Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
File: hpBNLQLbigWb7ZOPL46u88Qgb9A.cer (raw, json)
Hash identifier: KYzs5dEDKIEXuIM+aoWKh2/kpl5jFmfqsWwz8exDFFw=
Subject key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A59
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Aug 2025 06:41:37 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.25.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Sep 2025 03:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27225 (0x6a59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 29 06:41:37 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:82:e0:dc:8a:57:64:e4:23:03:a8:ad:bb:
82:48:38:7d:8a:7b:89:c2:6c:2a:21:50:ab:a3:02:
09:d6:e8:e5:61:d6:d1:dd:7a:2d:f1:92:b8:26:b5:
52:6b:a3:fc:2c:9b:11:11:d6:b9:0a:e4:23:7f:72:
ca:2e:07:1d:60:75:d1:6c:1d:13:9b:18:48:7b:da:
e4:2e:b1:8d:40:d0:43:65:83:ed:c7:63:23:87:5a:
e3:ae:b5:44:3a:bd:bf:d0:f3:63:8b:3a:53:6d:75:
94:0e:fa:5f:11:31:85:34:8e:51:c2:b3:a8:dd:ed:
79:9d:4e:e1:42:1d:27:3f:67:de:fc:8c:4a:4b:f2:
85:89:cc:9a:9b:4e:07:85:78:c3:1c:28:db:b0:d4:
74:f5:fa:7c:b5:a4:ca:33:e6:79:e1:db:b9:61:50:
ca:05:dd:df:37:a4:f6:24:15:ee:d4:c8:36:e9:fa:
73:7d:76:b2:26:e0:68:4e:bf:a3:70:e2:0d:3d:42:
3f:b7:b3:e2:a0:f7:cd:52:cd:56:d1:fa:4b:7d:dd:
aa:b3:65:3c:6f:4c:16:e4:c7:e0:d0:be:27:91:d0:
76:19:c6:46:ee:bd:d1:8e:cd:dc:09:fb:ee:04:e1:
e0:e1:b2:d7:c7:fa:03:7e:21:d4:41:5b:86:26:d8:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.25.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a4:9b:69:4c:fa:dc:e9:c9:60:d9:6a:69:d1:df:7e:b8:c7:
7c:ed:eb:40:1c:82:65:8c:bb:8d:7c:e2:1a:38:88:14:ac:e4:
7a:62:e6:4b:11:7c:35:e2:34:1c:57:28:dd:13:12:b9:47:38:
a7:54:10:ec:34:ab:6c:33:81:05:a2:3b:47:ec:64:58:da:37:
6e:27:d1:2d:75:e5:f2:67:0c:86:67:da:9d:e9:ac:cb:c8:e9:
bd:50:63:61:03:0d:f1:72:0c:45:40:e5:39:24:7d:11:08:22:
ac:d8:0b:48:7e:b1:9f:6f:c6:e6:49:51:41:c4:85:30:9d:29:
a6:5b:ca:b8:e6:a7:de:1b:29:f7:d5:c1:b5:35:dc:d5:8d:f3:
ac:23:2e:23:3b:e4:f2:9d:1f:82:89:ea:30:0e:31:f5:c6:f5:
15:57:e8:2f:15:ba:6a:e4:2d:78:98:50:f7:ec:0f:73:ed:38:
c0:a9:5b:0c:0f:42:eb:ae:d0:c7:51:c1:fc:db:46:2d:61:18:
a9:57:7d:4e:c9:0d:b3:58:71:93:b9:33:b8:d6:97:92:0c:6f:
12:14:13:4a:45:08:cd:d6:84:49:4c:92:de:3e:b9:7c:8d:e7:
9e:f2:02:78:be:93:40:c4:a5:24:d9:d3:98:f5:0c:76:40:70:
58:47:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 12:21:27 2025 by rpki-client