Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
File: HWGssMZyy01A7T6U08CbIMdFJa4.cer (raw, json)
Hash identifier: iUs1rGLHhPigHsxoibFMmF5MQ0zxPZ7jv8rtoIQYm6A=
Subject key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 670C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Jun 2025 17:47:08 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 167.179.196.0 -- 167.179.198.255
IP: 167.179.208.0/24
IP: 167.179.210.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26380 (0x670c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 25 17:47:08 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:4d:b2:59:e8:71:b9:5c:75:c1:44:a1:d2:
21:0d:26:4b:fb:e9:e5:ab:dd:68:19:eb:83:d5:2b:
16:05:b8:c4:fe:00:82:c8:9b:0c:fe:63:5f:4d:9a:
f5:4d:ad:0a:8d:98:81:33:e0:6f:82:8c:b9:41:66:
15:10:33:2c:62:00:bf:60:8e:d3:15:76:5d:72:b3:
44:7e:bf:05:0f:4c:9d:eb:31:ad:a4:f8:3d:fd:cc:
7f:5e:7c:af:47:2f:fe:0a:30:15:3d:da:2b:ad:af:
34:7d:4e:f8:f9:11:c1:5c:0b:49:04:8c:ac:57:75:
8e:68:c6:7b:a7:4c:c8:6c:b9:75:ce:66:9d:d0:33:
19:d3:b3:f1:48:d1:b5:c1:8c:ad:1a:8b:97:37:a1:
5e:35:bf:8d:bd:a0:86:2d:aa:7d:2a:91:0d:3c:7d:
90:8a:06:2b:73:d2:4c:91:1d:b3:d0:eb:08:bd:36:
f7:df:d7:ed:b6:38:85:3d:f3:ef:ca:5a:b8:db:d5:
f1:d7:64:10:61:f0:fb:6f:5c:bd:e1:72:fb:2b:22:
61:13:44:23:cc:85:23:91:03:87:0b:25:d9:15:95:
a9:26:b7:88:58:9c:f0:1d:81:00:e6:6a:ea:ae:d8:
4a:82:5c:e9:14:71:cf:b2:93:76:39:98:a6:b0:5d:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.196.0-167.179.198.255
167.179.208.0/24
167.179.210.0/24
Signature Algorithm: sha256WithRSAEncryption
39:46:9c:a6:c1:cb:e8:15:82:a4:6c:55:73:44:ef:8d:f4:d3:
2f:f3:e6:ac:d9:61:5b:f4:4a:dd:9c:19:83:9d:d9:41:8d:95:
af:35:68:b3:43:3c:c5:cd:8a:f4:b6:0b:c1:f0:4e:a4:49:4b:
a0:48:b7:af:bd:d8:b9:b1:d8:31:bc:39:7e:80:ea:c0:d4:c8:
a5:cc:ee:7f:44:01:99:f5:80:35:e5:0b:f7:4e:2e:64:14:d0:
08:b5:c9:31:10:c3:8b:84:d5:04:91:ed:3f:7d:4f:48:ee:10:
97:91:34:d7:a8:06:fe:73:00:dc:d4:af:2b:8a:a8:3f:12:fd:
aa:c9:e2:d1:5b:ca:46:20:32:88:78:0f:6a:4c:81:10:d3:ac:
64:cb:52:51:34:f6:cf:b4:41:14:9f:27:b9:99:18:1f:34:64:
89:b3:d1:0f:ba:71:15:b1:1b:5f:f8:aa:93:32:1a:f4:1e:10:
d8:4e:0a:80:09:7d:8b:ea:c9:72:db:32:15:a8:9c:56:c9:0b:
98:cb:6d:b3:95:55:1e:70:36:2b:ca:87:25:cb:e2:e2:bb:6e:
f0:8a:e8:79:8b:18:d9:1f:86:6c:be:5b:b5:5a:42:83:ab:81:
38:f8:fd:9f:07:54:82:59:28:82:34:3c:1d:ab:3a:16:74:40:
30:9a:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:27:13 2025 by rpki-client