Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
File: P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer (raw, json)
Hash identifier: aCrMxBoqxRajsLKBfQ20zYPMID2KYiKFu9KvoGWGbqQ=
Subject key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 65DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
caRepository: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Fri 30 May 2025 20:25:31 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.124.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26074 (0x65da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 30 20:25:31 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:4c:7d:36:4b:dd:54:1b:b3:79:85:55:b9:
75:53:57:68:01:c7:77:0d:34:54:b2:de:ba:e5:f8:
66:a0:c4:f4:7f:c4:17:e3:69:94:1b:76:fb:8b:a8:
86:49:89:3b:3e:d2:c3:38:6f:96:24:ff:58:01:67:
a5:7c:b3:71:95:6f:16:1e:ef:8c:67:14:7f:94:2e:
0d:a7:e2:be:c1:50:5a:7e:df:c0:f3:4f:79:45:b3:
99:ec:bc:ac:6f:d2:e5:c1:f1:8e:07:99:fe:d6:4b:
7b:f6:1a:35:da:27:28:0c:30:06:e6:f2:b1:64:63:
45:7f:e5:d9:aa:a5:d9:93:77:89:91:51:d6:ff:52:
32:e2:74:41:0c:76:a5:ac:9a:ec:06:17:e5:4e:e3:
99:70:de:f0:1e:cf:9f:d0:34:68:3b:84:a2:d5:8d:
b6:88:a6:dc:9c:c9:04:44:52:96:5c:11:ea:d3:7f:
c3:66:5d:97:f5:7d:8c:3f:16:87:9d:b1:d3:bf:7b:
eb:92:11:94:ec:bd:46:92:fb:a3:87:0b:67:0f:e6:
91:4b:1e:a8:2f:13:0c:18:be:15:bc:95:8d:a8:30:
57:b2:27:84:59:6e:3f:53:e8:26:18:7e:f5:84:9d:
a6:12:5e:16:50:f8:8b:88:e9:a5:fc:3a:1b:5d:be:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f5:28:bc:de:03:2c:36:10:07:70:cd:14:2b:3c:44:bf:9f:
ba:de:a6:7b:a8:82:66:c1:3e:e2:e3:5f:d5:db:c8:dc:07:97:
e0:0c:1f:cd:33:b5:70:bf:e0:6e:38:e1:bf:cc:12:a6:19:68:
3c:bf:b2:57:1a:db:59:50:72:c0:ad:e6:8c:3c:28:0b:ca:ce:
53:c9:b6:1e:2d:dd:0b:d0:64:03:81:e1:43:e0:15:63:de:00:
1a:00:2a:5d:8d:32:d6:16:dd:a2:29:b4:fd:6d:3b:67:71:0a:
04:d9:5c:2f:bc:6a:2c:5a:33:72:c8:ca:ef:30:79:5c:b9:33:
d8:dd:b3:26:5e:d9:48:c3:59:c5:bc:58:fb:08:af:ca:8a:14:
7d:74:e7:cd:e6:aa:ed:67:20:a2:ae:57:7f:72:e1:9d:c9:3c:
84:0d:aa:9c:60:55:9a:39:9c:cd:b5:f1:06:60:72:c4:dc:80:
be:e9:8b:d5:af:9e:b4:00:e9:e7:db:8f:78:12:41:73:34:32:
32:eb:8d:e1:7b:de:4e:54:f5:48:e9:db:2a:b5:2b:4f:fb:c9:
34:ef:cc:f0:dd:5f:b8:33:a3:43:2d:8e:f9:ef:39:fb:bb:94:
96:d4:35:aa:58:63:59:21:fa:48:f3:ed:00:f0:48:4f:ae:87:
f7:c2:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:24:46 2025 by rpki-client