Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer (raw, json)
Hash identifier: hNHVK4F7VVMAygjJzJ3DHLMxGa3jvIrIl9Mt0uKGNC0=
Subject key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 64BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 May 2025 23:46:31 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.26.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 May 2025 11:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25789 (0x64bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 8 23:46:31 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:6d:47:7b:42:3a:a6:a0:71:82:ca:9b:8a:
23:02:7e:a4:dd:b1:08:78:dc:04:c5:6a:ea:72:bd:
51:70:88:c1:f3:a9:5d:05:b0:4e:c4:a5:e3:9e:3e:
04:df:61:3a:07:d4:4f:3c:4a:4d:2b:d8:3f:02:3e:
24:06:ec:83:db:90:e4:31:b7:0a:19:d5:98:a6:2d:
84:40:91:bd:5f:92:4a:c8:f4:b2:20:66:f7:d2:40:
b1:d4:00:b5:92:0a:5e:a4:e8:48:ff:f9:76:b7:ed:
62:9c:86:40:c3:0c:7d:3c:75:2e:01:79:55:32:be:
9a:71:bc:e3:fe:c9:d3:f8:47:a8:4c:e7:b6:2c:1d:
fc:b9:06:5b:c6:88:12:32:00:b1:be:0f:c3:69:5b:
22:af:b9:f6:a4:b8:d7:ae:e4:db:56:ef:10:8b:d6:
99:92:de:fd:4e:bb:6b:33:4f:37:85:be:d7:08:23:
ff:59:fd:67:55:74:41:4e:82:70:3d:53:82:5c:81:
0c:c2:cb:e9:31:3f:f8:7c:0b:ad:91:b1:60:d3:77:
39:16:b5:7f:dc:bf:ec:8e:99:76:f1:bd:7e:ea:aa:
0a:6a:3d:b2:46:95:fb:97:be:42:a7:9d:07:55:fa:
08:07:b3:34:4c:96:24:2d:c1:fc:5f:f1:02:c7:64:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.26.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:fa:63:75:52:a9:fc:be:cc:18:c0:84:0d:04:a7:a8:c8:7b:
c9:72:fa:11:6a:d0:ba:af:e3:04:cc:2e:cb:2a:9b:8e:5e:5c:
cf:45:63:01:a9:d1:be:da:cb:d7:45:09:db:b4:34:10:4f:91:
0a:58:02:a7:4c:30:f1:29:44:a4:40:0a:5e:39:fa:a0:0f:30:
1c:12:2c:20:9f:6c:35:0a:9e:81:49:2a:4c:c6:70:7c:46:1e:
3a:df:1c:c0:6b:9a:11:bf:16:83:97:3c:1b:b7:62:08:79:f8:
37:74:2b:69:fd:23:fd:c6:4a:9d:6d:7b:77:64:33:11:83:0a:
a0:9e:47:8c:0a:6f:8d:03:2a:c5:dd:7f:9c:86:6d:f7:e3:51:
b7:8f:a0:cb:d4:29:2d:5f:89:46:aa:1a:b9:f3:80:ae:5c:bb:
d1:38:17:7f:d2:54:cd:5f:d5:ee:ca:c7:90:7d:5f:c6:e3:27:
a2:61:f1:e4:f2:8e:5f:f0:42:11:b2:91:23:3f:bc:ea:5b:71:
bc:e4:c4:49:07:14:c5:b5:41:46:99:82:38:a5:4c:93:a4:65:
c7:0c:3a:97:9d:29:46:fe:79:82:0c:c6:ea:ce:a7:84:be:8d:
f3:0b:d5:66:de:03:c9:23:a5:56:79:b7:39:2a:3e:2d:bc:b4:
cd:26:34:41
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNTA4MjM0NjMxWhcNMjYwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1
MkQ1MTU5QzlDRDdBNTBFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANBRbUd7QjqmoHGCypuKIwJ+pN2xCHjcBMVq6nK9UXCIwfOpXQWwTsSl454+BN9h
OgfUTzxKTSvYPwI+JAbsg9uQ5DG3ChnVmKYthECRvV+SSsj0siBm99JAsdQAtZIK
XqToSP/5drftYpyGQMMMfTx1LgF5VTK+mnG84/7J0/hHqEzntiwd/LkGW8aIEjIA
sb4Pw2lbIq+59qS4167k21bvEIvWmZLe/U67azNPN4W+1wgj/1n9Z1V0QU6CcD1T
glyBDMLL6TE/+HwLrZGxYNN3ORa1f9y/7I6ZdvG9fuqqCmo9skaV+5e+QqedB1X6
CAezNEyWJC3B/F/xAsdkPLUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSDO9ec8X5m
Aj9wpiUtUVnJzXpQ4zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDcwNDkvQTgwNEE0OEUyQzY2MTFGMDlEQTU2QjBCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ3MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYt
WmdJX2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVjGjANBgkqhkiG9w0BAQsFAAOCAQEAsfpjdVKp/L7MGMCEDQSn
qMh7yXL6EWrQuq/jBMwuyyqbjl5cz0VjAanRvtrL10UJ27Q0EE+RClgCp0ww8SlE
pEAKXjn6oA8wHBIsIJ9sNQqegUkqTMZwfEYeOt8cwGuaEb8Wg5c8G7diCHn4N3Qr
af0j/cZKnW17d2QzEYMKoJ5HjApvjQMqxd1/nIZt9+NRt4+gy9QpLV+JRqoaufOA
rly70TgXf9JUzV/V7srHkH1fxuMnomHx5PKOX/BCEbKRIz+86ltxvOTESQcUxbVB
RpmCOKVMk6Rlxww6l50pRv55ggzG6s6nhL6N8wvVZt4DySOlVnm3OSo+Lby0zSY0
QQ==
-----END CERTIFICATE-----
Generated at Wed May 14 14:25:06 2025 by rpki-client