Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
File: JSwA6X56eGlZOIzyBKTH5kVYDGg.cer (raw, json)
Hash identifier: WMdh5t7MHO56YF8cy3btPTu7/A/YQLugMbcIfTzjhd4=
Subject key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4DA4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Oct 2025 03:52:02 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 193.36.72.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19876 (0x4da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 2 03:52:02 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:26:8b:ed:46:2b:f5:f0:76:e0:91:6e:89:
49:be:0d:2b:bb:c4:e4:e0:08:84:f1:18:60:de:de:
3b:d9:1f:9f:68:12:ab:bf:4f:19:2e:4d:a1:15:9d:
07:da:8e:e2:98:78:2a:0e:a9:9c:59:cc:95:e4:73:
96:ef:c6:d6:83:ca:e1:9d:31:88:8e:3b:37:e7:24:
89:6d:f0:f7:97:ce:b5:9f:23:14:ed:5b:18:84:35:
9e:49:a2:8c:51:4a:87:00:69:5e:9b:9a:e4:9e:e5:
49:29:d9:26:ce:07:b5:8f:4b:ba:a9:4e:c5:c0:29:
53:40:89:2a:35:58:59:53:ea:ba:c9:70:a9:f0:8f:
23:86:6e:0c:3a:a0:b2:59:33:80:73:79:eb:83:c5:
72:53:23:10:1f:47:b4:d8:45:8a:61:96:12:73:46:
a8:82:cc:c1:21:73:a3:db:69:c9:c8:36:8a:d8:98:
43:c8:1d:41:6a:75:4d:ed:08:95:b1:1d:f1:93:c3:
02:33:f1:84:11:03:ee:af:7e:b5:c9:ee:60:c8:3b:
c4:09:00:1b:d5:12:e5:3c:c3:f6:ca:99:c3:c9:9d:
9b:d3:af:be:b5:1b:6a:1b:0b:0e:37:51:60:cb:df:
d3:d1:63:dc:b1:e7:09:a3:ee:25:3c:b7:ce:61:92:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.36.72.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a6:ac:a6:fe:fd:47:d4:6c:fe:98:fe:c5:ec:5f:b6:a3:ed:
b3:75:ba:10:50:08:2e:ad:2d:02:33:30:9a:6e:c4:4a:0b:e3:
38:46:a8:b6:4a:33:24:7e:19:d4:53:22:41:73:16:50:8e:b4:
d6:49:57:89:24:87:c1:ed:e6:03:7a:da:e4:7c:e2:d1:b1:79:
6b:e7:46:ac:37:5d:87:18:c8:89:87:83:ad:f9:73:ab:61:cb:
51:45:f5:d8:f1:42:dc:e1:7f:be:8d:bd:fd:62:17:30:f7:a7:
7d:fe:d9:95:0c:fe:6e:4a:51:07:60:fa:ea:f1:74:62:f2:3e:
99:ce:91:12:91:4c:77:ba:31:ca:ec:79:83:31:a0:df:7d:df:
a5:35:6c:cd:d7:ab:a4:06:df:68:33:05:10:7d:c6:b9:51:51:
43:07:14:9b:74:fa:e4:b3:bb:a2:54:ee:3a:88:ad:fb:d5:22:
55:c3:91:c8:ab:7b:6a:e6:76:e6:0c:2a:ca:0f:7c:1e:e9:7a:
d0:f9:78:23:14:f1:ea:bf:58:86:2a:6a:18:df:de:d9:29:1d:
14:69:2a:60:53:b3:62:bd:ff:38:98:c2:ca:5f:e9:2d:72:f8:
fc:79:11:82:6c:ce:c1:02:7e:86:ce:7b:df:f2:55:8a:e9:b7:
39:c7:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:35:30 2025 by rpki-client