Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
File: 67mxD9JPdAljNjwtk1eAidsN5_U.cer (raw, json)
Hash identifier: dA9O/5v6+ef/gCiVKw+MNCo4CB9vim8uRg7tu5ifzh0=
Subject key identifier: EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 69D2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Aug 2025 15:55:35 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 192.207.119.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 09:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27090 (0x69d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 14 15:55:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A915393C, serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:64:dd:ba:ae:1d:fd:23:46:75:a2:c3:43:cf:
9e:9a:bd:4a:ba:3a:1c:f3:f0:ab:25:b5:67:9c:65:
17:c6:e0:20:7b:46:de:c1:bc:20:b7:87:b4:b4:16:
38:da:ca:9f:91:25:8a:96:b4:8b:d6:93:2c:c1:f7:
76:de:e7:79:06:d3:47:2f:ef:96:e9:0c:f1:56:4e:
22:72:c6:a7:a5:44:99:2b:58:01:c3:2b:63:05:c5:
11:91:9c:c8:b5:94:3b:40:67:b1:f6:ee:d8:47:00:
f5:ab:1a:e4:3b:43:30:51:45:5d:0f:25:ba:fe:a9:
fb:74:99:94:20:d0:59:bd:53:c0:cf:fa:56:74:48:
51:e7:58:fc:de:18:8f:d2:fd:38:37:43:9e:c1:dd:
1b:a4:08:d7:c2:f1:da:20:e9:28:05:37:9a:f1:cc:
4f:4a:ab:6c:dd:7a:92:3c:08:40:8d:bf:67:4d:3a:
c8:46:50:97:ba:0b:4e:1a:78:11:08:78:88:06:99:
85:12:c3:99:9f:37:b5:01:0f:3f:18:7d:d8:bb:03:
b1:20:85:a4:2d:94:13:e9:b1:9f:52:7e:55:37:33:
20:7d:a7:d6:fb:80:a1:6c:cb:cf:8e:aa:02:35:d2:
9e:d4:59:3d:58:3e:30:39:aa:1e:ac:a1:02:e2:05:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.207.119.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0c:51:ca:92:10:22:df:ef:4f:5f:ae:a9:14:0b:75:0f:e2:
e2:ee:a2:e9:16:d1:40:92:2e:70:38:83:ce:ea:a5:31:11:65:
d9:3c:c1:ee:b7:12:7e:b4:ff:65:6e:2d:9d:98:05:8e:e7:44:
4a:95:0b:c5:0b:8b:8b:81:53:2f:1c:1e:61:a1:49:d4:17:f6:
e7:64:08:5b:ed:80:d2:7e:97:28:db:49:d0:a4:b3:4d:54:0f:
e1:c4:ef:fb:c2:dc:18:ca:f9:24:b7:2b:c4:60:fc:cb:5b:d0:
aa:83:b9:41:cc:af:5c:dc:42:4e:bd:4f:69:51:cc:b9:02:eb:
9d:d9:25:cb:38:a0:f1:09:53:de:e3:82:84:85:b0:6f:de:08:
0d:61:b1:b8:da:e0:dc:13:36:d9:82:cc:50:4e:d4:a2:5e:42:
a8:00:d8:dc:9c:11:e0:8b:1f:da:91:c5:f4:8d:ca:ed:76:57:
34:44:94:88:03:0a:2c:b2:20:de:68:a8:20:2a:d6:b9:94:15:
89:0b:e9:a9:1c:9b:15:6f:6d:9b:37:dd:b4:14:f2:20:fa:fc:
d4:b3:42:93:e6:40:b4:a8:7b:21:ff:40:8f:38:e9:e2:71:e3:
ae:ed:03:89:93:12:40:ec:5f:65:dd:63:7f:0f:82:d4:60:18:
bd:57:2f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:18 2025 by rpki-client