Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer (raw, json)
Hash identifier: 2l8ragzslgh6vLq31QE9V8GeYuy7A1MD3GTWB4uP1LE=
Subject key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 69F9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 Aug 2025 06:27:23 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27129 (0x69f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 19 06:27:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:cf:36:85:8c:56:f5:fd:9c:ed:e6:51:e5:
ab:24:8c:29:8d:98:be:39:b7:13:27:d9:a5:3f:f0:
2f:fe:fb:93:df:34:50:37:b1:2e:92:e6:58:bb:e7:
16:e2:17:d1:75:a3:49:03:5f:8a:75:61:93:54:d4:
3a:e0:68:ec:47:63:6c:57:15:89:36:dc:ea:41:b0:
1a:7b:d9:fa:c5:90:73:3f:64:cb:1d:e2:65:45:a3:
83:78:59:e7:1b:7b:e2:79:96:3d:70:4b:f8:43:00:
5a:0a:dd:71:e9:63:dd:63:83:f0:4d:83:92:2c:82:
76:f5:b8:7c:a4:be:71:f5:9b:60:8d:fc:6c:82:6f:
c5:8b:a3:16:b8:d0:c9:1c:c6:79:78:53:69:cb:9e:
78:6f:c8:2b:95:22:51:00:0a:43:58:30:92:46:e3:
5a:86:5b:8d:69:88:d6:b1:7a:9b:47:35:e1:52:63:
7b:22:5f:8f:3c:4b:12:3a:c8:f3:71:bc:4a:18:fd:
75:36:17:b0:fa:c4:ae:48:33:c5:00:e6:65:1f:db:
f4:d2:4d:a1:e3:0e:0e:6a:50:f3:ee:4a:31:90:64:
21:b2:f8:d0:d5:6d:6e:d3:0b:51:e7:43:3f:82:ee:
e8:a1:09:1d:b6:e1:49:bb:fc:62:cd:16:68:f1:c4:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.128.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:5d:46:7b:46:64:7c:b2:8d:58:9a:9a:2a:b5:db:c9:60:ad:
8d:94:be:b2:8b:6c:13:12:81:4b:c4:e6:1f:5d:94:90:12:44:
20:7a:ee:c5:31:b3:3c:55:43:d9:fa:a4:28:c1:23:ac:b8:73:
95:1e:c2:96:c9:e0:7f:5c:b7:d3:6e:32:b1:d8:3b:07:3d:84:
c2:10:63:4c:ce:f4:35:84:36:79:99:71:f8:4e:89:82:d6:22:
9a:53:13:4b:50:83:39:7d:3c:0d:cd:db:1c:a9:2d:25:57:55:
97:70:b7:22:c4:43:ea:66:ce:a2:cf:19:e1:43:b6:80:00:e4:
3a:1c:e9:f4:bd:3f:24:c5:82:d4:f5:d4:80:87:d4:5f:9d:cb:
44:23:01:15:73:c7:95:d8:18:cd:1f:d7:65:60:d6:6e:2c:94:
28:75:05:b2:48:4f:31:bf:ce:59:03:f7:3c:a3:48:0e:aa:38:
8d:e2:d7:d8:96:ca:0a:bf:f1:af:29:b8:b4:85:b1:29:6f:cb:
fe:4e:e5:40:80:6c:f4:e2:bf:3f:df:03:e8:0d:a1:f5:e0:2f:
23:1d:40:1d:e0:30:a8:97:84:ae:41:72:74:e2:5d:f9:20:11:
ad:08:ea:13:ea:c3:89:f1:98:6b:f9:d3:6b:7f:bd:e7:a0:f6:
07:7f:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:22 2025 by rpki-client