Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
File: 8iz473at_fLPnv7b7BITSIY1b00.cer (raw, json)
Hash identifier: jJCY2iVQui1CBHoTAKYxONKmAS+r4V/a72jMrnLY2wk=
Subject key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66E1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Jun 2025 04:49:22 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.184.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26337 (0x66e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 23 04:49:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:85:66:2a:a8:62:11:d5:93:a7:eb:82:36:
94:db:3b:44:99:f7:20:f2:fd:f4:84:6e:61:21:d0:
ee:1b:19:ce:9c:84:b0:27:9e:95:20:83:2c:7d:78:
e7:52:7c:95:d8:55:a0:06:25:3c:26:ae:2a:d5:ae:
81:dd:c5:39:0b:2c:76:51:00:1d:fb:2e:83:7f:80:
80:aa:dc:f8:f6:9b:d5:f9:55:a5:80:bb:ec:75:3a:
44:05:90:1a:28:84:05:76:34:c7:ca:68:39:9d:3e:
6b:35:6d:4a:33:30:ce:e3:c2:93:a5:05:ce:08:29:
c3:93:b0:ac:41:9c:64:1f:ce:56:7a:c2:e9:4c:9e:
f8:b5:69:9a:bb:64:ca:c0:fd:70:69:1a:8f:3c:4f:
8e:a6:4a:76:49:35:0e:2e:26:ca:39:a8:bb:96:a3:
ab:a4:75:77:cf:df:51:7a:44:1f:aa:15:e1:15:b7:
4f:0a:53:10:49:15:6f:56:be:35:bb:54:49:67:a0:
1a:3f:12:b6:79:2d:a2:67:c4:4f:57:3e:d0:dd:07:
66:6e:94:47:9e:d4:11:9a:fc:32:61:ef:b0:14:44:
2f:21:dd:25:3e:11:71:19:b3:38:a6:67:3b:9e:59:
30:0c:d0:21:92:e6:64:2d:2a:ba:60:c5:71:67:04:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.184.0/23
Signature Algorithm: sha256WithRSAEncryption
12:ec:7d:ef:a7:03:c1:3e:b6:a2:18:44:6f:c4:fe:07:f2:c4:
2e:b9:04:0b:af:ec:7f:b6:da:12:9c:c6:c4:6f:16:2c:fe:ba:
47:14:ff:9e:3b:b3:e8:7e:73:06:3e:33:9d:ec:4e:99:7d:fb:
c8:6b:b0:42:5b:2c:a1:5b:26:8b:39:8f:7a:97:a5:d6:c9:8f:
0e:f3:f6:8f:83:44:32:d4:ed:56:f1:46:ef:81:40:27:ee:70:
e5:8d:c6:4b:a8:38:1b:e2:af:ba:f4:d3:42:aa:08:5e:e9:e2:
f8:f5:a1:48:b7:54:f6:b6:d8:a0:05:aa:28:bd:7b:26:40:1f:
2b:75:ba:78:94:76:1b:37:45:1a:26:60:e5:8f:da:7b:85:5d:
b4:78:b5:a4:af:a1:0b:fe:c5:d1:2c:e5:bf:b3:af:d7:e6:20:
14:e8:7a:83:a6:8b:e2:80:49:75:96:d2:64:b9:8b:a9:6f:1f:
a2:7e:2c:9e:4a:a2:fc:eb:81:04:e5:28:f5:56:d7:cf:6c:5f:
0d:2d:c5:b2:0c:86:6b:bb:8c:1f:20:92:48:38:40:b5:72:66:
81:23:5e:da:20:44:c1:75:dd:98:bf:40:05:ea:42:33:e7:76:
89:e6:77:5c:86:20:32:a3:bd:4c:b8:a4:04:4a:a5:13:8f:b3:
48:57:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:18:34 2025 by rpki-client