Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
File: w5XQGgjBWiERA86BBh4mgk9Wvdg.cer (raw, json)
Hash identifier: lhAVl2RBDQaNwBrQkVY3SdpMh5kC7vpUU0+qYh/O6go=
Subject key identifier: C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C1A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 12 Oct 2025 11:57:45 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 138.252.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27674 (0x6c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 12 11:57:45 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A918D1BD, serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:41:80:8e:6c:37:4f:f8:40:fe:20:c1:13:
3d:13:63:ce:23:d7:ac:aa:2f:85:63:4e:f2:03:1c:
9d:a5:27:98:f2:2e:da:5c:05:a3:c8:a2:e0:3f:f6:
6f:ac:4a:22:8a:5d:e0:db:ae:69:75:a4:6b:2d:59:
38:86:86:4c:d2:18:3c:0a:34:44:b5:8f:09:0a:0b:
8e:b1:da:96:5a:a4:41:b2:c5:60:5b:30:71:6d:5a:
58:d3:a5:77:81:66:13:48:89:ec:34:0d:3a:79:e0:
8f:11:4a:81:d5:87:71:49:bf:3a:f6:26:17:e9:1a:
50:5b:e7:7d:51:87:9f:84:31:71:cf:77:6d:4a:4a:
cd:50:05:04:e7:a2:0c:f2:c4:63:f1:32:69:57:34:
48:48:1d:51:4e:9c:9d:c4:55:0b:d9:4b:18:f0:93:
d3:e0:14:19:d7:de:3a:93:52:01:7c:de:ae:91:e3:
d3:f4:fa:70:53:c3:08:16:09:5e:7f:24:9f:d6:48:
6c:2b:3e:2e:52:34:d8:c1:f3:4c:81:4a:40:4a:0c:
d1:db:d1:c1:28:5c:82:53:18:98:46:37:c0:1a:64:
36:61:cc:59:2f:53:b6:cf:35:f5:f4:75:ad:3c:f2:
4b:c1:5d:70:40:ad:58:4e:d9:60:85:24:e7:02:65:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.20.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:1c:3d:c3:62:34:26:d8:6b:1a:4a:fe:6f:f8:cd:bc:40:2c:
93:f5:40:7b:1a:2f:17:14:b1:0b:69:f2:f1:8b:89:85:f2:0b:
e0:8b:29:fd:64:d2:c8:15:6e:1e:da:4c:b1:6e:09:dd:08:3f:
cd:50:b6:22:02:6e:af:bf:5c:81:6e:cc:cf:50:96:f8:fb:d7:
d5:c3:26:1a:d8:00:8f:83:b1:7a:04:17:1d:95:48:00:f7:f9:
54:1b:96:29:3b:4c:b9:12:51:7c:40:ff:75:cb:2f:ac:ca:4e:
3e:44:1e:df:84:11:89:4e:17:15:e5:fd:ae:cd:c0:95:ee:a7:
ca:19:dd:5d:5d:55:ca:49:a3:eb:26:37:7e:e5:92:43:d9:f6:
02:0b:55:db:be:ad:5f:93:27:f3:e6:fe:28:e4:31:a1:60:39:
e9:4c:89:97:1e:6e:6f:35:7a:fe:8b:b0:41:6b:3b:12:70:e5:
5e:f8:b5:8b:1e:5d:0c:61:24:b9:44:e0:6e:e7:16:79:e8:81:
3d:b9:3b:4b:0b:4f:63:17:b9:14:92:be:6d:86:31:06:03:c6:
8a:68:d9:cb:ba:4b:c0:b4:ce:b1:e0:2b:2c:31:a2:92:d9:5c:
9e:b7:2b:75:cb:8b:cd:64:18:dc:1d:47:5a:b4:7e:e8:90:30:
0a:79:15:87
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICbBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUxMDEyMTE1NzQ1WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4RDFCRDExMC8GA1UEBRMoQzM5NUQwMUEwOEMxNUEyMTExMDNDRTgx
MDYxRTI2ODI0RjU2QkREODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AM37QYCObDdP+ED+IMETPRNjziPXrKovhWNO8gMcnaUnmPIu2lwFo8ii4D/2b6xK
Iopd4NuuaXWkay1ZOIaGTNIYPAo0RLWPCQoLjrHallqkQbLFYFswcW1aWNOld4Fm
E0iJ7DQNOnngjxFKgdWHcUm/OvYmF+kaUFvnfVGHn4Qxcc93bUpKzVAFBOeiDPLE
Y/EyaVc0SEgdUU6cncRVC9lLGPCT0+AUGdfeOpNSAXzerpHj0/T6cFPDCBYJXn8k
n9ZIbCs+LlI02MHzTIFKQEoM0dvRwShcglMYmEY3wBpkNmHMWS9Tts819fR1rTzy
S8FdcECtWE7ZYIUk5wJlAgsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTDldAaCMFa
IREDzoEGHiaCT1a92DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQxQkQvQTcwNkY4QjJBNzYyMTFGMDhGREUzNDEzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThEMUJEL0E3MDZGOEIyQTc2MjExRjA4RkRFMzQxM0M0RjlBRTAyL3c1WFFHZ2pC
V2lFUkE4NkJCaDRtZ2s5V3ZkZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYr8FDANBgkqhkiG9w0BAQsFAAOCAQEAjxw9w2I0JthrGkr+b/jN
vEAsk/VAexovFxSxC2ny8YuJhfIL4Isp/WTSyBVuHtpMsW4J3Qg/zVC2IgJur79c
gW7Mz1CW+PvX1cMmGtgAj4OxegQXHZVIAPf5VBuWKTtMuRJRfED/dcsvrMpOPkQe
34QRiU4XFeX9rs3Ale6nyhndXV1Vykmj6yY3fuWSQ9n2AgtV276tX5Mn8+b+KOQx
oWA56UyJlx5ubzV6/ouwQWs7EnDlXvi1ix5dDGEkuUTgbucWeeiBPbk7SwtPYxe5
FJK+bYYxBgPGimjZy7pLwLTOseArLDGiktlcnrcrdcuLzWQY3B1HWrR+6JAwCnkV
hw==
-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:19 2025 by rpki-client