Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
File: 5C9d7yZZtef6JwN2jpSH79xZW7A.cer (raw, json)
Hash identifier: RKcOLHv7+8ruBOVSE9ehYNxRPCRY5NuILbLbq2k632M=
Subject key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C65
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Oct 2025 10:35:25 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 138.252.56.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27749 (0x6c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 17 10:35:25 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:77:51:30:aa:f1:18:c6:01:45:12:56:17:
85:8b:4d:58:29:f3:25:7b:b8:64:06:a5:bd:be:e8:
68:e2:93:ef:ed:ce:f4:82:22:70:e4:8d:ef:1f:e7:
5b:11:41:b0:4a:79:e4:52:8e:72:ac:ba:42:bc:1c:
cb:b2:6a:01:89:2c:1a:a1:a7:3f:48:53:b0:d7:da:
59:50:4e:12:4e:48:ab:cd:cb:d2:c4:7d:6a:57:33:
23:f6:8d:be:5f:e1:dc:7b:55:b2:08:71:9a:c3:ba:
79:9f:f5:6c:b9:50:b5:67:b2:97:0c:b7:61:65:a8:
4a:39:3b:45:75:44:3b:34:42:c4:b7:f5:48:72:32:
b0:56:3b:2b:3b:6b:db:55:46:74:af:b7:83:bf:3a:
72:47:33:09:af:e0:40:35:54:16:82:05:eb:ab:26:
7f:16:39:52:0a:ce:2c:8d:fd:53:3b:9a:5d:e3:e2:
ff:3e:65:34:0c:0f:7f:52:f1:d2:41:d1:a1:9a:04:
db:2c:81:8e:04:78:7e:4f:23:c2:4a:90:8c:31:e0:
3c:2a:7b:ef:6b:5c:fc:e1:42:bf:ab:f2:35:40:e6:
75:86:16:e9:b9:61:9a:85:16:fc:54:03:91:7b:cf:
b4:df:b5:62:cd:03:f8:c6:22:1e:ec:70:0d:3d:5c:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.56.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:c0:79:6b:46:e0:30:c6:ad:42:51:06:06:3b:35:4e:12:9b:
7c:3b:b2:2a:42:a1:b1:71:bd:af:c2:46:a2:35:cd:1d:44:77:
ba:51:1a:ab:8b:cb:20:a9:32:62:f5:cb:62:26:07:a5:5d:f5:
90:b3:1c:ba:0c:2b:24:94:34:92:c3:09:b6:23:4a:6a:6c:25:
da:65:d5:ab:9d:a4:25:8f:3d:b8:dd:06:e9:75:1b:6b:ff:c6:
1b:92:43:38:51:d4:3b:53:75:42:c3:5f:60:ae:81:83:7e:83:
09:31:95:1a:57:d5:88:5b:59:4e:1e:61:86:e3:6c:ba:73:37:
87:46:35:87:6b:48:05:c7:0f:ae:46:5f:54:26:3f:34:b8:26:
a3:57:a3:28:5d:4c:00:9e:60:f9:ea:57:b4:85:22:59:ed:19:
c9:12:12:d0:0b:6a:1c:66:68:35:e0:35:46:8e:96:7e:0e:08:
53:3c:3a:11:2b:3b:ab:35:0b:f6:f1:6b:e4:83:62:03:d1:25:
00:2c:07:41:c3:e4:ad:11:ab:f7:9a:93:4b:da:e6:48:9b:85:
de:12:64:76:06:53:2d:92:da:a5:52:f8:d1:bd:ce:d2:0a:0b:
f5:4a:40:c4:d7:ab:9d:13:87:09:9c:1c:d1:f2:17:15:e3:7c:
06:79:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:20 2025 by rpki-client