Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1vgRRe2JgtsHhFt0wE7Qyoz68mo.cer
File: 1vgRRe2JgtsHhFt0wE7Qyoz68mo.cer (raw, json)
Hash identifier: q0JeCHt3Fg0g44scETs2LmnzNAZmgvCp6svt10gFyCA=
Subject key identifier: D6:F8:11:45:ED:89:82:DB:07:84:5B:74:C0:4E:D0:CA:8C:FA:F2:6A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6788
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 03 Jul 2025 03:18:11 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.168.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26504 (0x6788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 3 03:18:11 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91650860000, serialNumber=D6F81145ED8982DB07845B74C04ED0CA8CFAF26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:75:ef:ef:f1:7f:f2:1e:75:5d:b8:d8:a8:
fd:6f:60:29:9e:0e:7a:cd:28:be:7f:b8:66:54:b0:
16:7f:34:ee:dc:98:7b:e1:0c:87:4d:22:16:fc:c9:
9f:00:98:82:03:09:ae:1b:c9:7c:75:fc:11:cc:91:
f7:5a:fa:55:83:6f:78:ab:53:b5:72:f3:24:a2:d9:
7c:3d:c4:3d:b2:11:f3:e8:fb:bb:48:66:8a:37:8e:
ab:9d:b7:c3:42:95:3a:96:9c:b3:eb:99:28:db:a0:
2b:be:3d:22:63:b6:ab:ba:a8:34:9c:20:b0:db:a8:
1d:cf:3b:f8:f5:d9:08:e1:f0:06:49:ea:38:28:a1:
cf:22:af:64:03:12:df:7e:83:f7:86:43:33:ba:a0:
15:a4:a3:59:b0:01:5f:93:fc:80:7f:2e:d5:5a:55:
93:76:50:fe:f5:77:51:a4:2b:ab:85:9a:43:2a:85:
8a:2f:0d:6b:58:5b:62:ed:df:65:72:2a:35:8d:5f:
5d:cb:a4:26:77:8a:13:cf:e0:92:0e:7a:8d:e4:66:
04:86:20:2a:47:d1:c0:2e:da:d4:e8:1e:5a:c9:23:
bf:93:43:10:3c:e3:c7:8b:85:9f:0d:09:14:ad:f4:
30:c8:d8:85:26:88:50:11:e4:a1:7c:e8:c2:3f:14:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:11:45:ED:89:82:DB:07:84:5B:74:C0:4E:D0:CA:8C:FA:F2:6A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.168.0/23
Signature Algorithm: sha256WithRSAEncryption
36:a8:8e:c5:1d:5b:4d:73:d2:fd:54:5f:bb:ad:5c:69:69:42:
70:8d:2e:82:31:0a:84:f2:86:65:ed:50:28:1f:36:38:00:f8:
cb:27:10:83:ba:2f:df:9e:01:7b:cf:25:3b:14:32:1b:53:4f:
d7:2a:bc:30:b7:ba:2f:35:4c:ea:b5:f6:38:ae:4d:77:96:f2:
b3:0c:b8:f6:30:47:a1:b9:d0:f7:c4:8a:de:88:10:28:1c:ec:
ff:fd:87:d5:bf:1a:35:ed:f6:ac:d9:2e:9e:8b:4d:3a:09:dd:
10:f8:e8:73:4e:f1:3e:b0:de:2e:b3:07:3e:0a:d5:95:8d:d7:
d2:16:48:0f:90:21:01:2c:49:f9:db:95:08:20:6a:c1:cb:88:
f6:dc:c6:2c:7b:a8:1f:89:65:01:85:e2:f6:95:2a:58:86:fb:
d9:c8:92:4c:28:2e:f6:a0:28:7d:24:fd:f6:a1:44:08:d0:fe:
bb:a6:ec:17:9e:00:46:f1:e5:f0:e0:af:e4:fb:a8:de:09:75:
49:a3:2a:99:97:5c:05:9c:2f:bb:82:67:a3:4e:a0:ac:87:f4:
72:99:33:4f:52:ec:5a:4f:e4:3a:69:dd:62:7e:aa:40:fb:5b:
e8:ff:37:d1:bd:90:fd:7b:7c:ea:23:4a:1c:82:f6:26:e5:27:
bb:ee:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:53:25 2025 by rpki-client