Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
File: l8hXp1yabimLCaBh2PfOEHv50zM.cer (raw, json)
Hash identifier: NUcb+ZZlhVQG4Nc1Fzg8HirIoARxfO3nB590/a/olRg=
Subject key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4DD0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 11 Oct 2025 01:36:48 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 79.108.224.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19920 (0x4dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 11 01:36:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:0e:51:eb:97:ca:96:cb:aa:e4:9f:10:fb:
97:8a:fb:99:f5:60:dc:36:cb:57:15:ec:af:0b:e8:
f2:90:23:0b:f2:76:c1:a3:ac:42:80:6c:c3:76:6a:
d9:59:66:ab:b6:5e:14:73:38:ac:82:27:df:a0:ad:
5d:0c:43:98:1c:09:76:41:9a:f1:90:7d:3d:a8:a7:
80:51:36:94:42:25:a8:1a:8b:26:9f:eb:85:68:60:
2e:31:61:c1:f2:dd:97:08:93:c1:ce:50:00:9c:07:
51:26:8a:05:66:2d:fd:ed:df:bf:ea:88:5c:0b:b9:
25:4a:6b:18:d5:b8:8f:a4:c6:8d:3e:a6:76:fb:05:
cf:38:b3:21:48:af:1a:f6:e9:b4:6a:0e:31:70:0a:
b2:79:27:39:47:56:64:07:fa:8b:df:6e:f2:32:e6:
14:dd:4c:d7:c2:b0:0f:f9:27:93:34:20:f2:ed:27:
ba:9e:3e:29:ac:8c:6e:3b:37:98:23:64:d5:1d:d2:
41:f0:16:ac:ed:db:ef:37:3e:78:b9:27:2d:b2:52:
14:26:2b:2c:09:03:10:d6:67:57:6b:fd:38:0e:43:
7b:ea:09:03:8c:98:8f:36:df:11:53:a5:46:ac:95:
30:49:03:e1:8b:d2:c0:ef:f7:06:e3:66:59:b0:3f:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
79.108.224.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:24:ba:97:18:c8:5e:ed:72:d6:40:3b:a8:3b:54:89:19:d1:
41:30:e6:0a:a9:f1:bb:0c:3a:c1:c7:9a:ef:c7:32:73:39:ef:
0c:4d:59:7c:3e:46:e3:ae:e4:32:1c:c7:f9:33:de:35:d6:97:
81:84:13:03:5a:82:3a:ce:4f:78:fe:e6:b0:92:41:26:38:d7:
86:27:43:9e:7b:c7:1c:76:db:19:cc:7d:f3:24:28:3c:00:89:
97:a9:f3:b1:6d:e2:3f:5e:b3:7b:a0:b8:b6:e9:91:3c:71:32:
d7:54:7a:c1:1f:6d:0d:28:6d:23:30:6a:4e:7c:94:ae:69:17:
92:c5:ff:1a:e2:51:4c:fd:85:3a:54:55:5c:8e:f9:69:75:7a:
e6:d7:07:39:5e:4b:02:af:a8:ad:b2:0f:96:c0:fe:f6:04:8d:
45:fc:b8:70:5b:d6:54:93:a6:97:a9:90:66:02:34:5b:09:69:
dc:be:61:f2:8d:8d:86:c6:88:4a:03:66:a8:8b:74:d5:f9:63:
1b:41:f0:92:07:1b:47:0a:1c:17:ae:e6:bb:89:e4:65:69:3e:
04:01:aa:a3:8c:72:ab:61:5f:5b:a5:12:55:d7:b4:b3:17:a1:
69:3a:d3:4a:3b:8a:a2:f2:bc:f7:1d:83:bc:4c:6b:88:d9:8c:
8a:5a:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:56 2025 by rpki-client