Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
File: ISgYkHWJssqEa0nRCd0zrJ4utUM.cer (raw, json)
Hash identifier: 2Rqw9ssHAvYSdJ01Cwo0EF5xY/VQ7DkfSDtlH7h5xCo=
Subject key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6720
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Jun 2025 10:24:32 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.54.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26400 (0x6720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 27 10:24:32 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:4e:f4:19:e4:dc:64:4d:d8:96:58:7c:66:
4f:fa:65:a8:4e:88:e4:b0:8e:e8:6a:1d:13:51:72:
64:05:4f:6d:8b:ca:36:a5:e5:c0:dc:a9:b3:ef:bc:
d7:1a:71:fb:4d:d1:8f:c5:66:1c:86:c6:1c:84:5c:
2c:de:82:df:23:1e:13:61:f5:15:9a:f2:aa:1a:c3:
41:ae:55:60:bb:4c:1e:00:56:d1:51:4d:a5:0b:2b:
ef:19:05:77:64:80:aa:6b:a9:52:15:60:8e:51:7c:
ca:61:26:47:8f:93:65:82:33:b0:e6:17:53:b8:b6:
02:44:e8:a9:8a:bc:d1:47:8b:a2:d1:92:82:3c:16:
4a:0d:08:54:e3:b7:ee:b1:76:44:5a:cd:fd:b3:ba:
39:76:9f:08:bf:3c:17:0d:97:d0:6a:e8:7f:4d:82:
7c:ee:e5:37:ce:d9:58:19:88:b6:03:b4:77:5d:cc:
c0:58:9d:ee:94:83:1c:45:af:2e:0c:c3:dc:98:0d:
c2:81:80:e6:0c:62:2b:df:6d:74:3e:be:b3:e7:5f:
26:59:a1:2f:d5:bc:d8:62:15:d2:ec:7b:e4:c2:43:
20:6e:b8:8a:22:cf:97:f9:e6:59:ec:8c:21:d6:1a:
e0:10:03:41:19:5a:e0:1f:b1:ee:84:d6:75:3e:59:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:d0:47:32:4b:71:6d:0f:54:65:27:65:8c:e4:ea:2f:58:1b:
e2:a7:8b:17:9b:c0:2b:d9:0d:1b:36:c6:e6:7f:54:d8:f5:e3:
85:dd:a5:a8:4c:a0:1f:89:f0:30:98:01:5d:9b:b6:e0:75:2c:
50:23:a3:16:b9:d4:c9:db:e2:95:52:6a:6c:ea:da:c6:42:fa:
ff:9d:f7:21:2f:d0:da:4a:85:4c:07:89:43:01:3f:84:d2:d3:
0d:b0:bf:87:5b:ea:81:cd:d7:c4:83:e1:da:7d:a3:cb:91:13:
45:6b:3e:c7:79:ce:68:ce:25:72:1d:83:79:c4:5f:63:e1:e8:
52:90:64:bd:cc:5a:74:a3:f5:0e:c0:bc:2d:63:0c:6e:eb:58:
71:f3:a8:1c:12:33:69:c4:c8:07:61:53:d1:55:85:96:8b:98:
0f:43:dd:f2:43:58:78:98:71:a5:9f:f2:b5:ef:fe:18:4a:39:
c1:dd:66:e6:3f:6a:96:7a:72:c8:fc:21:d6:3d:13:1b:26:ef:
49:22:4b:87:90:1b:b7:a8:1c:8e:c1:8e:06:29:1d:8c:78:70:
8c:a2:19:a9:ab:fa:18:66:92:4d:c3:b8:aa:e0:cb:7b:d0:88:
1d:69:19:69:63:88:bb:68:82:a5:63:e7:73:8a:98:48:b8:d2:
23:28:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:03:12 2025 by rpki-client