Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer (raw, json)
Hash identifier: p+Oz3m5pFlVmGimM+FejrFV3Dz5Fux6eEFmbQoQe9Ns=
Subject key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6B92
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Sep 2025 05:56:15 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.130.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27538 (0x6b92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 29 05:56:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:46:ef:70:14:c4:5a:e5:c5:e2:9a:9d:91:
7e:79:18:96:94:1d:38:89:e9:35:95:98:8a:d4:b7:
76:96:db:5f:c0:45:63:31:28:aa:cd:f9:fe:95:2c:
b5:51:74:e1:e5:55:ec:41:b8:b7:a9:61:cc:75:8b:
a8:ef:0f:02:19:d1:48:6a:c2:d8:11:9a:4b:00:db:
25:ff:86:91:2b:10:62:e3:93:f3:de:a7:22:07:6e:
a4:35:a1:5f:06:13:7f:2d:ba:8c:74:4c:86:85:55:
a0:78:b5:83:8c:bc:52:02:b0:c4:6f:ff:9c:77:aa:
9d:73:32:3e:8b:78:52:15:2e:88:a8:3a:7d:3e:45:
64:95:fd:ea:04:ed:40:f5:0b:98:e7:dc:88:56:07:
65:13:e8:5b:cc:e9:77:d5:09:3d:c9:6a:8d:be:9e:
5f:fd:73:6f:40:e8:95:50:c5:3d:57:c8:3a:6f:09:
bb:5f:2a:75:67:05:10:80:48:8d:8c:bb:48:6c:62:
bd:7b:97:3c:57:ce:2b:5f:a8:54:9e:6e:cd:ff:37:
24:3b:b8:0d:f5:4a:84:bb:72:e5:b5:dd:dd:fb:a0:
e0:a5:c7:ed:e1:46:48:da:4d:2f:68:3b:da:95:4c:
8c:43:53:e4:be:fd:3c:29:12:77:6e:77:0b:eb:e4:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.130.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:5e:5f:b0:92:fa:db:e3:c7:5c:4d:f8:e7:ba:45:f9:c4:e8:
34:ae:50:2d:9f:4a:11:b2:9b:0d:fe:12:67:66:d5:6f:fa:ef:
85:34:f1:dd:50:98:fc:36:0c:72:f3:b1:98:be:9e:60:0d:c2:
2f:0e:2e:14:cf:f4:73:19:ac:ff:5a:62:5b:3d:69:cf:37:bd:
52:23:b2:9a:27:60:9a:9a:b5:4d:70:9e:04:81:04:5a:d1:be:
62:6d:7e:bd:e7:85:27:20:25:df:7d:88:51:b3:4d:8b:ca:f3:
5c:f5:d7:dc:da:f0:98:c7:cb:71:9f:70:18:41:8f:f8:b9:2a:
58:1a:46:3c:af:4a:0b:e0:36:97:2f:36:4a:f9:68:0a:12:2a:
7b:8f:7d:b9:f9:73:b2:eb:87:01:86:51:21:09:2f:94:9a:a8:
91:16:66:78:3c:12:91:ae:c7:32:96:39:25:65:32:5d:ac:b4:
62:9e:f9:09:03:af:01:c6:f6:68:9f:06:57:40:a3:98:6b:3f:
a4:05:9f:25:df:e9:a0:b3:4f:2b:e0:0d:c4:6c:bf:87:28:38:
76:77:90:83:3c:0a:e6:21:fb:e7:74:cd:29:55:00:2c:49:5d:
b9:1b:4b:a6:e7:20:c4:3c:d3:64:8e:f7:a5:6e:7b:77:f5:27:
72:83:99:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:20 2025 by rpki-client