Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
File: -luvRrfLLI40Y4OqgMs5ayuBxkw.cer (raw, json)
Hash identifier: FDWhxv1issUpOMMhe6hQQ2NwgYCbZcXEkeKPn3zbQN0=
Subject key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C82
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 05:16:39 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.30.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 09:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27778 (0x6c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 20 05:16:39 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:23:5c:88:b9:79:3a:b0:48:f5:bb:71:59:
06:30:95:4e:bb:30:14:62:a0:74:32:bf:11:e3:3a:
4c:ff:d9:91:e0:ed:ec:95:25:16:e7:2f:41:64:e4:
6d:06:55:b9:7a:d4:e8:6f:59:33:ae:50:7d:65:f0:
af:d3:70:cb:53:10:17:7b:ca:3d:7a:a6:c7:ea:28:
c2:c7:97:65:6f:b9:98:a0:bf:67:7d:44:bb:d5:ed:
ca:5f:39:2a:61:19:1d:03:fe:f8:ad:16:b8:46:38:
ea:44:cc:a1:8c:96:58:28:83:29:b1:6b:cc:b2:1b:
a7:78:9a:79:e8:ed:58:1c:cd:8d:39:bc:d2:26:b7:
75:e9:28:e6:c3:ec:24:78:26:68:4e:0d:63:54:88:
46:61:3f:bc:2c:b5:bd:3d:1e:77:d9:a4:63:5a:d7:
68:c4:bf:72:3e:d5:9f:0d:b4:50:90:3f:70:54:91:
7c:82:ba:ef:2d:af:0d:a8:2f:42:9c:4c:53:ed:b7:
c0:07:3e:f5:84:eb:18:8f:d2:ed:33:52:18:08:07:
fb:59:58:7b:9a:b8:80:9e:bf:42:82:b4:83:4c:5c:
fb:ec:06:e6:8e:cc:aa:28:b0:ee:b3:17:a0:92:a9:
cf:9c:6d:d8:62:1c:5e:0e:8b:9e:18:de:c3:e5:1d:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.30.0/23
Signature Algorithm: sha256WithRSAEncryption
be:62:65:cd:32:69:62:34:be:35:24:08:aa:19:6f:a6:77:55:
df:03:84:5e:86:4d:65:8f:8e:fe:ae:c3:26:8d:2e:47:45:44:
c7:0f:78:ed:f7:7b:28:64:a6:d0:ce:9e:9c:8f:8d:3b:7e:58:
09:5d:0e:12:96:b8:f0:87:70:9a:b3:10:20:69:3d:b8:71:e2:
81:a9:0e:98:0c:d7:60:0d:7e:50:cd:97:66:6e:56:5b:49:63:
65:ef:42:ac:05:4e:39:b5:23:57:0a:dd:67:1f:5e:1c:5b:3e:
aa:f4:a4:0e:11:be:40:f9:5e:2c:5d:d3:de:2f:b3:e1:51:e5:
b2:9a:2c:fb:07:91:57:fd:6e:0b:e4:91:54:6a:6e:53:8c:a5:
23:55:dd:34:c7:36:e6:62:d7:31:66:37:42:c3:d5:64:42:07:
7f:c1:99:25:9e:1a:77:7c:3b:8b:2b:b0:48:04:8b:58:f1:1f:
c6:96:cf:98:36:cd:1b:8d:99:ca:22:a4:0e:dc:82:49:3b:e6:
16:91:3e:35:ef:78:ea:1c:11:f8:fb:f9:1f:e9:b1:16:9d:f2:
46:58:04:ba:8a:32:e6:10:55:a2:9d:1b:31:9f:8e:f1:c6:f7:
32:f6:fd:7d:38:eb:5b:e7:23:5f:a5:de:7f:08:53:23:cb:58:
73:c0:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:53:36 2025 by rpki-client