Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer (raw, json)
Hash identifier: rcfAoesLEcz0LQiODlAWY12FuSHom5oX0nD/zUN56nM=
Subject key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6B98
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Sep 2025 09:37:26 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.96.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27544 (0x6b98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 29 09:37:26 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:b0:29:79:e9:40:56:7f:fe:7a:3f:b5:5a:
69:4c:1a:9f:be:3e:99:8d:59:76:7d:07:b6:7e:e1:
28:a2:75:f0:9a:9f:51:00:d1:ed:df:01:44:74:8f:
8a:0b:d2:53:bf:d0:3a:2c:05:93:d8:b9:2b:84:9b:
df:8a:7c:eb:f8:0a:f7:9c:76:f4:e2:a7:79:fa:8f:
12:39:f5:94:21:ce:c5:c1:5d:6f:b8:4b:ea:b7:6b:
ef:42:92:5a:51:c8:25:d5:c3:9c:a3:fd:b4:73:0c:
71:63:46:85:0a:68:2b:73:81:f9:4a:b4:b0:53:dd:
94:48:01:21:69:3f:92:e1:a0:5a:dd:b7:a3:c8:ac:
a2:0a:82:fd:87:d7:6b:b8:19:30:48:43:ff:79:7e:
9c:37:05:d2:47:3f:6f:21:46:7d:6d:34:9f:03:64:
57:a7:62:e9:2c:a3:1f:15:ca:30:59:b0:c2:7e:fe:
88:d4:da:4c:ff:7c:48:a8:85:91:30:62:a7:04:1f:
43:6a:05:de:21:8e:ba:4a:ff:64:d4:2b:ad:38:69:
da:1d:1f:7c:25:cc:a8:76:4b:dd:42:0b:6f:06:95:
40:7b:d5:ea:ad:e8:48:98:97:5b:a9:77:11:36:5a:
01:bd:0e:2f:35:65:ab:c3:b4:df:04:96:08:43:b4:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.96.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:8d:98:f4:70:2a:d4:71:45:06:b7:18:7c:d6:8a:c6:89:f8:
12:ff:87:86:39:e8:93:de:30:bb:80:af:9b:9f:ff:70:99:8c:
cc:52:d5:e3:1e:7f:d7:27:79:76:6f:25:27:17:df:15:82:a2:
52:e7:d6:64:f1:53:e8:0f:4d:56:66:7a:57:a5:db:33:e8:b8:
89:06:d0:e4:30:ec:a5:1a:37:f6:d9:ed:45:73:41:df:99:89:
47:39:e4:32:98:25:0f:f8:f1:a4:91:5f:74:b4:2d:77:99:70:
f1:88:20:59:56:8c:75:0b:c4:a8:36:7f:6f:12:8f:02:08:94:
1b:1c:78:1d:8e:9f:41:9f:4f:ab:3f:80:b9:c7:61:58:c2:d0:
6d:a4:c9:a4:68:a5:d6:57:4e:e4:82:bc:0c:a7:1f:c0:47:4b:
43:d4:1e:9e:74:a3:81:17:78:ce:27:73:d9:42:6b:cb:ec:85:
23:9a:09:45:78:97:96:d7:58:4d:c9:66:67:9a:64:d0:3b:05:
da:27:73:0c:ba:6a:6c:0e:dd:67:d6:f1:9f:a4:ad:32:5c:2a:
38:2e:1d:e9:1d:0e:aa:77:fc:29:1b:85:34:e7:d6:b8:4e:51:
95:55:d4:c6:68:7d:2f:75:86:c8:6a:1a:8a:e1:d9:5b:12:47:
16:82:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:21 2025 by rpki-client