Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
File: F4AJbMkKtq6vCNeasYxUx7d6U6A.cer (raw, json)
Hash identifier: 6VgPwWyqOe5+ykJ2tJ6ENWNEYqNt0XWGAcHpuCoM6o4=
Subject key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6740
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Jun 2025 21:02:48 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.141.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26432 (0x6740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 30 21:02:48 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:b4:12:d7:1c:4c:e1:6c:8a:c3:b1:89:56:
39:33:0f:09:35:cc:a0:07:74:97:1d:2b:1e:b9:5d:
c6:87:65:7c:bc:70:f8:88:59:a8:cc:4c:35:2e:7c:
2b:df:87:f5:98:18:4c:94:06:92:56:40:f7:63:f6:
ce:d2:fe:ec:c4:b6:57:e2:5f:d3:82:a2:cc:fb:b4:
72:eb:72:20:50:78:60:59:2c:d2:48:15:f6:3f:4d:
ef:c9:3e:1f:4a:5f:f5:00:b7:06:c0:fe:52:51:58:
03:66:3e:0b:84:ea:d8:3a:c4:f8:25:b6:ac:91:2e:
54:6e:55:26:44:73:a4:8f:7b:1f:f6:a0:3d:0c:d8:
a8:64:52:6d:c1:82:f6:91:6a:8c:d9:6a:c0:7d:32:
b7:94:ee:fe:bd:44:b6:b4:4e:6f:38:2b:f9:6b:d4:
38:11:7f:85:1e:f3:a7:63:af:9f:94:2a:21:30:66:
9e:d7:7b:03:5e:34:e3:ec:7a:c0:d0:c9:9c:3e:51:
e4:99:16:fa:73:96:a3:45:f7:89:ee:df:bd:31:17:
43:a0:96:7b:96:2c:49:0b:80:fe:27:64:ba:f8:89:
95:b6:04:37:6f:9e:64:15:eb:49:e4:cc:57:3f:fb:
d4:af:7f:e8:e5:48:b7:20:a1:51:7e:fa:eb:48:05:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.141.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c3:3b:17:b2:1e:4b:86:03:07:a3:5d:64:8e:f6:e8:92:b3:
85:c1:95:b6:23:64:90:80:12:1e:7a:cf:58:2c:8f:6e:bf:9a:
f6:ce:9a:13:9e:e7:0c:ca:b8:94:ee:c8:b5:81:11:98:ef:e8:
e4:4c:e2:71:e2:bf:ff:2f:43:a9:a5:9c:73:81:81:a2:4f:3b:
6d:80:da:88:ab:55:72:80:c3:d6:44:89:bd:17:e8:5f:55:f9:
d0:63:73:af:dd:05:ca:e4:52:50:bc:45:50:bf:18:53:bf:71:
dd:fb:40:9c:b7:8d:d4:a6:aa:ef:2b:aa:55:53:74:f5:a3:d8:
72:7e:8d:f7:a6:51:cf:c1:fa:88:45:dd:90:d3:24:66:f1:d9:
bc:98:14:5f:5e:55:0e:49:2c:32:7e:15:22:b8:5e:7f:5d:5f:
32:0d:3c:87:fd:dd:0e:cb:fe:3a:1a:80:4d:59:55:a5:27:4c:
35:80:eb:62:a9:22:28:17:f3:ac:bf:2b:25:05:0c:03:73:c0:
20:d7:a7:1c:85:1a:40:58:d6:b3:d0:f9:c6:c9:d5:cf:3d:98:
d4:62:dd:03:e3:cd:5a:74:ed:64:17:fd:08:6b:d3:d6:34:46:
4e:61:3e:b9:50:9f:58:15:fe:4c:50:2a:36:b7:99:90:69:86:
15:c8:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:39:33 2025 by rpki-client