Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer (raw, json)
Hash identifier: erU2nqJyq8SYzL/AQUKPA4PnHxW6vhmownPP/vjir1w=
Subject key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 673E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Jun 2025 16:48:36 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 198.49.32.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26430 (0x673e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 30 16:48:36 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:7f:e0:4f:05:c1:69:08:c1:25:60:b4:42:
56:52:15:99:95:be:58:33:94:a7:61:3f:ed:58:3d:
32:0a:ab:fb:fa:a3:50:4b:94:94:de:ad:16:9c:0c:
47:b4:d5:63:a1:30:bb:a5:76:a7:65:29:86:ee:c5:
4d:41:a2:a7:26:e3:53:36:c1:27:83:02:38:49:52:
13:8d:f8:42:af:29:21:f3:9d:58:46:cb:21:33:71:
72:91:9c:d8:b2:ea:44:23:c3:3c:41:b1:62:52:e0:
6c:50:12:16:be:86:dd:4d:ec:67:32:f1:3a:f3:2b:
d2:69:ed:81:e5:5a:a8:a1:29:a7:31:16:7c:32:20:
b8:0a:c2:ea:c4:19:50:70:1f:80:89:73:ac:fb:06:
bc:2f:41:04:6c:d5:d1:ca:b0:d2:be:49:92:d6:df:
63:f2:26:49:a7:a4:80:50:32:d8:3c:6e:60:c6:23:
00:7d:bd:61:ec:9b:91:15:d8:4f:cb:b6:f2:9a:f1:
c2:13:15:1c:14:f8:f7:7b:c7:c0:a8:cc:4a:6e:e6:
c4:f0:54:04:89:07:1a:d3:7d:d7:cd:85:e5:73:51:
f7:e8:a7:61:18:55:0f:8b:cf:09:87:37:b3:1f:06:
8e:99:f9:29:5b:14:64:ef:3b:f5:31:32:81:b3:4e:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.49.32.0/21
Signature Algorithm: sha256WithRSAEncryption
43:c6:09:bb:54:de:39:eb:d0:a9:e9:31:b4:61:ad:b3:a6:fa:
e5:46:1b:24:fd:8e:47:b1:ef:6e:7c:55:64:ac:49:a7:8d:a1:
87:21:91:8c:74:92:9d:85:d9:e3:fe:8a:16:5f:fe:67:9e:85:
75:1a:27:5a:0c:fb:45:52:b7:61:d2:fd:45:ac:39:3f:c8:68:
66:91:3a:c6:e7:59:73:8c:ea:d2:54:e4:54:03:06:fd:6e:e3:
86:f1:32:e6:55:1a:0d:5b:59:09:a6:8f:9a:a9:c8:bd:bf:7d:
0a:8a:80:e6:d0:8a:e3:3f:6a:1e:bb:87:84:d3:2a:38:ea:b7:
56:d5:6c:ac:68:a7:a4:6a:88:f7:9e:70:ef:e4:8e:88:b0:92:
c1:6a:de:73:52:f2:09:40:de:f8:8d:28:89:44:12:f7:71:8c:
02:d7:4d:e5:1e:d2:f2:a6:7e:82:72:e0:37:b4:33:04:79:e9:
b3:8c:06:60:d0:dd:8a:99:c1:42:01:09:7f:81:e2:2b:62:69:
68:bc:64:29:52:2e:9d:05:c0:c1:45:8a:5c:60:d1:e3:c6:5b:
15:88:73:36:d7:0f:0b:4b:27:46:3d:d3:bd:36:84:18:60:39:
d9:7c:7a:29:51:1a:8e:66:07:8f:a5:44:fc:d0:fc:e6:f9:82:
cd:ef:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:43:07 2025 by rpki-client