Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer (raw, json)
Hash identifier: Jb02dZtbQz6Y7xbrynTf8pVzgeEixQ+u74rjUUvYUg8=
Subject key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A24
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Aug 2025 14:37:41 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.4.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 09:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27172 (0x6a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 22 14:37:41 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:a6:6f:cb:bb:04:98:66:35:0a:60:3b:24:
81:cc:06:3c:3f:69:3d:b6:ae:ab:a9:c2:9b:60:11:
a2:d6:a5:e8:8f:38:94:b5:6f:92:16:59:bc:01:22:
80:9a:93:d8:87:02:0a:f6:e5:fc:c6:47:6f:e5:f0:
8d:63:0a:3e:26:e1:58:b2:c4:b4:20:4b:5c:b9:a1:
09:a6:07:57:e8:10:31:2d:2f:2e:50:66:28:56:b6:
98:01:86:31:48:5f:df:bc:60:2e:ef:61:58:f3:b9:
f2:4f:95:9e:ea:b5:10:2f:0b:c3:9c:22:32:6b:a4:
b7:75:a4:bc:08:14:28:33:6f:3c:f5:a5:d8:31:ca:
cc:5c:2c:b3:b3:f5:e9:78:b2:ad:7c:98:b6:af:cc:
0f:ce:d5:06:04:e9:ff:8f:6d:02:97:b4:11:a3:bd:
aa:41:03:02:62:65:54:c0:48:f6:67:fd:57:46:03:
1c:06:58:2f:b4:49:47:43:da:2f:55:c3:5b:87:47:
c4:d9:3e:13:70:18:fa:e0:57:0c:f3:c8:8d:f0:31:
74:9d:a8:94:5a:7a:ae:52:53:a7:c0:b1:fa:5f:e9:
6e:14:ac:d2:e5:3a:e0:d9:99:f5:fe:3f:c0:ae:5c:
e5:d9:c8:6a:00:02:72:4a:a7:46:e8:3f:21:25:67:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.4.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:3a:03:4d:f8:9a:08:f9:95:f3:b8:ea:dc:dd:3f:6b:2a:37:
39:8f:76:12:34:9a:12:0f:1d:14:b8:6a:76:a0:7b:ec:b1:01:
05:8a:c8:ef:3c:8e:5d:68:95:8c:1e:1f:42:dd:9c:2b:0d:0f:
38:9b:79:33:23:d0:5d:d9:38:71:c4:a5:9e:e5:33:84:e5:c9:
50:4e:7c:eb:81:2c:79:4c:7c:ac:6a:ca:5b:09:1a:31:bf:31:
a5:1a:5e:3d:e1:96:53:18:ab:32:ef:57:21:fb:dc:4a:7a:e8:
18:e7:c5:23:3f:50:4b:e6:96:cd:18:02:f6:22:bc:73:dd:cb:
79:55:91:b6:de:da:16:af:5d:2c:2e:8a:f6:3c:62:d2:2f:2a:
59:d6:3c:97:46:cd:04:06:56:77:41:39:11:f8:1e:5f:88:0d:
1d:ee:41:da:11:4f:cf:02:35:f6:4a:a5:2b:77:d5:7e:ed:82:
64:6c:da:e1:de:ae:a6:a7:22:e3:b9:75:73:8d:0b:c5:a5:2b:
64:c4:f9:0e:cb:b0:89:9e:f9:ef:c1:19:5c:59:be:a6:bc:0d:
0f:00:43:e9:f1:db:ff:a6:8b:a8:06:ca:4f:7b:69:df:c0:a8:
35:7b:1a:51:57:4c:de:cf:c6:6e:4e:c8:48:11:f0:91:40:cd:
e8:56:5f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:12 2025 by rpki-client