Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
File: 60yRrrkBmKp9PHgiHY4Ytwdd77k.cer (raw, json)
Hash identifier: lMsY/59WLSmKRdJ07hb49SI+Kc3qXjpNi3iVzbRITfY=
Subject key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 69C4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Aug 2025 20:41:48 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.145.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27076 (0x69c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 12 20:41:48 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:a2:d7:80:a1:84:f9:c5:53:54:38:c6:17:
30:21:0b:8c:df:c0:83:1d:f6:39:41:e5:da:da:2c:
11:a8:ae:44:26:01:f4:ac:98:ca:45:cb:5a:9e:d0:
d1:17:58:0e:3d:06:96:94:75:e7:5d:41:4e:14:04:
98:c1:71:15:d5:a0:02:f6:6b:fe:16:73:2c:5c:40:
ee:78:f8:44:35:be:89:75:76:01:ad:22:e1:ef:19:
46:9e:4a:27:29:e7:3d:88:24:43:06:cd:f0:11:01:
4f:26:95:4e:20:a8:34:69:e4:a6:22:ce:0f:db:b0:
dc:12:09:8d:8e:b1:af:a8:e9:ec:ce:5b:91:72:85:
28:a5:5f:52:83:f8:0f:0d:10:a0:44:93:e3:d6:8d:
c5:0f:54:12:cb:3a:9d:11:82:10:bc:ef:12:e9:04:
1c:85:0d:c0:d8:6b:92:6d:0b:69:00:30:30:0b:c6:
9c:93:03:6f:e2:8f:b1:e8:f7:11:ab:5a:ca:27:71:
39:23:73:98:a8:68:00:84:5d:ad:ee:fa:05:dc:9d:
db:6e:b7:7b:e4:bc:0e:2e:3f:3a:a8:88:68:bf:ff:
95:43:5f:9a:f8:4d:78:bf:2f:b5:e4:63:af:3b:5c:
0a:44:0f:ff:da:0e:82:1b:2d:39:d9:ec:7a:a5:69:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:1f:07:2c:f0:e8:95:ca:19:5c:c0:10:97:d3:24:54:6c:46:
b4:7f:54:ea:0e:ee:7c:e2:5d:0e:aa:1d:aa:ab:31:7a:52:3d:
a9:90:6f:f8:f1:12:52:e9:f6:08:a9:02:e1:ca:82:8a:52:41:
c3:ab:cf:4f:43:06:c9:72:3b:e1:b0:0d:11:5c:7c:5d:ca:74:
50:44:70:81:dd:47:25:3f:34:15:7a:0a:a7:db:72:6e:57:cd:
5d:62:fb:b3:4d:81:15:16:38:c6:0f:91:da:a2:f9:8c:7f:3d:
17:0c:3b:21:32:94:bc:4b:44:18:eb:4c:2d:97:6a:95:53:27:
ea:b7:af:33:bb:19:d1:12:7d:5a:7e:9b:c8:53:10:8e:cc:b1:
02:12:a8:ed:dc:d5:f0:f8:94:b0:b2:f6:ac:03:21:14:11:55:
66:64:8d:78:08:bb:14:07:0c:06:18:09:f6:32:1f:3a:c9:b4:
3b:75:09:68:97:99:3f:0a:40:1c:88:95:47:87:8e:45:1d:1a:
2b:2a:df:43:e9:8f:de:c6:10:c5:cc:8b:07:4b:9a:a3:b8:f2:
61:65:8f:df:66:44:34:85:00:c7:68:75:46:74:4f:c8:79:01:
b9:bb:0b:d2:6a:27:c4:1d:c2:14:99:0d:6d:14:cf:17:ac:b3:
da:4e:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:33 2025 by rpki-client