Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer (raw, json)
Hash identifier: Ub/gRBWKOud9N0LarkTavo0iGniMIAi9NuV8VrIAZm4=
Subject key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6AAC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 21:49:07 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.25.117.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Sep 2025 03:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27308 (0x6aac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 2 21:49:07 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:94:0c:39:1c:0c:ac:29:38:cc:88:87:d0:
d3:2a:5f:73:f6:86:a7:5b:40:f1:4f:f5:56:c0:4b:
f7:4a:6a:fc:7d:ee:72:07:e1:74:2e:a1:ec:5c:f1:
dc:81:a6:1f:49:43:91:67:8d:10:4e:8b:d3:13:1c:
63:92:5f:58:0d:f7:65:48:90:c3:04:05:9d:a3:ab:
15:d3:6c:0e:0c:60:90:75:3c:a3:3a:70:45:f2:de:
9d:dd:98:33:c4:ba:59:44:06:81:5c:94:ef:2e:f9:
3b:b5:ab:d1:57:ff:4c:c1:14:ae:20:73:62:fa:d5:
85:21:30:d4:c8:96:1b:bc:78:44:7f:7a:5b:29:11:
a7:b9:d1:ac:c3:f8:c0:d9:52:d6:18:59:54:52:49:
53:68:d7:cc:5d:d5:4c:de:24:52:2e:b7:e6:69:75:
95:5d:f3:4f:b3:26:ec:2e:ab:27:df:0c:80:fd:d9:
41:dc:2b:fc:2f:bf:db:47:79:c3:44:3c:61:2a:30:
3f:eb:a1:f2:08:bd:00:4f:a6:ce:12:fb:da:91:3e:
43:3a:fb:99:61:a2:91:dc:d0:6c:b6:5f:d6:df:d3:
4a:90:39:65:b3:26:e2:5a:72:91:18:13:2c:1f:6e:
13:b9:fc:c1:3b:68:b7:20:16:8d:c6:f3:4b:ac:0c:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.117.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9f:e0:e5:90:50:de:fc:f7:36:4a:af:83:0e:57:16:5b:73:
7f:60:48:4d:18:e7:8a:af:7c:09:b3:ce:0b:a1:10:83:a2:a4:
ac:d0:0e:4c:ca:e8:98:0a:8f:66:24:d3:c0:a3:4a:f6:c6:d7:
d4:6c:1b:32:f4:d5:b6:de:f1:f7:69:07:ad:8b:65:79:69:2f:
1c:1f:7b:8e:53:0f:74:50:2a:99:de:4f:ca:0a:59:06:b9:5b:
87:d6:6e:70:e0:86:6c:d3:a7:b9:53:5a:85:b0:55:94:d5:af:
14:85:f4:46:b3:6b:7d:68:36:a3:24:33:b7:b8:01:37:f4:2c:
06:e6:6e:a0:76:2e:b3:e8:50:f6:ef:67:e2:16:03:73:c0:61:
63:5a:8b:f7:2e:33:87:8f:14:2d:81:3b:fc:0d:a4:1e:fd:29:
11:cb:4c:57:ec:71:4f:62:66:5c:78:66:70:85:23:82:67:40:
03:3b:8c:12:c9:b8:04:cf:8d:09:1e:39:64:4f:81:f8:f7:43:
29:5f:67:2e:67:0c:89:b8:9b:ca:58:4d:e4:29:8a:82:b4:b9:
65:3a:34:db:a1:79:d8:74:77:62:71:45:2e:62:b3:46:2d:b5:
f5:eb:84:b5:8d:04:8b:30:4a:3a:8a:21:c2:3b:e9:84:98:90:
54:c3:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 12:29:41 2025 by rpki-client