Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
File: WKIeeyP68huJ00Jw61b3RJwjmYY.cer (raw, json)
Hash identifier: o//92/hN40/vtCMNTjSSN8Sm5LbfP6lLalXlN+QPvOM=
Subject key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66F0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Jun 2025 02:47:14 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.58.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26352 (0x66f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 24 02:47:14 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:ae:f4:cd:6a:17:9e:ff:21:2b:83:fd:5f:
3b:75:e8:98:9c:04:8d:c8:4a:14:7b:37:32:eb:77:
e0:0b:b0:0d:63:59:d4:82:2b:97:40:d4:cb:b9:ec:
23:6e:81:2c:de:78:49:b5:7e:d7:26:0b:f9:a4:5f:
2c:66:1d:e5:2f:46:81:96:30:73:21:54:c5:a2:17:
6a:73:5e:80:61:39:6a:96:9c:e2:04:12:06:88:5d:
b0:c9:3b:eb:9d:81:59:8f:59:16:5f:4f:cc:b1:a3:
75:b7:ab:5e:32:a1:ee:65:7c:ae:30:a7:f9:c1:57:
f8:f2:43:5b:fe:7d:d2:66:12:c0:f9:bf:83:4e:cd:
8b:58:9f:bd:8a:9b:d4:6c:a0:a0:1e:db:18:5e:8e:
bf:e5:08:43:fd:89:80:fe:1c:c1:58:18:dc:74:33:
53:f8:19:22:d2:c1:c3:13:fa:97:a6:0c:8d:24:1e:
cb:ad:cb:e5:d9:f4:b4:11:bc:9e:23:d4:da:3d:da:
07:8c:c4:1b:d7:ef:4a:a3:66:9e:a2:0a:96:7f:36:
2d:cc:33:d1:de:74:29:1e:a7:de:55:c1:1b:6a:ba:
0b:84:b1:a4:e8:fb:2d:7a:a9:b3:de:3c:10:5d:8d:
3b:cd:d0:d8:78:d3:0d:fe:9a:39:59:85:79:aa:2f:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:54:f2:75:38:e0:29:1c:10:94:28:8f:5c:5b:a6:d0:16:51:
34:44:c2:89:08:44:0e:6f:76:02:03:1c:3e:c9:5c:f9:fb:6f:
50:6f:a7:f7:22:21:8e:68:e5:e3:38:18:f8:0d:23:40:e6:5f:
f5:7c:3e:d8:13:f0:9e:97:40:60:80:fa:a8:e3:27:e8:d4:fb:
5d:36:64:3d:f7:7e:dd:f6:16:dd:a2:51:c9:c8:26:02:25:6e:
7c:91:ee:fd:0b:21:4d:eb:64:94:34:e4:e6:5f:17:fe:de:3f:
0e:4f:7e:4a:dc:e2:d0:ee:83:7b:6f:ba:de:a2:61:7e:b7:88:
04:00:aa:dc:c5:e1:97:98:f9:ba:d1:f8:dc:cb:0e:cc:47:73:
df:96:b2:98:f8:44:22:0e:0d:19:69:6c:71:2e:81:a5:b1:99:
ff:10:bf:09:f7:f3:3a:bd:02:2e:fd:8a:88:06:13:58:3f:07:
2b:4f:bc:7a:62:d2:34:05:40:89:3f:98:e0:b3:df:16:84:48:
77:e8:f9:5f:bd:38:cb:29:0f:2e:5d:ab:19:c3:a9:af:1e:b3:
ce:39:dc:ba:cd:33:0d:80:4a:32:a6:d0:00:a7:bc:70:bb:89:
6a:df:16:09:0a:19:cd:a5:cf:de:68:e6:eb:34:f5:eb:4f:58:
17:22:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:38:18 2025 by rpki-client