Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
File: _7jr91F1lPQetjZXPZajVwaXSbk.cer (raw, json)
Hash identifier: onZtjPDdXKPmj7IBP53vIAAOBszTKVntFGxKgAfoEAs=
Subject key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6B7C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Sep 2025 07:18:40 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.250.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27516 (0x6b7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 26 07:18:40 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:f6:80:92:e4:11:3f:d7:57:ec:76:7a:96:
de:35:fd:4d:13:20:b5:43:76:4c:dc:b0:48:24:0d:
97:89:c6:61:00:9f:17:89:87:3c:04:01:fb:4f:5a:
7b:ee:d3:22:23:32:52:a7:39:ef:d2:ea:20:d8:68:
7f:e2:a2:3e:b2:31:00:33:16:bd:64:76:d2:c7:08:
64:68:71:37:56:17:ee:0f:1f:b9:79:36:e1:0c:37:
3e:87:f4:ee:4d:d5:29:e1:2b:8b:ed:06:24:8f:50:
ad:34:f6:f9:79:14:5e:29:64:76:90:83:3e:e3:b1:
89:cd:37:2d:39:89:89:7d:d7:e0:4b:cd:96:ea:5f:
fe:b6:91:9f:50:e4:c4:a9:af:ec:ea:0c:fd:6f:4d:
e2:2e:d4:3d:10:7d:b1:de:3d:2a:2f:0b:39:ed:69:
62:fb:d0:5a:36:88:60:d5:3b:f0:36:8e:b5:e9:a2:
c0:a4:c9:ee:d2:ac:b2:a4:8c:ee:c1:99:3a:ad:98:
5f:5f:7d:44:87:7a:8b:8c:79:85:c6:86:f5:51:88:
96:57:82:f4:43:e6:0d:b9:91:f8:2e:e3:74:10:ad:
0c:9e:b7:97:c3:8a:74:65:b9:6a:ae:a7:ff:97:85:
56:94:41:1e:3d:29:49:ce:a5:c1:17:f9:0f:ab:a4:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.250.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:40:7f:38:3a:d7:53:f4:ef:67:25:74:a0:96:61:49:fb:88:
7b:27:9d:24:ac:2a:3d:e6:5d:3c:8b:dc:0a:73:45:bf:9b:8e:
2c:bb:f7:e0:8e:2e:70:72:4b:43:06:4e:bf:4e:70:33:55:4d:
d3:d5:09:a3:b8:b2:07:4d:e4:46:88:61:93:68:11:39:7e:a4:
18:0f:6a:b7:23:a1:ce:95:5c:55:f1:5f:dd:4a:54:67:93:17:
05:f6:fe:4d:16:b6:69:9b:49:bf:97:7e:2b:ee:01:19:5e:37:
99:0b:31:5b:6d:6a:8d:c4:d0:c0:d9:bd:43:50:5d:75:b0:67:
b6:7c:06:5a:2d:b8:a5:56:ce:2c:13:1f:ec:c7:51:43:65:5e:
32:89:3d:a6:97:62:2b:9d:a0:39:f3:89:c1:f1:bf:bb:d0:c8:
a9:24:a3:a3:45:46:3d:d1:58:93:ae:b0:d4:49:82:63:04:03:
b3:f4:0f:8a:75:cf:42:e9:70:7d:ba:93:90:20:01:d5:cc:41:
f1:4e:3f:50:30:38:38:0e:51:6d:4a:5f:b6:73:a5:a8:90:68:
07:ac:2d:c9:b6:10:bf:bc:68:17:f2:d3:f4:c0:bb:1a:3b:dd:
8c:84:38:56:9b:77:82:cc:d3:9e:9c:de:d9:0b:c9:5e:c4:5a:
fd:b8:a8:ab
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICa3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwOTI2MDcxODQwWhcNMjYwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5MTEzNjExMC8GA1UEBRMoRkZCOEVCRjc1MTc1OTRGNDFFQjYzNjU3
M0Q5NkEzNTcwNjk3NDlCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANqf9oCS5BE/11fsdnqW3jX9TRMgtUN2TNywSCQNl4nGYQCfF4mHPAQB+09ae+7T
IiMyUqc579LqINhof+KiPrIxADMWvWR20scIZGhxN1YX7g8fuXk24Qw3Pof07k3V
KeEri+0GJI9QrTT2+XkUXilkdpCDPuOxic03LTmJiX3X4EvNlupf/raRn1DkxKmv
7OoM/W9N4i7UPRB9sd49Ki8LOe1pYvvQWjaIYNU78DaOtemiwKTJ7tKssqSM7sGZ
Oq2YX199RId6i4x5hcaG9VGIlleC9EPmDbmR+C7jdBCtDJ63l8OKdGW5aq6n/5eF
VpRBHj0pSc6lwRf5D6ukhc8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT/uOv3UXWU
9B62Nlc9lqNXBpdJuTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTExMzYvMDNDNDI4N0E5QUE5MTFGMDk1QUEwNDgwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkxMTM2LzAzQzQyODdBOUFBOTExRjA5NUFBMDQ4MEM0RjlBRTAyL183anI5MUYx
bFBRZXRqWlhQWmFqVndhWFNiay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVj+jANBgkqhkiG9w0BAQsFAAOCAQEAuEB/ODrXU/TvZyV0oJZh
SfuIeyedJKwqPeZdPIvcCnNFv5uOLLv34I4ucHJLQwZOv05wM1VN09UJo7iyB03k
Rohhk2gROX6kGA9qtyOhzpVcVfFf3UpUZ5MXBfb+TRa2aZtJv5d+K+4BGV43mQsx
W21qjcTQwNm9Q1BddbBntnwGWi24pVbOLBMf7MdRQ2VeMok9ppdiK52gOfOJwfG/
u9DIqSSjo0VGPdFYk66w1EmCYwQDs/QPinXPQulwfbqTkCAB1cxB8U4/UDA4OA5R
bUpftnOlqJBoB6wtybYQv7xoF/LT9MC7GjvdjIQ4Vpt3gszTnpze2QvJXsRa/bio
qw==
-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:21 2025 by rpki-client