Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer (raw, json)
Hash identifier: GQcd6cEsOIWI/kb2olvIa7EvdWBMMS4Ed1ELlTDI3a8=
Subject key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BC5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Oct 2025 01:47:23 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 152.65.192.0/18
IP: 199.247.160.0/20
IP: 207.66.112.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Oct 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27589 (0x6bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 3 01:47:23 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:82:61:0c:89:a6:c3:bc:67:8c:4f:cf:9a:
e4:2b:3a:04:27:1f:2c:39:98:69:d6:19:ae:33:63:
aa:cf:0e:0b:84:9e:be:ff:66:be:4e:de:a3:5a:db:
4f:a9:5c:87:b5:20:7a:00:35:3d:91:c2:5b:0e:45:
02:96:f6:01:43:b3:a3:32:9e:fc:ff:1d:63:14:b4:
f3:f7:c9:ae:7f:ad:52:94:fa:c0:b9:55:82:5c:dc:
2a:dc:07:b6:00:4b:68:91:53:0d:45:1f:d7:a9:ad:
86:c0:c9:02:c4:3f:97:06:2c:48:c4:82:b0:c2:8f:
25:53:e9:e2:6b:46:e9:cf:c6:20:71:5b:96:e2:e6:
38:f7:a4:d1:df:8d:c4:6b:f7:e2:2d:1d:6a:1e:22:
c4:fe:bc:22:cb:cc:2e:42:e9:dd:dd:0d:03:55:d0:
0e:22:d4:1e:7e:0f:cc:40:8c:76:f9:80:07:c2:f8:
0c:3f:c6:64:9c:5d:42:62:d2:50:3b:a8:c2:8a:b7:
5c:42:8d:1e:01:04:36:b4:7a:2a:d9:31:8e:0e:ea:
63:2d:d7:85:6f:d5:ac:7b:d9:e6:60:03:5e:d5:2f:
b7:8b:f5:89:34:de:89:de:22:9c:f2:e5:c7:ad:7b:
ae:78:35:f6:56:fd:7c:ed:7f:55:17:a6:40:39:19:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.65.192.0/18
199.247.160.0/20
207.66.112.0/21
Signature Algorithm: sha256WithRSAEncryption
40:19:d9:cd:69:d1:e2:5b:a8:ad:95:81:3b:26:ea:e8:b5:bd:
a8:46:da:fd:06:36:d2:45:2d:da:99:6a:d7:97:cd:62:ac:93:
1f:ac:61:0c:43:4b:c5:ac:40:d5:db:53:40:f9:72:58:c6:5e:
e2:34:95:74:e6:6a:ac:1c:23:75:6c:40:0f:ed:34:42:12:84:
d0:e7:54:77:f2:ad:bf:16:5f:d1:70:ea:fe:52:49:a4:ac:18:
a6:45:10:07:21:b5:b6:1d:8f:35:59:e5:af:08:28:de:58:03:
1d:0d:1e:f6:7f:2b:32:3a:b1:49:c8:84:5f:99:21:ea:94:57:
0d:84:a8:15:0d:a7:9f:fd:0a:91:54:de:bd:b7:12:06:20:59:
62:9c:37:db:ff:e0:d2:73:0e:27:0a:24:fa:25:0d:65:20:fa:
86:f5:7a:75:4c:76:29:19:16:76:53:b9:46:4f:de:6d:08:57:
82:d9:e8:c3:f1:e5:d7:52:5d:70:c0:ed:85:25:16:98:74:ab:
a4:97:9b:dc:23:f8:9e:26:9d:1e:d9:f7:9c:eb:7b:11:b9:50:
89:ad:50:8d:06:11:87:9d:a1:cc:64:62:73:54:12:18:44:75:
4e:f9:ec:83:81:8d:9e:b6:f9:9c:25:6d:53:54:78:ba:96:53:
ff:f4:0f:ee
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgICa8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUxMDAzMDE0NzIzWhcNMjYwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFMzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIz
OTE2N0I2NUMyMTA5MjExNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANmrgmEMiabDvGeMT8+a5Cs6BCcfLDmYadYZrjNjqs8OC4Sevv9mvk7eo1rbT6lc
h7UgegA1PZHCWw5FApb2AUOzozKe/P8dYxS08/fJrn+tUpT6wLlVglzcKtwHtgBL
aJFTDUUf16mthsDJAsQ/lwYsSMSCsMKPJVPp4mtG6c/GIHFbluLmOPek0d+NxGv3
4i0dah4ixP68IsvMLkLp3d0NA1XQDiLUHn4PzECMdvmAB8L4DD/GZJxdQmLSUDuo
woq3XEKNHgEENrR6Ktkxjg7qYy3XhW/VrHvZ5mADXtUvt4v1iTTeid4inPLlx617
rng19lb9fO1/VRemQDkZ3cECAwEAAaOCAv8wggL7MB0GA1UdDgQWBBQxMRz8wUAb
1tDmtrORZ7ZcIQkhFDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTM0OTMvRTUyQzE0QzA5RkZBMTFGMEJBRDUwQjYxQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUzNDkzL0U1MkMxNEMwOUZGQTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZB
RzliUTVyYXprV2UyWENFSklSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow
GAQCAAEwEgMEBphBwAMEBMf3oAMEA89CcDANBgkqhkiG9w0BAQsFAAOCAQEAQBnZ
zWnR4luorZWBOybq6LW9qEba/QY20kUt2plq15fNYqyTH6xhDENLxaxA1dtTQPly
WMZe4jSVdOZqrBwjdWxAD+00QhKE0OdUd/KtvxZf0XDq/lJJpKwYpkUQByG1th2P
NVnlrwgo3lgDHQ0e9n8rMjqxSciEX5kh6pRXDYSoFQ2nn/0KkVTevbcSBiBZYpw3
2//g0nMOJwok+iUNZSD6hvV6dUx2KRkWdlO5Rk/ebQhXgtnow/Hl11JdcMDthSUW
mHSrpJeb3CP4niadHtn3nOt7EblQia1QjQYRh52hzGRic1QSGER1Tvnsg4GNnrb5
nCVtU1R4upZT//QP7g==
-----END CERTIFICATE-----
Generated at Sat Oct 11 10:37:21 2025 by rpki-client