Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
File: NU4yud4OVpoZUal7kyAZ9oijUKw.cer (raw, json)
Hash identifier: rI/JyLpgw0IuGFQT56mEmiHd7C4ZTicyVxCigl0QDH4=
Subject key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 21 Jun 2025 01:02:04 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 65.181.104.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26326 (0x66d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 21 01:02:04 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b5:ee:34:5a:28:11:5a:5c:67:7c:ae:b9:81:
f7:a0:72:b8:72:00:ef:a1:af:84:4f:6a:a7:9b:a7:
59:e3:9b:ac:b4:96:0c:91:db:83:b7:35:c0:28:92:
9d:a6:96:81:49:f4:13:8b:e5:69:1e:57:78:ab:ab:
23:80:93:08:da:20:9a:cb:0b:30:8b:8f:74:81:15:
6e:5c:6f:ad:71:f8:e4:65:90:bb:b3:09:44:0e:0a:
d2:89:b2:f9:ba:bf:1a:c6:37:6b:05:a4:f2:2b:94:
b1:74:85:39:b1:f8:1d:79:39:9a:23:c0:25:18:80:
75:a5:ea:6a:65:dd:4c:48:e5:22:7d:1b:21:b5:2b:
30:dd:f6:e4:b4:8e:f9:86:ce:ec:50:fd:c2:fb:7d:
81:4f:7c:1a:3d:93:9c:45:b0:d3:0e:90:e1:2c:a7:
ce:c4:77:30:74:50:aa:62:9b:2b:41:5a:60:39:21:
14:01:93:f4:40:2d:a7:19:f3:55:13:af:22:0c:d4:
36:c8:6c:6c:b5:60:cc:5c:68:27:5f:7f:35:c3:c1:
67:ce:d8:32:ee:6b:49:71:29:f7:a9:e3:56:4b:c9:
cd:13:e5:67:41:d8:81:6a:4d:bb:e9:c5:70:7f:95:
f1:41:64:17:cb:cb:fb:22:dc:24:22:37:5c:19:36:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
65.181.104.0/22
Signature Algorithm: sha256WithRSAEncryption
89:ff:47:af:bb:4a:69:c5:82:45:5f:5d:fa:75:36:2f:ce:8f:
7b:74:96:37:5f:d6:3f:48:c4:b6:17:79:68:e9:f1:ff:e4:11:
dc:66:c1:27:ec:50:5c:c2:d3:4d:70:5b:8b:24:08:1d:54:10:
d4:30:0b:82:ae:ad:8b:95:4d:b6:cf:01:7a:97:40:20:59:f3:
dc:f9:db:e3:df:1e:f3:af:2e:e4:d8:6d:fa:0c:26:87:1e:77:
3e:3a:ad:f4:a7:60:8d:cf:0c:96:d5:55:8a:e1:1c:b9:7b:c9:
43:c8:6b:9a:6d:f7:fc:41:23:9e:13:19:56:58:e5:6d:f3:a2:
b9:55:47:03:6d:1c:59:dd:f9:db:ae:44:b3:d4:40:2a:2a:e0:
7d:81:4b:fe:ca:e6:b1:21:89:20:61:4c:e6:31:10:59:8a:94:
1f:4b:4f:9e:6a:62:82:3e:f2:ff:d7:ba:99:aa:e0:69:03:87:
c2:8a:a1:ab:58:ac:13:15:7a:c2:3a:eb:21:33:5f:ba:8d:c4:
c7:90:d7:73:b0:2e:83:1e:03:e2:9a:4c:4b:29:8d:a7:fb:61:
93:4a:87:c8:1d:b1:eb:9f:17:26:76:cf:c4:ed:c9:e2:8c:62:
6a:ad:4b:73:52:8c:28:64:70:1e:a7:fd:97:43:3a:89:20:93:
84:dd:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:39:45 2025 by rpki-client