Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
File: sunaXrOJa-_A39Wn6zDbKTFLuhI.cer (raw, json)
Hash identifier: 1rK0T/XWsoL5ItYDW6vSy7AEoY4ByRd77Nmx7iKeemY=
Subject key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 69B7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Aug 2025 06:44:20 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27063 (0x69b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 11 06:44:20 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:02:ba:1c:86:89:e6:05:6f:f2:31:50:b3:
96:df:bc:bf:d2:bd:40:80:60:a7:f9:f4:b3:5c:0b:
8b:e9:9d:43:55:45:e5:6b:22:bc:3c:57:2d:a2:4c:
f8:83:31:57:e0:2b:f8:1e:43:38:78:e6:01:2a:7e:
e4:bd:05:a5:c1:cc:b7:fe:c2:2e:dc:72:d5:ec:9c:
95:01:ac:4b:6b:eb:f1:be:c2:f7:ba:61:65:b8:83:
80:3b:76:16:9d:2d:2c:68:32:dc:d6:05:89:4a:fd:
1c:76:32:f1:ef:d4:0e:ad:d1:f4:e5:ce:8f:09:6d:
70:14:77:76:d2:f9:0e:34:6d:44:16:6b:7d:09:d3:
59:e8:32:77:96:bb:ef:06:80:18:70:d8:0f:df:c0:
e3:c4:15:1e:80:fc:c3:2f:67:83:fc:02:f6:31:7c:
8b:21:f9:4e:8b:2f:8d:10:9e:81:d5:87:63:2f:fb:
a7:c0:60:a0:14:e5:86:f7:ab:b2:fa:12:7c:25:c5:
c7:83:11:52:6e:96:2f:c8:58:37:1a:97:d5:f2:8b:
a5:43:2b:bc:eb:b6:c9:fc:ee:92:9d:ec:f1:5d:f5:
6e:6a:4a:b6:fe:35:f0:f5:94:59:fe:a8:55:ef:e6:
03:ef:d9:46:73:83:ad:16:ff:2f:fb:88:cf:80:0d:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.148.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:5a:ae:60:7f:36:18:5c:53:cd:51:d7:96:e7:14:bf:db:d6:
d3:c8:1e:f2:d4:44:7b:af:44:5c:57:cf:52:bc:d2:fe:bc:68:
4e:aa:47:e1:ba:c8:88:9e:42:c1:2b:6d:68:34:51:c9:42:2b:
e1:46:b9:83:c0:6c:cb:2d:ae:2c:15:df:db:00:58:d0:db:73:
a7:6b:90:96:7c:63:b5:e5:73:f0:c1:81:76:61:d1:4e:36:f9:
07:e5:e8:9e:aa:a4:be:fb:09:65:74:45:78:4e:5f:19:87:d0:
66:c7:3d:33:dc:9d:65:72:b2:05:02:cc:e3:51:0f:a6:a7:d9:
c2:c9:0c:95:b9:d0:64:a3:4f:62:09:cc:7a:8b:61:d3:51:f9:
c6:92:75:ee:e9:56:ea:fb:dc:6f:ba:0a:bc:59:ed:5d:dd:22:
b8:0f:f2:3a:7a:3d:a9:2b:54:61:da:00:61:a1:43:d9:e8:af:
a4:46:4b:11:02:46:6b:8e:82:99:fc:a9:d3:10:dc:8b:d3:46:
72:9f:0f:c2:16:87:5b:2f:d8:ad:b0:be:c9:b1:ad:6a:8c:41:
b7:7f:68:d3:1f:3b:f7:5b:7a:bf:06:fe:25:f4:0b:0c:c7:27:
be:24:ef:68:a4:24:6d:0d:cc:30:7c:45:fa:95:c9:b7:64:45:
70:f0:be:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:25:10 2025 by rpki-client