Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.cer (raw, json)
Hash identifier: T9cIeHWjDOBY7OB5Zx/7iHK6nnntkvcaXIF1Gqm4OuE=
Subject key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BF5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Oct 2025 02:11:31 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.18.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27637 (0x6bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 8 02:11:31 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:a3:48:39:3f:bf:c0:04:22:fa:52:39:e8:
2a:64:dc:35:6e:bd:24:22:cd:c1:df:cf:85:2b:bc:
65:51:fc:ad:b8:53:4c:47:c2:1f:3a:16:e6:79:11:
a4:d9:1c:cf:35:e9:42:a7:1b:2d:18:dd:a7:81:f6:
02:42:7d:49:ed:9a:3b:55:1d:05:2b:48:ba:d8:e7:
a4:f7:69:7d:e2:06:53:48:01:be:9d:1f:f0:13:7a:
87:03:c5:a7:2f:7a:5a:48:fb:60:2a:8d:9e:60:7c:
49:85:24:f9:2b:84:98:62:eb:86:53:94:99:37:98:
24:11:b5:de:08:4a:36:e2:6e:5b:35:7e:46:3f:33:
c1:fa:61:03:81:30:f4:76:13:2e:74:37:aa:39:51:
82:15:70:f8:d5:47:6c:e2:cd:85:0c:3e:7b:d8:c1:
d6:5f:4a:1e:e1:e9:92:ab:6f:95:3e:6f:e6:c8:f4:
ad:a6:fa:30:e6:08:e2:c1:db:eb:8e:0f:a2:0d:de:
ad:80:3d:75:1b:ba:73:06:43:b7:7a:2c:a4:ba:7f:
9b:87:2d:93:9d:88:5b:21:34:d4:be:cf:b0:ae:e8:
b7:ea:0b:65:c0:3e:3b:66:42:a6:a4:34:c5:48:fc:
c3:78:a8:c9:40:96:2f:ac:77:14:e4:7e:c9:33:9e:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.18.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:ad:3e:bd:61:fa:1f:c2:26:8e:13:ad:58:c0:5f:ad:7e:26:
cd:f6:3a:c8:65:c6:ff:3d:50:11:2b:54:5c:74:84:72:f3:e8:
d4:54:1a:2f:6c:9f:e8:03:af:6c:b4:f5:5f:56:0e:83:a1:a3:
6a:4f:f0:ca:d8:06:9c:88:c5:41:58:3f:99:c1:01:6b:95:3a:
62:b3:df:c7:74:fa:47:cd:38:5d:0a:5d:93:50:3b:96:36:87:
61:3c:22:6e:18:65:ec:32:09:4d:b2:1b:1b:4e:f8:81:cf:33:
eb:09:6c:c6:1f:84:18:83:28:0e:a1:4b:8c:5d:86:34:72:b7:
0b:75:62:4d:f1:2f:26:55:8d:53:cb:8f:8f:9a:fe:12:f6:01:
4b:f9:1c:c3:d2:20:80:e9:2e:ea:c2:32:82:d4:63:e6:41:7a:
24:13:33:6c:da:ff:93:86:b2:03:ba:93:ac:b8:76:f9:5b:e2:
ad:b3:5c:71:2d:3e:16:ce:2b:1f:b8:a9:7a:f7:c1:21:0a:9c:
0e:e0:84:1f:eb:b0:07:f6:d5:2e:2b:74:d7:09:f0:01:29:bb:
00:22:3a:75:0c:a2:5e:59:75:af:df:01:d6:88:f5:91:5b:4d:
a5:ad:00:6e:1e:06:26:91:c3:7e:95:d9:f2:b7:9b:46:1b:cf:
28:28:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:20 2025 by rpki-client