Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.cer (raw, json)
Hash identifier: ea/mEWFInH2kg8ukkNu1KWwWoCU0odqgCF5I8B49H10=
Subject key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6473
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 May 2025 04:57:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.88.7.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 May 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25715 (0x6473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 2 04:57:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:5a:26:05:2a:bc:bc:c8:05:c1:b3:5d:f5:
89:d1:07:27:c0:92:8c:d5:0c:da:85:2c:e4:c3:86:
77:c3:65:3c:35:df:17:28:4b:a9:bf:f3:a4:8a:0c:
9e:18:ba:51:86:f4:ba:83:16:a4:a3:88:0d:78:02:
74:cc:fc:10:69:8f:52:54:bf:be:09:d3:9f:6d:2a:
64:99:fb:7f:20:bf:1e:8a:47:83:d2:ef:bc:f0:e9:
24:39:9b:10:d4:90:f6:c4:b1:b2:7f:64:1f:24:52:
d1:93:f6:06:20:da:62:db:76:d9:4d:8e:ce:bb:17:
62:1d:e7:25:b5:3c:e2:c7:50:f4:32:d3:51:cb:52:
9f:ff:21:9c:fc:f6:b3:20:9a:b8:6a:8b:eb:53:b9:
89:fa:46:e2:a1:d7:a0:d1:b1:31:3a:e8:f6:bd:4b:
50:66:59:33:f1:0f:dd:cd:fc:96:c8:bf:f6:cb:9b:
db:d4:92:30:e4:ea:8f:9b:86:9d:74:04:77:ee:bb:
e6:2b:0c:b5:ea:5c:c5:7e:db:0b:eb:29:8e:c2:3a:
f2:17:cf:1c:ea:0e:36:a8:bd:7f:47:f9:64:d3:39:
44:43:34:1b:08:51:71:a7:82:61:1f:d8:c1:d6:65:
2d:33:5d:01:95:d6:9b:a8:a1:3a:1c:78:5d:12:96:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.88.7.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ef:98:34:58:3a:68:ea:27:d1:f1:1f:5f:33:24:d9:12:60:
28:57:08:ef:fc:68:c7:b6:2f:ad:fd:f4:bf:55:d1:0a:df:38:
47:9a:cb:aa:e3:16:82:68:e6:95:d2:25:d3:69:00:99:73:35:
d1:2c:16:6e:f8:6c:a8:d8:fe:8d:2d:f8:9e:3a:5d:55:53:2c:
63:82:f5:30:bb:70:bc:02:31:87:f2:cc:38:1b:02:be:fa:38:
e5:df:f8:b2:0c:da:aa:6f:ef:72:e2:3c:5d:e8:88:a2:32:04:
93:49:93:64:de:c7:86:0f:a0:75:a6:09:1b:05:43:81:ea:cc:
19:9e:ab:d7:60:eb:ba:47:0f:8c:b1:10:e0:29:f2:ca:88:48:
03:cd:84:a0:c6:32:b0:bf:1d:f7:f1:2f:3e:2a:9a:07:cf:4d:
2a:2f:47:b8:a1:71:22:e2:e8:29:e5:e8:78:53:55:97:a2:bc:
64:89:c0:7d:39:95:41:a4:97:ef:ea:0b:72:b7:7e:ae:d0:83:
9e:e1:11:d2:85:5f:0b:29:01:7d:bc:39:37:5c:e0:ac:60:7f:
09:7a:ef:be:82:b5:f9:a9:de:ec:d5:3b:97:0b:aa:ec:98:35:
05:a7:aa:c9:73:1a:f6:7e:ba:9e:dc:c6:0d:2f:5a:63:f8:d4:
a9:60:60:c5
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNTAyMDQ1NzM5WhcNMjYwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFEMjYwQTExMC8GA1UEBRMoRDRERjI1RTBFQ0QyRTM4MDhGNjg3MEVF
NTZGNzBGMjU1ODE4OTMzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOPZWiYFKry8yAXBs131idEHJ8CSjNUM2oUs5MOGd8NlPDXfFyhLqb/zpIoMnhi6
UYb0uoMWpKOIDXgCdMz8EGmPUlS/vgnTn20qZJn7fyC/HopHg9LvvPDpJDmbENSQ
9sSxsn9kHyRS0ZP2BiDaYtt22U2OzrsXYh3nJbU84sdQ9DLTUctSn/8hnPz2syCa
uGqL61O5ifpG4qHXoNGxMTro9r1LUGZZM/EP3c38lsi/9sub29SSMOTqj5uGnXQE
d+675isMtepcxX7bC+spjsI68hfPHOoONqi9f0f5ZNM5REM0GwhRcaeCYR/YwdZl
LTNdAZXWm6ihOhx4XRKWHskCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTU3yXg7NLj
gI9ocO5W9w8lWBiTPjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI2MEEvQjZEQ0YxREM0NDk1MTFFRkE0NTkwQzNEQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQyNjBBL0I2RENGMURDNDQ5NTExRUZBNDU5MEMzREM0RjlBRTAyLzFOOGw0T3pT
NDRDUGFIRHVWdmNQSlZnWWt6NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMBYBzANBgkqhkiG9w0BAQsFAAOCAQEAlO+YNFg6aOon0fEfXzMk
2RJgKFcI7/xox7Yvrf30v1XRCt84R5rLquMWgmjmldIl02kAmXM10SwWbvhsqNj+
jS34njpdVVMsY4L1MLtwvAIxh/LMOBsCvvo45d/4sgzaqm/vcuI8XeiIojIEk0mT
ZN7Hhg+gdaYJGwVDgerMGZ6r12DrukcPjLEQ4CnyyohIA82EoMYysL8d9/EvPiqa
B89NKi9HuKFxIuLoKeXoeFNVl6K8ZInAfTmVQaSX7+oLcrd+rtCDnuER0oVfCykB
fbw5N1zgrGB/CXrvvoK1+ane7NU7lwuq7Jg1BaeqyXMa9n66ntzGDS9aY/jUqWBg
xQ==
-----END CERTIFICATE-----
Generated at Tue May 13 14:13:54 2025 by rpki-client