Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
File: 74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer (raw, json)
Hash identifier: ZdRKg450khfy0343OK/C3n3TSXzxNSJ7AJ9VdW5d/+4=
Subject key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A15
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 21 Aug 2025 07:36:03 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 152.98.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27157 (0x6a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 21 07:36:03 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9189396, serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:9c:64:09:23:06:53:e8:5c:7e:5b:c3:88:
35:dd:8e:c6:fc:66:98:c8:ce:10:8a:ef:86:82:ee:
ca:a6:55:95:af:7a:93:3b:e0:f9:d8:28:5a:16:c6:
21:1e:42:4c:cd:e2:cc:d8:a9:81:f6:1d:c0:ec:b9:
9e:2e:a4:8e:21:c2:16:2d:fd:59:81:f4:92:2c:e6:
84:40:63:61:d0:20:71:e3:91:51:45:c2:7b:d1:fd:
80:0b:d3:11:dc:d0:f9:2c:d1:2f:19:36:29:e7:3c:
23:df:8d:6e:45:ee:a5:12:db:a4:c8:86:bb:05:ce:
5f:22:f5:d5:97:0b:03:73:a3:d9:01:08:ea:ae:d1:
c0:a1:4c:cc:0e:6c:00:00:16:ed:53:3c:dc:4f:c2:
6d:e0:87:94:6f:e4:af:e5:fc:de:b8:02:cd:33:31:
a5:08:d8:a2:e6:34:4d:49:b7:a0:e4:66:69:79:df:
2d:3a:46:ef:38:03:6c:ee:22:4b:de:fc:88:e5:52:
70:b2:9f:be:77:07:a4:2d:cd:8f:c7:05:0f:dc:4e:
d1:63:6c:09:28:52:21:03:b0:29:9f:86:00:88:b4:
42:e6:78:77:b3:64:47:12:5c:2c:11:fd:39:f6:a0:
ac:b7:e6:80:09:af:71:3d:d4:01:44:cf:63:3d:c0:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:f9:df:d3:17:79:c4:b8:7e:b0:f7:f1:f5:c3:69:db:d6:64:
0b:77:4b:77:17:d6:28:e3:68:39:9b:c4:70:bb:b9:96:cc:be:
b7:44:50:04:f1:70:90:71:57:e2:57:d3:f5:c6:fe:2e:51:d1:
14:cb:4b:c8:c0:ee:6f:3f:42:88:1b:0f:a7:59:60:44:46:6c:
e3:8f:26:f6:00:6a:68:a6:97:46:83:7a:e0:90:47:c0:47:d6:
0a:fb:58:88:63:82:c6:61:8f:63:c5:b2:47:bf:35:04:81:3c:
62:77:4d:1b:4c:44:e4:cb:a0:8b:f6:59:64:d7:87:33:4c:68:
0b:48:63:f8:cb:d7:10:d5:26:fd:4f:db:62:56:d5:b3:18:f1:
2e:01:70:ba:22:f7:f6:02:46:e7:a7:6d:b6:55:52:95:23:85:
7f:b1:a4:94:07:ec:5c:75:f5:44:e3:4e:e6:08:ac:b8:89:40:
88:a3:da:79:8e:a8:0b:a5:6f:9c:a6:75:f4:be:87:2e:77:e2:
fd:5c:02:44:48:f1:95:68:68:57:55:93:1d:5e:94:95:6d:1c:
5e:2f:4e:fd:9a:bf:28:2b:7f:39:72:9f:a6:23:7a:e2:d0:e8:
77:58:72:e2:9b:6c:18:b6:48:66:d0:4e:94:de:83:cd:a1:47:
18:ea:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:34:36 2025 by rpki-client