Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
File: pObuKivUtt87NTuua8SJKm047yk.cer (raw, json)
Hash identifier: 0KTT25ZSKAp7JLpKE1N5FjiRN/HjSiJZGaxmcEV16n0=
Subject key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4D9E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Oct 2025 12:31:24 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 185.203.36.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19870 (0x4d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 1 12:31:24 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:db:9c:d4:ca:12:b5:0a:d3:72:e6:ad:34:
99:83:cb:40:16:3d:e0:b7:5b:f6:e0:90:08:08:38:
6b:cb:0d:4d:d1:b8:53:fd:46:d8:44:79:26:bc:76:
96:91:50:6f:88:b2:3b:82:27:90:7e:58:59:97:d7:
ab:47:ce:b9:c0:24:21:e8:85:ea:02:52:6d:9c:a2:
cd:8d:98:16:bb:6b:d6:7b:ab:40:d2:ef:2e:29:66:
55:66:23:61:1c:c9:2f:85:ba:52:fe:2a:80:e3:3a:
ce:eb:37:13:9c:d2:e3:f7:fb:48:20:92:1e:84:b7:
37:3a:b6:68:b7:80:5b:2f:0b:cf:38:dc:78:cc:04:
27:c9:00:b6:c2:1a:6f:94:39:04:5e:a4:3d:09:6c:
11:d8:e1:fa:e3:43:47:c7:e8:c8:2f:1f:44:9e:1e:
c7:d7:04:e2:7a:87:c7:56:5d:c4:23:d0:91:10:0d:
08:10:8e:0b:13:26:51:bd:d7:dd:55:90:e4:e6:54:
fd:bd:00:ce:78:d6:1c:06:c6:af:1c:9c:b5:59:f5:
d0:b8:52:5e:8f:42:6a:22:d3:78:85:8b:01:d4:5c:
ef:03:1c:7c:df:e6:ce:75:22:b8:07:ce:6d:7d:51:
fa:3d:5e:87:3e:91:61:05:71:b3:e2:9e:3c:fc:bc:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.203.36.0/22
Signature Algorithm: sha256WithRSAEncryption
27:17:0a:af:62:f8:b1:d6:1b:c1:89:98:94:b4:b6:75:24:58:
6c:92:5a:f9:c9:37:84:10:e2:84:ed:48:98:83:36:33:16:f8:
0f:1c:28:43:73:aa:46:69:e9:69:f3:a0:4d:c4:7d:44:11:3d:
69:92:42:04:82:65:b8:3a:c7:29:19:a4:bc:f2:3a:07:9b:52:
51:8e:52:8b:12:2b:9b:8b:02:71:ef:0e:f5:91:1e:7c:7d:25:
98:48:f7:b8:9c:c7:63:fb:6a:85:93:da:3c:4f:ed:42:4a:12:
86:57:b3:4d:67:31:a5:c1:47:4d:e9:09:fc:9f:85:12:78:88:
e1:82:8d:68:02:58:5e:90:dc:9e:fa:f6:66:af:50:dd:7a:df:
f6:46:69:40:43:b5:91:97:dc:2f:2c:06:23:c9:3f:0f:3d:fa:
67:a9:ff:62:e4:5d:1b:e6:c1:77:0b:c0:39:f2:07:b2:f2:a9:
7e:63:e9:e8:de:59:d8:c7:12:a3:0c:07:80:6b:9f:2d:34:33:
e1:f0:56:86:71:86:76:7e:e9:2c:f6:5f:ad:e9:56:8f:af:5a:
fc:0b:35:a1:22:43:77:d6:d7:78:b7:ad:26:e8:9c:a1:a9:60:
5e:03:b4:13:f4:d2:2b:30:9a:9e:f3:0a:5c:37:af:97:59:6c:
36:d9:27:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:08 2025 by rpki-client