Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
File: Z38M1kpd4sGwKO0APFaHS0j6LiE.cer (raw, json)
Hash identifier: al4VcBBbiCzwDwNGNTNZzMG2TQTanCKoT2uHRcAphAc=
Subject key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 69DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Aug 2025 11:45:31 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.50.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27098 (0x69da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 15 11:45:31 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:77:45:91:02:0e:61:ee:ff:2b:c8:2a:7b:
3d:8e:1c:86:f6:0e:8a:4f:4d:89:bd:92:21:9b:73:
c3:53:8c:c2:ff:0b:32:ab:8c:b3:88:9c:b8:03:99:
b8:0e:dc:25:3c:a0:b2:64:3c:50:6c:b7:ad:3c:27:
c7:b0:9c:94:2c:59:c9:dc:da:36:9b:0d:c8:6d:18:
b5:54:06:73:d4:25:11:be:97:87:1e:40:2f:b3:be:
73:0e:ee:07:8b:71:34:50:41:8d:f1:f3:d0:e7:8b:
9b:6a:2b:a6:b7:d6:3c:24:6c:ac:8f:dc:df:05:10:
bf:e1:b1:0f:94:9a:b3:ed:40:e9:bb:81:be:c1:d9:
f1:63:7f:fa:91:3f:db:bd:8c:8f:c8:84:9a:c1:9b:
b4:5c:bb:d0:4e:9c:0f:96:fb:e9:fe:04:43:d7:62:
69:fa:ae:20:a8:61:69:63:e1:28:58:0b:fe:9d:d8:
79:37:42:f8:fb:25:c9:88:04:38:51:53:4f:9d:75:
e5:74:0b:f3:1f:a8:86:a8:25:18:d1:b1:6c:49:1d:
6a:ca:b0:82:ac:4e:7b:c3:99:18:17:a0:98:a0:35:
4d:58:2d:80:9d:80:af:de:5d:2c:90:75:4f:5b:2a:
b4:bd:3a:c8:18:58:97:c8:f9:c0:15:99:48:e9:2e:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.50.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:8d:a3:9d:0f:67:aa:c1:a7:c6:06:2f:9c:fa:06:12:c4:9a:
7a:74:bf:cf:2e:bd:51:c2:dd:e2:41:65:8a:9d:12:6b:f7:19:
b3:89:3c:0b:1b:aa:79:b6:fc:57:f8:54:b2:78:8d:f4:10:0a:
92:a9:90:ac:f0:5e:1c:54:b7:e1:37:93:1b:9c:12:b9:b7:de:
09:50:ea:1c:84:61:fc:17:fc:dc:92:96:fa:16:39:f4:61:6c:
76:cd:f1:11:32:41:23:0e:7d:b9:db:b2:dc:90:e5:a9:6f:c6:
04:e7:c1:20:86:e5:68:20:c8:e2:89:a6:8c:7a:52:77:dd:7a:
dc:c9:af:88:eb:9f:17:44:85:f5:eb:01:0d:a0:a2:5d:64:b9:
57:0e:56:dc:f1:13:29:81:ac:68:17:67:56:6b:35:56:3c:67:
98:79:31:9d:0e:d9:86:1e:8f:e8:7f:60:4a:15:83:1c:c5:45:
f6:55:85:91:c4:c6:c6:4f:b2:c9:e2:61:ff:7b:c4:10:a2:6b:
5c:3d:41:0a:2e:e1:5c:88:50:8f:4b:b0:37:b6:c7:ec:9a:18:
e4:85:51:97:31:6d:38:3e:b2:58:48:9f:00:11:c5:27:c0:f8:
a2:49:13:c5:4b:f3:d0:b7:b4:23:8b:44:14:8e:bb:a5:43:5d:
e1:fe:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:09:06 2025 by rpki-client