Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer
File: cgqmbzbBRgrUvDrGkvlltxdKWOA.cer (raw, json)
Hash identifier: 5jocL+C59yZZNpHP6e/MAzSolSAWYHIlkqrc8LfaPlI=
Subject key identifier: 72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 66F7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Jun 2025 09:54:30 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.64.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26359 (0x66f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 24 09:54:30 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91B4053, serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:bf:b6:3a:5e:62:7a:31:13:d6:43:35:69:
23:73:0a:7e:43:c5:a9:c8:1f:b0:91:aa:43:10:54:
83:b7:c4:cf:ff:28:86:4f:41:92:11:95:84:ec:04:
f7:be:a2:46:bd:c7:38:50:a1:d7:73:86:f8:9b:5a:
53:c7:c0:36:2b:a2:a1:bf:10:72:99:50:f2:30:9c:
ea:b0:7f:c5:1c:af:3b:6a:78:ec:d4:7e:c6:46:3a:
ca:7d:d5:0e:31:de:9a:fa:33:e1:ae:d9:ba:8d:0c:
5b:bc:a8:f3:8c:1f:f2:ce:2b:8b:02:ac:a8:4e:12:
f3:e0:6b:fe:07:ad:72:a4:13:45:96:6c:bf:19:e2:
8e:a3:2a:05:b6:32:82:0d:94:f8:cc:0f:41:7a:24:
22:30:b6:97:b1:e4:84:1f:4f:89:62:b5:56:d2:54:
09:f3:47:8b:75:ca:7c:ee:35:b3:56:6f:fb:ee:16:
27:42:94:91:6e:79:d9:39:1a:53:ea:cc:9b:16:ad:
58:b7:3a:9c:b6:4b:94:f0:fb:59:3a:25:8e:85:a8:
70:e7:94:95:ac:e9:8e:52:31:cd:27:19:db:91:d0:
b5:f7:e4:6b:1f:09:68:e4:e4:27:df:d6:da:2a:34:
88:80:bb:f3:41:28:ff:f4:f2:d7:e9:17:c6:b2:f0:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.64.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:88:c1:20:e0:80:85:6f:4e:94:ce:8e:d2:02:16:84:c1:01:
4c:14:7b:32:94:85:b1:32:9c:83:f2:80:42:d1:9f:6f:24:22:
27:70:50:ea:94:b7:a0:93:6f:2d:5d:4a:39:28:20:51:bc:76:
ab:60:7e:96:de:9f:c7:5e:c3:39:9d:ca:f1:ad:31:80:16:a6:
ba:65:04:7e:4e:21:01:32:4c:04:49:31:cc:dd:22:b3:4e:06:
11:f1:be:e9:90:40:6c:fd:04:38:6a:0c:f0:5d:7f:a3:22:86:
e2:b3:ef:54:a0:d6:56:b7:78:14:a3:f2:37:e5:91:93:10:72:
8e:6e:99:0c:31:c2:b5:e1:f9:fd:f2:4d:c6:f0:84:d7:de:7c:
1a:da:ac:e0:00:f8:85:db:56:cc:a1:14:a3:f8:35:b9:8c:8a:
84:eb:dc:39:a8:bf:91:c4:bb:b5:33:f9:e2:af:4d:2e:cd:a3:
58:90:c4:87:fb:c4:76:d8:91:4d:eb:48:6b:ef:ee:06:47:7f:
62:0e:df:fc:53:4f:12:11:4d:69:60:c4:2b:77:f9:1b:62:33:
ef:56:4f:88:f6:48:3b:cf:19:f4:69:d7:fc:e8:41:aa:d7:dd:
da:a9:c1:e4:20:b7:1c:3e:20:b2:67:03:d3:ed:d7:1d:e6:19:
dc:b6:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:30:23 2025 by rpki-client