Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
File: rDzLekAZEcjlFT8wFmpUyacWP3s.cer (raw, json)
Hash identifier: 2Eaa/uwgNv97lb1ohB2VB7C6h5NA1exAu4BGdOuxGTE=
Subject key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C28
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Oct 2025 09:23:19 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 138.252.0.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27688 (0x6c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 13 09:23:19 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:aa:ae:2c:9e:d3:5b:bd:1f:17:99:b4:d2:
20:d5:d3:ec:69:8b:5c:1c:24:72:26:2f:db:90:70:
2e:18:5b:2b:c0:3a:54:09:10:5f:51:63:2f:08:f8:
a4:fa:8d:b0:cd:0c:ee:a4:15:23:54:c2:ea:af:9e:
63:24:be:92:76:1d:2b:f6:d4:f1:38:5f:db:a3:49:
e1:85:ec:93:68:42:62:64:24:fd:16:2e:42:1d:d3:
78:4a:92:74:03:86:f9:da:c9:9a:81:d8:10:7c:f1:
dd:c5:79:e3:ed:29:42:14:80:1e:83:f6:a2:ce:6b:
de:51:35:c7:2a:52:a0:be:1a:8e:a3:fb:91:c3:0a:
f5:e6:5f:36:64:07:ed:a8:45:d2:38:b2:8b:41:78:
33:e3:3c:8e:0a:98:33:c6:43:55:79:8d:a2:12:28:
d3:ec:6e:5c:bd:52:c0:40:34:cc:f3:6a:99:a3:f8:
cf:67:0c:95:ab:b2:13:67:64:81:ab:4d:fd:c2:f3:
c4:0e:f0:ea:96:35:f1:a1:e2:57:6c:20:c0:b3:e2:
b8:6c:32:bd:f7:2d:01:22:cf:22:a0:58:96:9e:c2:
44:16:a6:97:ba:66:13:89:ee:75:61:a6:d5:4f:0d:
60:70:bb:30:c0:a7:cf:6c:50:77:64:7f:ee:62:e2:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.0.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:dd:52:91:ca:e2:10:e7:d3:e5:e9:cb:0e:03:04:9f:71:2d:
d4:65:f4:a2:3f:05:3f:61:12:ae:83:9c:a4:17:39:89:6b:c2:
b2:4c:99:e3:69:93:e7:d6:f7:37:54:0a:38:71:b4:d4:6a:3a:
52:74:78:46:fe:77:11:a1:af:7f:c6:17:4b:1f:cd:8f:33:90:
5d:72:fe:5c:fc:40:e0:ed:6b:ea:68:ea:32:9b:1b:22:58:57:
c1:16:2e:39:9f:1b:ef:9a:0a:3e:53:99:20:8d:1d:6c:31:83:
e7:42:ba:44:f9:f7:d9:1f:3c:71:06:54:37:81:fe:04:67:8b:
37:f5:71:b3:82:c4:71:68:c4:5a:9d:fb:18:61:58:32:ed:62:
4b:7f:25:34:e7:50:df:f7:6a:9a:85:b0:4c:21:ef:a9:6d:14:
1e:0b:89:af:cf:8c:12:33:ac:a3:e0:85:ea:7e:5d:67:23:cc:
f4:b5:77:74:c0:12:e6:55:ab:b3:17:45:d6:0a:6b:f0:7b:9e:
4c:68:1e:17:02:40:f0:00:dc:38:90:4e:88:cd:9e:88:ac:61:
06:cd:2f:81:39:d6:0a:eb:1f:22:1e:8e:38:46:cb:b4:ae:be:
b9:71:a7:04:74:7b:50:61:de:07:6c:5a:33:02:5f:df:96:72:
a9:27:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:21 2025 by rpki-client