Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
File: rUMyA4JywtsyFd2jrfsBU1QVaRM.cer (raw, json)
Hash identifier: qNMiNeXOMBMDKyC/UGl/ewYN3bcoEcen3GUVgT39Qt8=
Subject key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6485
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 May 2025 05:10:11 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 160.20.126.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 May 2025 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25733 (0x6485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 5 05:10:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a8:f3:bf:36:e4:b9:a8:b6:22:cf:69:41:69:
a5:22:8d:94:60:48:09:8a:54:0b:71:a4:f7:8a:37:
24:05:9a:c1:8d:87:c7:8d:2d:b6:4b:2a:5e:20:02:
77:72:56:89:43:7a:a1:8f:7f:e8:8c:2a:1b:da:ae:
3a:28:95:d5:41:81:c1:ae:10:b0:1f:a8:b1:32:e1:
02:aa:32:c8:b6:aa:63:04:a3:fd:e6:4d:8b:26:9c:
6c:60:f2:f9:49:9b:7a:78:92:21:ea:dd:18:c6:09:
13:76:ad:5e:50:60:f3:44:71:f7:f1:df:c4:0f:ab:
69:77:4c:26:19:1e:61:83:04:dc:c1:59:2e:d0:7c:
86:d2:02:79:ad:6b:0d:a6:1b:8a:48:b1:2d:3e:25:
92:f8:04:3b:90:ff:d2:dc:9d:98:0b:50:af:86:99:
82:8e:30:b1:dc:d1:1b:16:4d:3d:c2:f3:32:12:21:
b5:f6:49:1f:7b:2c:b6:12:2c:55:c1:2e:af:d8:b9:
c8:bd:e8:40:5e:e0:35:de:70:d5:bd:95:46:59:8c:
4c:eb:be:77:17:45:c7:90:f3:a9:82:dd:d8:89:18:
f9:cb:1a:c4:07:69:d3:c6:34:d5:ac:39:b5:27:84:
80:cf:5b:4b:f6:b1:6d:c1:4e:94:ad:0c:cf:18:d4:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
79:8f:34:63:5a:6b:c2:be:5f:13:bf:df:a6:25:5e:e8:1c:bb:
ba:bc:c5:06:90:a5:e0:af:6d:2f:05:9b:50:50:48:16:f0:f3:
43:e9:e7:08:3c:ea:16:c7:6c:0d:ea:08:65:08:b2:ff:a0:ac:
62:49:58:fb:3d:2e:61:23:47:3f:5e:77:f3:77:ef:d2:90:d3:
79:1b:b4:60:ad:b9:51:8c:37:4f:a5:3c:1b:0a:89:88:22:c5:
29:ad:e8:87:ae:bd:11:0b:01:d5:5f:3e:5f:11:3d:75:bf:5d:
d6:10:f6:70:b8:4f:a8:9e:f8:85:74:f4:0a:84:8e:f7:68:63:
73:bf:7c:24:3c:2f:c1:a1:b0:e2:10:04:0a:c6:5f:92:f1:82:
ed:b2:38:e8:9d:33:35:33:bc:cb:95:6e:94:00:2c:06:b9:c3:
cd:54:ea:c3:de:6e:4c:2a:ab:0b:e0:d4:9f:06:c0:07:5f:c8:
5b:f4:c5:1a:76:2b:10:5a:3d:d9:63:f9:33:a1:14:41:31:1c:
6e:05:1b:18:02:d2:07:ce:10:d9:a1:22:1f:9f:55:22:69:8e:
31:b1:97:24:c6:22:43:0d:14:62:89:f1:c8:fe:5f:bc:cc:8c:
bd:fc:a2:f2:d7:81:b4:3f:25:6e:b9:7f:81:4e:38:bc:16:9d:
5a:28:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:07:24 2025 by rpki-client