Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer
File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer (raw, json)
Hash identifier: FhGScDFzKIEjPv2S3Yu+ExMm0tOkoxqE3Upi3V765kw=
Subject key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CA5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Oct 2025 04:24:23 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.84.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27813 (0x6ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 22 04:24:23 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:87:5b:ad:2b:de:00:d1:8c:70:b1:e4:b5:
04:8b:77:59:b4:86:d4:72:7b:cf:af:3c:f3:ed:36:
d4:9f:04:42:87:29:12:59:c9:cb:15:b3:fe:09:a2:
6a:50:e1:41:6b:82:0c:c6:18:6b:08:d3:43:0c:a4:
c7:f1:49:c2:9f:f4:29:c6:77:93:5b:e9:9c:13:d8:
50:70:cd:c3:0d:71:0a:a3:dc:60:d7:89:23:ac:25:
d7:9c:85:c1:85:1a:33:28:ed:ae:ef:73:db:e9:6f:
79:6a:86:f2:91:4f:59:4c:74:7e:05:c2:ca:de:8e:
bd:d7:70:78:57:17:00:76:73:1f:7a:7b:4d:22:48:
3e:2c:f4:e6:d4:f2:2a:0c:fd:08:c1:f1:85:28:34:
40:54:e7:9d:1f:74:6a:ed:ae:fe:a7:be:ca:16:7f:
1e:f7:a3:67:f6:ac:d7:80:a4:3c:7a:55:e8:30:75:
88:8a:2b:e7:14:f6:ca:2a:74:d4:fc:b3:34:9e:0e:
e3:7f:eb:8e:9b:bd:81:64:27:20:41:10:89:50:9c:
e9:07:75:40:59:73:cc:95:78:cf:02:94:61:9e:aa:
a2:d8:57:0f:bf:16:b0:ed:32:fe:60:dc:b5:7a:07:
ac:cc:f2:24:bd:91:c7:ef:53:eb:c9:20:bf:56:d5:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:03:2f:dd:be:36:aa:4b:5a:af:dd:9c:13:c8:27:e6:18:3b:
9b:2b:db:0b:ad:78:39:0e:b5:ab:9b:cf:4c:14:cf:a7:bd:9b:
69:3c:2d:d7:f2:32:e5:7e:26:b4:95:8c:cc:ff:56:a6:8f:c3:
47:ac:08:a5:3a:c3:73:93:34:ac:4f:25:7b:cb:df:9e:c1:d6:
69:ee:a1:00:a2:72:bc:d0:f4:47:74:e6:16:df:9e:ac:45:22:
22:8d:9d:03:be:24:e5:b5:15:18:e0:54:d6:b8:e3:f6:1f:67:
3f:4e:fb:f8:60:a1:2a:6c:31:86:f3:8c:9e:87:59:3c:49:a8:
16:f6:ba:88:3d:37:97:8f:c6:a1:95:2e:72:a0:95:5b:c7:f7:
b1:75:ec:80:09:25:51:09:5b:e2:67:c2:94:1e:88:bf:58:70:
29:3b:5e:39:ab:1a:e2:27:10:d3:32:bc:77:24:7d:83:a0:6a:
4a:cd:cc:e7:a5:c9:1e:b7:26:93:d3:bc:67:b1:75:e7:26:a9:
13:9f:0b:76:cb:25:9c:ac:0e:28:b1:c0:9c:c0:98:59:d0:e9:
a6:82:0a:9c:8f:ab:d1:a1:29:4c:51:98:a6:81:43:47:f9:5f:
a6:f8:4a:21:83:b7:5c:9d:25:ab:c8:32:7d:cb:7a:de:33:79:
7b:58:f1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:10:26 2025 by rpki-client