Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
File: 6CbZQgvPRaEIfTATu05KhJYNYcc.cer (raw, json)
Hash identifier: xzvIuXUhUK/vjsGgTiDWUi7Vq4O/pljvPWZNjRSb1wg=
Subject key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4D28
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Aug 2025 15:26:01 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 193.119.0.0/19
IP: 2001:7fa:10::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Sep 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19752 (0x4d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Aug 29 15:26:01 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:9e:03:24:aa:1b:98:07:dd:fe:4a:61:7b:
5e:cf:5e:97:66:14:20:5e:eb:d3:7d:08:74:69:8a:
bf:c3:f1:2d:77:af:c8:db:0e:53:6a:2b:38:a3:65:
5f:69:88:6a:a2:29:28:bc:6d:94:53:4b:91:7e:b5:
82:28:c6:77:b9:79:cc:d7:e8:e3:e7:ff:ab:8e:9e:
c4:8a:16:eb:f6:54:e7:4d:10:dc:f3:0b:16:94:f5:
35:c5:b0:89:37:4f:af:3b:31:81:ed:3d:1d:27:97:
94:3c:a0:8c:af:56:eb:32:c5:6d:8b:f3:2e:5d:a0:
7b:a2:5b:f1:3c:8c:dd:24:fd:17:a2:af:15:03:21:
c3:a4:bf:af:4f:e3:74:4f:50:37:40:6d:10:a2:5c:
b8:5e:9c:07:88:ea:71:ec:0f:90:7d:c1:c3:ee:23:
8f:af:71:78:a2:c8:4e:f4:aa:9d:6f:3d:99:4e:55:
a4:3e:63:3c:8f:34:83:fe:98:f8:fd:a5:ac:f8:d4:
6e:f3:a1:9a:66:14:22:37:88:fe:75:48:f2:01:57:
f0:06:8e:20:de:eb:7c:40:b4:ba:50:b2:bb:99:2a:
44:52:86:d6:05:04:9f:41:b4:0e:02:b7:47:cb:8b:
a2:e5:3e:0f:c4:d6:1a:ae:12:a6:41:df:9f:33:bf:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.119.0.0/19
IPv6:
2001:7fa:10::/48
Signature Algorithm: sha256WithRSAEncryption
7c:68:6b:07:9d:f6:e2:7f:93:92:ed:7e:44:b5:8d:a6:34:a8:
e3:46:11:78:1b:d0:d8:dc:3b:94:1f:9f:29:de:a5:11:a1:26:
63:8b:0f:d5:42:3a:49:76:69:b1:b0:7c:24:ac:a8:b1:00:8e:
7d:4a:ab:01:b7:b0:99:4c:9d:8f:db:c9:56:75:17:83:25:6c:
d3:66:b2:d6:6c:cf:c3:f2:ae:34:bf:37:5a:93:b8:65:9c:ba:
f8:f2:f9:bf:62:6c:de:ce:72:1e:92:f9:68:ca:b0:34:bd:6a:
2d:82:e4:74:53:85:3d:64:b1:9e:32:be:ae:b6:0f:37:d0:f3:
9e:36:a4:92:9e:96:be:46:8e:a9:7e:4a:41:de:65:4c:f0:95:
c1:3b:3f:25:bb:de:4c:c2:f6:3b:b7:c2:0f:be:66:e9:01:20:
17:0f:ac:0a:b1:9e:3d:6a:75:5c:e3:84:58:3e:6b:f6:f8:18:
77:91:b6:ce:57:ed:61:61:17:12:25:32:53:09:48:38:ee:2c:
c6:78:46:a0:0b:5d:00:2f:14:9d:dd:9e:44:f4:0b:44:30:73:
8d:0b:26:fb:23:fe:91:e9:62:9f:ff:59:4b:f3:00:48:fb:75:
d5:f4:a7:e1:df:33:7b:21:be:69:2e:37:3e:98:ef:a9:f1:6d:
ec:d0:1b:2e
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgICTSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjUwODI5MTUyNjAxWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0RUFFNDExMC8GA1UEBRMoRTgyNkQ5NDIwQkNGNDVBMTA4N0QzMDEz
QkI0RTRBODQ5NjBENjFDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL8PngMkqhuYB93+SmF7Xs9el2YUIF7r030IdGmKv8PxLXevyNsOU2orOKNlX2mI
aqIpKLxtlFNLkX61gijGd7l5zNfo4+f/q46exIoW6/ZU500Q3PMLFpT1NcWwiTdP
rzsxge09HSeXlDygjK9W6zLFbYvzLl2ge6Jb8TyM3ST9F6KvFQMhw6S/r0/jdE9Q
N0BtEKJcuF6cB4jqcewPkH3Bw+4jj69xeKLITvSqnW89mU5VpD5jPI80g/6Y+P2l
rPjUbvOhmmYUIjeI/nVI8gFX8AaOIN7rfEC0ulCyu5kqRFKG1gUEn0G0DgK3R8uL
ouU+D8TWGq4SpkHfnzO/QzcCAwEAAaOCAwQwggMAMB0GA1UdDgQWBBToJtlCC89F
oQh9MBO7TkqElg1hxzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNzY0QTA2NjAyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRFQUU0Lzc2NEEwNjYwMjU3NTExRTdBQzBEMTcyQUM0RjlBRTAyLzZDYlpRZ3ZQ
UmFFSWZUQVR1MDVLaEpZTlljYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEBcF3ADAPBAIAAjAJAwcAIAEH+gAQMA0GCSqGSIb3DQEBCwUAA4IB
AQB8aGsHnfbif5OS7X5EtY2mNKjjRhF4G9DY3DuUH58p3qURoSZjiw/VQjpJdmmx
sHwkrKixAI59SqsBt7CZTJ2P28lWdReDJWzTZrLWbM/D8q40vzdak7hlnLr48vm/
YmzeznIekvloyrA0vWotguR0U4U9ZLGeMr6utg830POeNqSSnpa+Ro6pfkpB3mVM
8JXBOz8lu95MwvY7t8IPvmbpASAXD6wKsZ49anVc44RYPmv2+Bh3kbbOV+1hYRcS
JTJTCUg47izGeEagC10ALxSd3Z5E9AtEMHONCyb7I/6R6WKf/1lL8wBI+3XV9Kfh
3zN7Ib5pLjc+mO+p8W3s0Bsu
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:47:50 2025 by rpki-client