
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
File: Gb2CLT62_26TcCRe6HS-qeuL7lU.cer (raw, json)
Hash identifier: dkyzy8zC3liJq9l6XIjPY0mRQq2qZ4QCao4tuFU5TAE=
Subject key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BDE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Oct 2025 04:41:33 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 156.69.0.0/16
IP: 159.117.0.0 -- 159.117.39.255
IP: 159.117.104.0 -- 159.117.131.255
IP: 159.117.200.0/24
IP: 159.117.220.0 -- 159.117.222.255
IP: 192.160.226.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27614 (0x6bde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 6 04:41:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:23:2a:f8:bf:5f:de:55:57:ea:2b:60:e8:23:
53:cf:c2:70:49:a5:44:08:eb:66:c7:f5:45:32:8f:
43:97:82:7c:11:5a:88:c5:48:d1:92:28:ca:8c:3d:
26:f7:82:89:2e:70:1c:23:11:5e:09:3d:80:2d:6d:
2f:3c:d1:09:ef:2b:c8:71:aa:d5:44:9b:15:e6:e9:
56:34:7f:b4:ee:cf:82:f8:63:16:9e:05:4f:c7:67:
9e:27:78:05:2d:f0:47:77:3e:45:6f:a6:ff:2b:9b:
17:92:8d:0f:a8:8f:87:c5:48:c0:2b:29:30:8a:46:
a4:1a:8e:79:fb:57:b5:a7:94:98:9a:cc:2f:1c:44:
42:f9:ae:3c:91:36:94:20:3d:b1:9c:27:7a:9c:84:
82:63:a0:c8:33:20:ea:fa:08:79:38:b1:40:40:88:
49:35:8a:b8:5d:67:40:21:dd:98:5d:3e:67:a1:1f:
e3:e6:ee:2f:c8:b3:dc:a3:3e:33:3a:a6:83:94:a8:
42:e9:c9:b7:aa:d9:ab:da:19:c2:62:84:3e:f9:a2:
75:1d:a4:dd:83:69:e8:da:60:71:47:4a:6e:fd:79:
29:6b:48:09:3d:ba:18:2e:2a:11:47:e4:b9:52:e0:
dd:29:56:7a:cc:af:4e:2d:4e:d3:88:36:0b:26:22:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.69.0.0/16
159.117.0.0-159.117.39.255
159.117.104.0-159.117.131.255
159.117.200.0/24
159.117.220.0-159.117.222.255
192.160.226.0/24
Signature Algorithm: sha256WithRSAEncryption
86:45:7d:c3:39:4e:5e:4a:df:c6:07:f8:c2:14:50:db:32:c4:
b9:e1:bf:ba:e2:dd:cb:90:3c:2e:1e:c0:ee:66:7d:ff:b9:9d:
14:21:08:fa:91:ab:22:4e:64:20:32:1e:f8:87:de:66:c7:e4:
28:9c:cb:68:ad:68:54:b2:79:45:78:3b:80:80:c4:70:58:91:
7b:70:d2:7c:0e:7b:74:83:cf:93:e8:4b:0e:a2:ef:5a:93:30:
92:aa:2f:95:25:66:7a:79:3c:2e:d1:07:76:eb:d6:70:35:e4:
47:9d:2f:b2:0d:60:fb:a5:49:23:6e:89:64:c7:11:45:03:f0:
28:9e:04:bd:5a:ec:7b:f0:57:cc:8b:88:40:48:ca:45:63:21:
7e:11:bd:b5:fe:dd:d4:c1:a8:ab:fe:43:4b:c2:e0:0a:41:a2:
d9:78:fa:ab:22:09:c8:15:ef:d4:98:0f:a9:80:4d:53:13:7d:
32:b1:29:7c:19:76:c7:dd:cb:15:79:4b:82:8a:36:08:c9:b2:
b5:58:2c:16:8e:f2:b3:ee:c2:0e:76:36:ec:10:67:77:1b:8b:
c1:1f:d3:f3:27:87:18:a8:3c:f0:e6:05:13:12:f9:a0:21:3a:
f5:12:a7:3a:8d:54:05:4d:91:cf:85:c7:14:a0:2d:57:49:e0:
9a:2a:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:50:03 2025 by rpki-client