Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
File: zuc6ldXM7gYufV66G1oScFLhJTg.cer (raw, json)
Hash identifier: 3UljxDMeXZbrjOApqzp3zTQeBEaAnJKvGIRb1pJbljM=
Subject key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6AB3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Sep 2025 06:27:15 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.76.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Sep 2025 03:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27315 (0x6ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 3 06:27:15 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:e1:da:5e:3f:54:60:ab:22:b2:3c:53:13:
85:ab:f0:5c:ef:81:28:41:30:0c:ca:61:29:49:59:
9a:c6:0d:bf:9c:9d:08:2f:ab:70:cd:27:61:0d:a1:
37:4b:d8:b8:47:6c:bf:6f:d6:d1:4d:d7:17:2f:97:
f7:c1:91:b7:55:c8:55:b0:13:2c:21:c2:bd:ed:67:
07:a3:1b:78:7c:a0:d3:c4:e7:10:b2:a0:21:8f:ba:
db:f9:10:e3:32:fa:f0:43:2b:64:0e:2e:42:89:b4:
40:98:cb:40:91:d1:98:ea:3f:71:4f:0a:8d:29:40:
97:56:6e:55:9b:3c:dd:38:38:1b:41:0c:c0:2c:06:
ff:6a:1f:f2:a9:75:c6:c7:59:70:2c:9b:2b:20:f1:
2b:3e:f9:70:de:7e:ca:47:5d:12:5b:15:0b:ef:27:
90:d0:95:56:3c:1f:4a:94:75:a2:f0:2a:e4:5b:00:
8a:59:0c:2d:69:47:94:40:38:73:66:54:3c:5f:9a:
1b:02:c2:5a:8d:47:15:94:21:fb:94:65:38:dd:3d:
9b:28:3e:f9:84:f6:4a:1a:6c:f8:b2:5e:28:bc:87:
d6:ec:16:ee:48:15:ce:a4:07:b3:f0:8b:b7:9a:be:
fb:48:ec:13:37:e6:36:ba:ed:2f:cf:ef:fb:d7:b0:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.76.0/23
Signature Algorithm: sha256WithRSAEncryption
56:f4:4d:7d:ce:d8:74:2d:36:14:f4:67:2f:dc:cf:e0:94:ff:
5c:3c:69:53:ce:4b:e5:cb:41:c4:ec:1f:fa:a6:68:63:02:a9:
be:2f:d8:92:5e:85:3d:7a:51:92:58:2d:a9:f2:a1:ba:13:9c:
ff:de:0d:04:b9:d9:a6:2e:fa:7b:2f:50:62:03:f7:fe:35:99:
01:28:3a:51:13:68:65:4f:da:3c:ab:04:b5:0f:b2:af:06:61:
04:04:98:e5:86:b1:ff:f8:cd:3a:d8:5b:1f:a1:f6:6d:11:71:
9c:3d:f2:2a:ac:bd:88:ab:62:07:94:aa:00:a6:69:03:26:65:
49:ce:79:ea:5e:c2:53:be:bb:1f:4f:27:0d:cf:e0:68:8a:3e:
98:0b:f7:7b:e9:fc:0d:63:9e:31:5b:5c:b0:a9:51:d3:cb:5b:
54:db:b6:45:7e:e8:1a:41:26:10:89:72:54:cb:1a:e2:7b:4b:
31:db:81:82:19:19:d5:54:eb:13:a4:c1:4d:45:f2:20:7a:55:
f3:15:72:79:a5:18:68:ca:3b:40:58:fe:44:3a:77:cb:6d:61:
e2:76:71:e0:9e:c5:68:8a:52:26:d3:39:2a:a8:7d:3a:60:c9:
e5:fd:cb:09:a3:49:26:8d:ae:15:75:71:77:ff:c7:53:c0:41:
32:c1:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 12:27:06 2025 by rpki-client