Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
File: PLSpAEGL6dzcXgSgumKoTahf5uA.cer (raw, json)
Hash identifier: 4uiGO7WR9aiLj+VdS99mv2YF1isegOe9i0GGlO+Dwxg=
Subject key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Jun 2025 19:12:01 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26323 (0x66d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 20 19:12:01 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:aa:78:d0:ec:b4:86:94:2a:49:f9:47:b3:
e9:9d:1e:cb:1d:14:ee:b7:36:e4:8e:1a:60:d9:9e:
48:04:15:93:11:63:24:75:ea:7f:1f:72:c3:7c:ca:
94:19:ee:6f:26:3c:94:af:0a:c1:d6:cf:13:10:49:
41:8a:b8:93:72:bd:e5:0d:84:17:12:20:de:6e:bc:
f8:60:3b:08:cd:51:67:c1:cc:a5:cb:de:34:29:32:
f9:51:3d:8d:72:8d:27:a5:5e:bc:8b:1e:d5:79:66:
77:39:9e:21:56:d2:65:e8:57:b1:29:97:fd:76:bd:
2b:f3:2f:ad:a0:9c:dd:c4:19:0e:74:84:57:02:81:
bf:38:3e:86:0a:85:c9:2e:39:54:26:d8:21:69:a4:
56:42:51:e6:f3:78:0f:c1:99:13:ed:e2:89:1b:75:
a2:a2:09:67:1d:b0:8c:e1:31:ea:c2:e3:f1:61:db:
60:36:8d:09:a5:dc:ad:60:3f:b1:bb:c8:c6:c1:ed:
8a:ca:cd:b5:4b:b2:7b:31:ab:a6:4c:4b:66:1f:8e:
3d:57:50:f9:87:5c:cd:31:07:80:ad:b8:1b:60:ba:
ca:75:a3:09:4b:f0:84:1b:17:8f:25:70:63:be:f7:
b5:49:25:33:f2:bf:41:9f:3f:f7:1a:a2:70:f6:02:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.178.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:70:d1:2a:d6:d9:37:3e:7f:b7:e0:b2:ca:ab:f0:a2:f0:3f:
28:f7:88:4c:ad:80:52:4d:c9:42:8a:2c:13:28:07:83:14:b4:
71:e8:ad:3f:05:f5:a2:61:c6:74:d2:a2:0a:68:67:38:21:eb:
87:d8:9c:5c:26:39:f5:66:6d:bf:29:4e:2a:91:47:46:69:24:
a5:09:80:7b:81:e1:0e:e5:ea:06:30:dc:23:77:07:17:69:2c:
4a:5f:5e:5f:b8:17:8b:77:28:ce:fc:ef:af:dd:33:71:b8:40:
ca:68:fa:df:00:27:9b:fe:68:2d:18:8f:72:19:ae:f2:d1:0d:
b6:eb:79:d3:f0:db:21:99:c3:25:06:c9:25:b3:de:b6:27:1e:
ee:b4:94:aa:44:7e:46:c7:95:41:25:f0:5a:4d:ca:04:f4:a0:
4d:bc:c7:ea:90:12:d1:b1:44:bc:39:f4:55:54:fc:88:62:a2:
29:e4:33:8a:14:a9:9b:e6:c5:9d:c2:ee:5b:29:e5:de:a8:c8:
3e:26:71:da:80:51:d7:6c:aa:7a:90:ab:10:12:b9:ff:0e:1f:
65:94:64:bf:78:d7:ec:fc:48:06:74:f6:68:f6:44:25:ed:f7:
db:ab:61:c9:3f:51:62:4f:f5:98:c9:f3:c7:34:41:5b:e2:91:
65:8a:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:23:14 2025 by rpki-client