Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
File: -cREz887ajdUceO1SHT8K0myxyY.cer (raw, json)
Hash identifier: yOGyoWU42AnSsxi5JaeUA3LQqReweQfIhyIZyGDPx/w=
Subject key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6ACC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 05 Sep 2025 21:19:45 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.174.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27340 (0x6acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 5 21:19:45 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:74:db:67:d6:b6:c3:4c:71:cb:70:ce:2b:
db:21:33:84:c6:10:2f:30:6f:f6:c1:0b:75:bf:8b:
f4:78:e6:3f:91:aa:90:6e:ba:e3:d7:64:39:2d:15:
e5:f6:6e:2c:3c:e8:2d:43:25:40:6f:84:d5:8c:4c:
ff:10:b8:04:d6:cf:a2:aa:d9:69:38:5a:8f:db:55:
3c:e6:07:1a:e7:3d:1c:23:42:80:8c:e0:e8:10:3e:
ea:3f:c9:9a:83:f8:7b:e2:38:c2:a1:96:7b:ff:ef:
fa:dc:9c:c4:9e:ad:9f:9b:9e:51:f8:58:b0:93:6f:
94:3e:59:54:33:87:01:47:4c:d1:ab:d5:8f:82:bb:
22:38:07:96:ff:af:fc:b4:7d:b7:c0:12:74:0c:8a:
59:41:fa:4c:c2:48:65:f3:ef:eb:10:c7:c9:a1:34:
f2:25:25:f4:87:0c:5f:65:23:d0:e7:b6:7f:cc:54:
d0:d3:f5:36:17:e3:47:33:10:31:be:f7:51:97:48:
6b:6d:f9:0a:e2:24:55:3e:02:7b:87:c3:8b:8e:16:
3c:1b:72:16:8b:17:37:1f:b0:6d:b7:74:6f:3d:85:
78:2f:33:a2:d2:62:58:ba:24:f2:45:a8:d9:ea:3e:
d1:53:17:6d:84:23:fb:99:98:87:a4:78:8f:b8:1d:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.174.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:54:58:37:46:df:2f:d0:24:87:eb:78:6a:db:1f:22:39:ea:
c2:b8:04:7a:0c:00:89:8c:88:0f:31:2a:bc:a6:4a:ee:90:eb:
86:a7:31:e7:1a:71:9a:9a:e6:c5:6c:71:27:78:9e:8c:25:d1:
b6:19:e6:fc:2b:d6:82:ac:d5:63:67:a1:ed:b8:e9:f5:72:ff:
e8:5d:74:5b:25:fe:d2:40:8a:7a:2c:77:d2:67:52:bd:38:4f:
d5:04:ab:a1:fe:ee:0c:c0:2a:e6:d1:c4:e3:99:8f:60:79:6b:
e8:bb:35:92:8e:3a:34:c7:af:2c:4f:a7:41:c9:af:2d:3a:7f:
68:68:b4:75:b6:ed:86:4d:34:4a:af:51:13:41:99:e6:b9:93:
bb:2b:a6:b3:a5:00:0b:8c:4b:03:a7:bb:6b:43:4c:42:d4:cc:
e3:6e:f8:fb:4b:a1:de:4f:50:8b:4b:90:b4:38:ce:04:82:cf:
18:04:fb:7d:bd:f6:b5:a2:43:42:ea:89:29:4b:3f:c7:40:d0:
2a:38:90:1a:47:4a:67:e4:d0:7c:37:8e:b7:a5:64:b8:85:1f:
43:da:17:67:84:7d:a6:9f:de:63:7e:a4:9c:70:b7:20:5d:a9:
68:fc:45:bd:a4:7e:7c:b6:10:84:0f:a7:d2:0a:ae:a5:e2:43:
0e:b5:f7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:29 2025 by rpki-client