Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
File: j3TBdV8YhwjM46Z97ChZk2SN8YM.cer (raw, json)
Hash identifier: w8ejnE2kxHUQXN8UEAJE4FvoC2Z79zcNhZmAgWNvhRc=
Subject key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 676A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Jul 2025 03:46:30 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.7.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26474 (0x676a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 2 03:46:30 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:94:0f:04:38:60:0a:08:ea:1c:6d:76:de:
79:ad:14:69:46:93:49:5b:80:1e:25:26:67:99:1e:
68:ef:d8:5f:18:bc:85:7f:60:a9:13:87:9e:40:b1:
22:56:dd:28:6d:5b:30:f4:3b:36:09:f0:2a:db:aa:
a8:ef:1b:f2:9e:9e:6a:c4:8e:c5:5c:dd:5d:ea:8f:
44:c5:a7:8e:9e:d0:00:e8:c4:35:8b:4d:6a:94:13:
f4:b2:d2:84:f7:d3:c6:cf:ae:52:77:7e:27:dc:4b:
37:36:19:cf:cb:dc:17:dc:a7:0f:f8:53:e2:40:dd:
d1:f1:38:5c:e0:07:41:a6:3d:f3:27:d3:15:67:1e:
5a:d1:57:0d:20:bd:05:0a:99:6e:3b:c6:41:a6:0c:
e0:1b:d6:f1:fd:ee:44:73:b5:e2:96:42:94:98:3a:
4f:3e:f5:a5:dd:b2:32:d5:3a:f6:7f:1f:ff:e6:62:
e4:55:df:50:c4:f7:fb:62:8f:18:2e:45:1d:ba:bb:
a7:55:6c:7e:37:32:c4:ea:1d:ea:29:12:c9:87:cd:
96:a7:25:b4:53:49:55:ee:a7:e7:5f:87:54:85:2d:
b1:b4:73:bd:55:6b:01:c8:ee:80:51:48:73:f4:d2:
b4:00:ea:4f:e8:65:2a:d7:5c:aa:74:f0:31:61:1a:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.7.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a1:96:e7:10:a9:f9:d3:5b:5e:09:29:f5:dd:4b:a6:45:8a:
53:92:5e:a5:fc:48:e3:b3:b1:f7:5b:be:5d:99:1b:dd:12:33:
80:a2:e5:a5:56:2e:bc:33:48:fa:9b:8d:04:1f:dc:6f:a7:16:
f3:05:4b:b3:98:8c:0e:15:bc:86:2e:86:d2:39:88:66:3a:72:
85:d3:ad:e8:16:0a:b6:c1:0e:be:4a:8a:96:17:ce:88:7b:11:
65:3b:d6:68:c2:52:75:fb:9b:76:95:9e:b8:bf:f9:08:c1:5e:
18:9b:33:c1:ff:57:5f:4a:69:95:25:9f:62:07:30:ca:7a:66:
85:a6:26:a7:d7:65:b1:08:10:f8:07:af:59:84:5f:d1:58:f5:
7d:69:e1:9f:6e:3a:f9:da:1f:18:08:6d:63:71:1e:ac:3d:86:
39:85:b3:a6:0b:97:40:9a:ce:f1:0b:23:ec:31:3a:c1:de:8c:
ce:33:a3:58:cb:af:aa:db:ec:d7:01:65:8a:24:d6:ea:00:ea:
19:f3:de:51:a5:14:a6:30:61:90:0c:c4:63:b0:0b:a0:0e:a3:
0b:d4:f2:85:e3:ed:53:25:41:5b:e4:18:3e:05:6c:0d:e4:ff:
d9:c1:bd:6d:af:13:8f:ab:0a:92:28:e5:2b:dd:e1:c7:7b:36:
44:b7:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:37:52 2025 by rpki-client