Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer (raw, json)
Hash identifier: rlnDy0/W4tmOD8HegApzHWy15NR1GxcSKOGPJ7IUAhA=
Subject key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C22
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Oct 2025 00:49:49 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.40.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27682 (0x6c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 13 00:49:49 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:63:d7:03:3c:3f:b9:d1:c0:6b:e4:af:e2:
7d:7e:7f:5f:b1:b6:a8:b3:1f:93:83:34:a7:f9:73:
ec:4a:be:42:21:96:13:d5:03:8c:6e:a5:b2:2a:f3:
4c:f3:88:da:5a:39:83:57:6a:f1:36:54:60:f9:a4:
f1:ba:a2:d9:7a:37:32:5e:9f:59:a7:26:d1:f3:ba:
74:a0:31:27:6d:ba:38:e5:04:65:2e:94:98:6c:d8:
a6:78:a3:41:2a:dc:f4:15:6f:c5:0c:57:a6:4f:d2:
a3:65:33:ba:c9:4f:95:0a:03:55:e1:43:a9:73:91:
33:48:55:ff:23:88:e7:21:5e:48:c2:d3:45:c4:fb:
4c:b7:67:2a:eb:ae:2f:bb:84:7d:0d:fe:11:9d:16:
e7:ef:26:15:0c:e6:fb:c6:c4:23:d8:87:02:9f:22:
ba:18:1c:63:07:56:9e:3d:31:cd:5c:ed:f1:bf:0f:
fe:c2:bf:b9:63:24:f4:4f:b2:91:6e:ab:59:6d:23:
21:e4:3c:74:b4:94:5a:b6:8f:d5:00:40:b7:39:79:
66:01:e7:48:a9:b4:3c:7a:dc:b5:f4:c4:1d:22:ad:
78:7a:a0:a6:cb:ca:fe:43:7f:0f:bd:97:50:3f:7e:
7a:5a:87:16:8a:10:a9:e6:99:90:7a:71:9d:32:5e:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.40.0/23
Signature Algorithm: sha256WithRSAEncryption
55:78:45:2e:f8:b7:26:e5:35:15:57:c7:46:b8:db:3b:34:da:
9e:4b:0d:2f:a7:fa:75:4a:51:cf:f1:53:58:64:67:0c:29:76:
0e:cd:46:32:87:3a:52:24:40:df:d4:6c:64:3c:c1:0f:de:36:
7e:ee:a0:ed:33:fd:b8:16:92:9d:e6:1d:11:93:90:b2:38:45:
d4:1b:d2:39:e2:be:35:60:be:b6:27:ca:dd:18:1e:61:55:79:
fa:ae:6f:2c:a8:90:7f:77:03:69:d4:ef:15:f1:88:59:53:52:
81:32:a0:49:d7:ac:5c:74:fe:24:ed:75:c1:8d:89:fc:c5:16:
12:2e:e3:74:1e:57:c1:6e:b7:9d:c6:4d:94:72:6a:84:c4:7f:
58:f3:7b:ca:6a:48:8d:7b:7b:8a:92:ba:46:9a:87:b4:1c:98:
9b:ed:d6:41:03:ad:39:99:ce:10:a0:77:74:9a:77:b1:fa:8f:
4d:88:85:ab:17:47:09:7b:61:52:57:1d:8f:74:25:12:b9:ec:
17:c5:54:49:e7:52:5d:b7:0d:0f:3e:f5:29:a7:83:95:d7:03:
d8:2c:ea:a0:c1:cb:fd:7b:96:ae:0a:8d:23:ff:4e:a7:ab:38:
2e:9a:85:47:6e:07:d1:fc:a4:1e:b4:c8:73:71:58:dd:41:c0:
9d:a4:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:19 2025 by rpki-client