvOTRDOUI4NzgwMDVEMTFFRUJFN0E5MjQxQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJFQkU5Lzk0QzlCODc4MDA1RDExRUVCRTdBOTI0MUM0RjlBRTAyL0Q2dE8tWUtQ
U3ZKbndXMksxSEVLanV5YnU2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQeMBww
GgQCAAEwFAMEANkK4jAMAwQA2QrlAwQD2QrgMA0GCSqGSIb3DQEBCwUAA4IBAQAP
NQ54g38SAgF59Xdq//zxZ2JZ285NK2jiBbkLNDlGQqwRXOwX2/qtdt08GiFTtwBf
i3b3AEbeCeFKE/GOGrWaunWIsgSDN5yixVnaWlysyxC3nwKBN/iG0nIcACdmuEpF
Nw0I+oG5z0LGcqzLBa0+/qBXa4IGdDFVf49YHvFQc/AvlxOe1ONOEb+RR2MV4lsq
AgQ5oAmWWtcLxTeo88mtdhymPbcXeLUzoJgbA4O09Y2OsALEOLR0pGIVzvUEZRmD
eNpwqzQxn3mRXgBrUaKgGiRqbn0vJtM3lxw4d4oED0/C4VXThWvdLTrbp5Atwkig
qKU0IXnilHIN5kBNV7UN
-----END CERTIFICATE-----
Generated at Thu Jul 3 18:08:53 2025 by rpki-client