
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
File: CXELW2Z0njOdEkzebWbONmrMq7A.cer (raw, json)
Hash identifier: bV3D4cO5wRiyZiutSWT12GRx/trOaAkNyxlAk2gUFz8=
Subject key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BAF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Oct 2025 08:14:24 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.222.152.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27567 (0x6baf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 1 08:14:24 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:d3:6e:46:80:fa:1b:0d:bf:dc:3c:87:0f:
cd:97:02:c2:b7:5d:c7:06:f7:aa:92:82:40:5e:65:
e0:a5:6a:31:ac:47:33:c2:1a:e0:0c:0c:06:81:d9:
ba:5f:99:3e:f9:36:87:18:3b:7d:7f:8a:46:1f:6e:
aa:dc:4b:c2:a4:68:f4:4e:f2:70:99:9f:af:ee:16:
e2:8a:e5:9b:8e:a5:0e:f2:eb:d0:10:44:db:3f:07:
af:dc:5d:2d:40:43:ad:c1:78:a3:01:a5:f8:75:c8:
36:f1:b1:82:7c:45:2d:81:bd:9f:9a:29:3e:19:4e:
61:dd:20:58:f2:53:aa:34:b6:d6:23:ec:f7:00:f1:
9f:e7:af:24:c9:e5:1e:e5:d5:d8:c5:fb:f2:5f:c5:
93:87:59:d0:b6:57:cc:ba:4e:20:01:22:82:52:78:
48:17:9d:63:f5:15:2b:f7:00:0e:12:f1:01:f7:39:
1d:7c:9c:a6:93:ea:98:e8:0b:61:1b:a4:40:6f:17:
d2:ed:12:6f:e9:44:93:32:79:6a:a1:36:e3:84:93:
6d:b2:41:12:74:61:e2:68:4f:01:5e:85:60:c0:b1:
5d:cb:bf:90:dd:81:22:81:d5:53:74:63:a8:ff:5b:
a2:66:8a:55:6a:e6:60:82:3b:e1:4a:85:f0:50:9a:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.222.152.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:cc:3d:3b:13:e4:a7:00:c1:97:c9:37:91:57:da:ba:12:30:
24:e1:ea:1c:24:7f:23:83:dc:54:34:5a:36:fc:6d:49:3c:98:
c1:d9:67:7f:01:69:4b:37:f0:87:a5:89:11:d0:b1:9b:f0:25:
09:e3:57:ac:ad:00:cb:f4:3b:4e:e5:3e:e7:a6:d4:07:79:93:
0e:de:e3:65:96:f0:70:d0:ad:63:f6:c6:ec:42:a1:e6:c4:6c:
51:50:79:f8:39:ea:8a:d7:43:d9:f3:09:a8:db:34:0b:01:3e:
16:84:b3:cf:6d:1a:4e:48:f0:8a:a7:e6:a9:ef:71:dc:a3:94:
3f:23:b6:59:14:98:13:e8:a7:6d:6d:a1:28:e9:ec:fc:01:e4:
aa:04:42:a6:3a:97:9d:d5:a3:d6:d8:0f:e4:f9:fd:57:38:da:
58:b4:ea:6d:5c:11:98:40:68:0a:9c:13:b2:b2:8d:a7:7d:9c:
e3:7d:17:f1:58:2b:ac:55:ba:43:f1:2c:02:04:df:48:38:f3:
f6:ad:af:d0:a3:18:f9:c1:9d:d2:3f:0d:e6:46:d3:b8:cf:78:
06:b7:54:43:66:a8:6d:7f:fd:35:9b:b8:f6:68:df:9f:79:fc:
d6:03:68:09:7f:2f:b7:cd:e4:d5:43:f8:be:11:30:88:11:ba:
74:d1:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:50:03 2025 by rpki-client