Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
File: g4-9CzleqQcGxsKJrCaw1zigQkE.cer (raw, json)
Hash identifier: OGV7rm/PhvGzs6EmrdUbXsbgd3hpeE+w3Ay8jm0uxxE=
Subject key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6729
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 28 Jun 2025 14:37:12 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.46.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26409 (0x6729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 28 14:37:12 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:fd:a9:62:19:d7:4f:9d:3a:77:a1:7b:73:
e6:93:5c:e5:36:38:89:7f:c6:37:0c:33:d7:41:85:
83:0d:1d:14:46:74:fc:e3:5a:41:d1:6a:37:c5:0f:
47:3b:49:f0:c2:ce:d5:b8:41:2e:a3:0a:0b:03:6e:
fe:5a:1c:7d:62:b9:3a:63:c1:16:24:c1:f8:c8:9f:
39:2d:51:7d:6c:d7:2f:26:de:ce:a1:f5:3e:af:c4:
c6:60:03:ca:e7:40:42:a2:ba:d4:8c:4e:de:9f:9b:
37:a9:db:ae:24:01:68:cb:f4:5b:65:2e:a1:0e:79:
f3:5e:cf:b2:29:89:13:5c:3a:0c:58:ae:45:a6:d8:
29:c5:f7:32:96:c2:a6:7d:23:8f:41:5f:11:26:34:
f8:10:f3:8a:19:05:be:12:8f:00:5a:71:53:6d:e1:
22:6b:bc:24:04:b5:5a:aa:c4:9d:7f:c4:e3:ee:0f:
98:f9:ff:33:26:b2:67:ea:69:fa:47:25:4b:db:da:
50:05:e7:f1:08:b6:5e:69:40:eb:98:6c:78:9d:ce:
e6:56:98:7a:09:71:03:24:f1:78:36:47:f8:b3:c8:
e2:92:64:53:6c:cf:23:39:50:55:3e:d4:af:35:7a:
35:e8:7c:14:93:74:11:35:0f:3b:d1:df:d2:b7:fc:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.46.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:cc:9f:ff:31:90:4a:de:2b:d0:6f:da:f7:a7:97:17:b8:5b:
f6:ca:fa:6d:08:c6:21:c6:f2:a9:98:47:1b:9d:49:01:57:80:
dc:bc:05:36:de:3a:e7:a7:9c:7e:3b:4f:6b:57:39:61:03:7f:
3e:89:2b:80:b2:86:fb:d8:55:3b:06:fd:56:69:5c:2b:6e:f8:
d0:7b:33:a3:85:47:a6:4c:85:6e:ed:49:54:7a:3f:29:f4:a4:
ab:df:2e:7d:ca:99:19:32:8b:2f:cc:0e:68:73:15:7c:61:9b:
71:85:02:a8:ec:f5:39:bf:0e:85:6c:b0:2a:2a:64:90:c8:ca:
56:27:03:0a:dd:77:c4:3f:43:55:c0:05:d4:bb:7d:1a:85:37:
27:31:3e:f2:c6:3e:6d:b7:86:de:d6:f8:db:f4:ef:f6:07:12:
33:9b:ca:ac:1b:73:2e:61:76:40:94:a2:8f:d1:7f:f0:00:bf:
d8:6f:bc:5b:de:fd:29:fa:99:36:ce:c7:77:17:33:e2:fb:56:
a9:43:f6:33:66:1a:1e:ee:8d:cb:e4:7d:3c:19:45:72:ac:ba:
30:d5:de:dc:2f:13:37:be:78:ef:07:7e:ec:89:ba:3c:60:30:
55:e3:3a:4f:ce:85:76:34:83:5c:cd:1d:ec:c7:c3:62:89:3e:
b7:28:ff:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:59:24 2025 by rpki-client