Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
File: -bspsKvoSef-GA4znkscKCNoxSE.cer (raw, json)
Hash identifier: 3j8a+t/5xIpkIaTK0xMbQFGm8/USblEgSqelHa1u0bE=
Subject key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 668C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Jun 2025 14:22:44 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 143.92.112.0/20
IP: 148.222.64.0 -- 148.222.87.255
IP: 148.222.92.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26252 (0x668c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 16 14:22:44 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:05:7e:96:70:d8:83:fa:5b:a9:38:fe:9e:
98:dd:01:1b:e9:da:ab:52:2e:c3:1f:6c:56:75:af:
50:74:5a:86:5e:a4:60:c0:d6:73:ad:6a:80:16:2b:
af:04:bd:ff:b2:da:43:f7:fa:0e:1a:15:b9:d6:08:
84:79:f7:da:01:1f:37:9a:15:d4:1c:e8:dc:2f:05:
07:42:67:b6:02:e3:ba:3d:23:dd:1c:b9:b0:24:b5:
0d:d8:7d:7f:b6:8b:73:20:57:05:12:a9:94:f2:29:
0c:35:5b:2d:5b:ab:62:28:bf:42:5b:ea:d1:3f:6b:
a3:dd:2d:d4:ac:fc:6a:fd:d5:c4:30:0d:ac:e1:bf:
a5:a5:0d:32:75:94:9b:4e:3e:a4:f6:23:5c:7a:40:
01:78:80:b2:80:04:95:ab:31:63:59:3c:66:53:73:
4a:f6:eb:d0:2f:e9:47:f7:cd:02:45:e0:0c:50:24:
fc:21:64:36:97:a1:6a:d2:e5:ac:19:8d:f4:91:64:
aa:ed:db:99:ee:49:08:73:78:9b:67:83:4a:e6:6f:
f5:09:36:11:da:0b:f2:3a:e3:5d:80:3d:c6:9f:32:
c7:1e:5c:b2:09:2a:d0:e9:3a:6c:56:81:e9:d6:cd:
38:12:11:85:27:15:7f:a6:55:94:ab:8a:03:c8:29:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.92.112.0/20
148.222.64.0-148.222.87.255
148.222.92.0/23
Signature Algorithm: sha256WithRSAEncryption
04:6d:06:eb:d5:ec:1d:72:05:34:08:5a:16:f3:6e:84:9a:41:
c2:65:c5:38:78:97:73:26:90:55:d6:bd:42:8f:c3:86:73:e6:
a0:32:01:ac:f1:7c:e0:1a:93:57:1c:24:5a:d9:78:13:88:34:
63:31:7f:42:c4:5a:a7:ce:f0:95:19:56:87:bb:b5:f5:e9:4a:
d7:f6:4c:80:31:bd:f6:8b:93:fb:d7:64:5f:99:33:de:8b:d2:
4c:9b:8a:37:03:eb:41:8e:f8:6b:ed:1e:1c:ed:1f:aa:35:de:
6e:9b:c9:a7:0e:e4:25:92:00:58:02:3c:3b:54:28:e2:92:b3:
24:bf:8b:a2:a3:ab:ae:03:34:52:c7:d6:2f:dc:20:89:02:b6:
c6:6c:64:f5:49:8f:8b:79:e2:3e:7f:f2:e1:86:7a:1d:fc:d9:
0c:d2:58:b9:4a:14:c4:42:75:85:ee:e5:2e:60:33:ec:10:53:
f8:b5:3c:b2:bb:e0:fb:ea:c8:8e:67:7b:cb:ad:4b:71:84:c2:
7c:d1:48:d3:4a:af:68:0e:5c:45:41:68:ed:a3:f2:1b:ca:43:
cb:a7:6e:6c:53:bd:bb:7f:38:61:a9:1f:7b:97:7a:b8:3a:94:
ac:f4:b8:c3:19:b1:8f:36:d0:ff:60:14:f0:a9:2d:12:ba:2a:
a5:1a:88:c2
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgICZowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNjE2MTQyMjQ0WhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzRThGMzExMC8GA1UEBRMoRjlCQjI5QjBBQkU4NDlFN0ZFMTgwRTMz
OUU0QjFDMjgyMzY4QzUyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALy+BX6WcNiD+lupOP6emN0BG+naq1Iuwx9sVnWvUHRahl6kYMDWc61qgBYrrwS9
/7LaQ/f6DhoVudYIhHn32gEfN5oV1Bzo3C8FB0JntgLjuj0j3Ry5sCS1Ddh9f7aL
cyBXBRKplPIpDDVbLVurYii/Qlvq0T9ro90t1Kz8av3VxDANrOG/paUNMnWUm04+
pPYjXHpAAXiAsoAElasxY1k8ZlNzSvbr0C/pR/fNAkXgDFAk/CFkNpehatLlrBmN
9JFkqu3bme5JCHN4m2eDSuZv9Qk2EdoL8jrjXYA9xp8yxx5csgkq0Ok6bFaB6dbN
OBIRhScVf6ZVlKuKA8gp8YECAwEAAaOCAwcwggMDMB0GA1UdDgQWBBT5uymwq+hJ
5/4YDjOeSxwoI2jFITAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0U4RjMvMEEwNEY0RTI1NDk0MTFFOUI1OTdFNTcxQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNFOEYzLzBBMDRGNEUyNTQ5NDExRTlCNTk3RTU3MUM0RjlBRTAyLy1ic3BzS3Zv
U2VmLUdBNHpua3NjS0NOb3hTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAzBggrBgEFBQcBBwEB/wQkMCIw
IAQCAAEwGgMEBI9ccDAMAwQGlN5AAwQDlN5QAwQBlN5cMA0GCSqGSIb3DQEBCwUA
A4IBAQAEbQbr1ewdcgU0CFoW826EmkHCZcU4eJdzJpBV1r1Cj8OGc+agMgGs8Xzg
GpNXHCRa2XgTiDRjMX9CxFqnzvCVGVaHu7X16UrX9kyAMb32i5P712RfmTPei9JM
m4o3A+tBjvhr7R4c7R+qNd5um8mnDuQlkgBYAjw7VCjikrMkv4uio6uuAzRSx9Yv
3CCJArbGbGT1SY+LeeI+f/Lhhnod/NkM0li5ShTEQnWF7uUuYDPsEFP4tTyyu+D7
6siOZ3vLrUtxhMJ80UjTSq9oDlxFQWjto/IbykPLp25sU727fzhhqR97l3q4OpSs
9LjDGbGPNtD/YBTwqS0SuiqlGojC
-----END CERTIFICATE-----
Generated at Thu Jul 3 13:15:19 2025 by rpki-client