Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer (raw, json)
Hash identifier: G5afwOQe+PU1gC4mmPoKlcPDqhoxOmCLJJOVnIW/PhI=
Subject key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BB9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Oct 2025 04:47:25 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.110.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 17:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27577 (0x6bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 2 04:47:25 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:49:22:69:c8:13:9b:7c:8d:5a:9e:95:a7:
d7:14:78:b9:c0:06:51:d4:65:90:c6:a7:40:19:b5:
ec:ff:c5:ba:d2:52:1b:9e:45:cf:0d:28:20:d8:8f:
03:8f:4c:b2:d9:11:98:ef:5d:bb:57:c0:8b:e1:16:
ce:f8:57:eb:b6:90:08:c5:bd:40:26:7c:35:be:35:
e8:f4:42:a5:88:bd:8c:d4:b5:79:f5:ef:71:8c:1c:
eb:4a:06:38:97:a7:72:e3:a0:65:98:e3:c2:3d:84:
d2:7c:5f:18:ee:25:be:77:82:0f:2f:e8:61:62:eb:
cd:28:a8:76:e6:04:c0:51:f2:f0:ac:ab:b2:87:40:
8f:99:23:cb:50:7d:92:97:88:b7:b2:45:d7:e8:49:
de:93:29:4e:a1:b3:40:42:52:9c:ed:85:c1:09:27:
5d:a4:b7:c0:b9:22:58:0d:52:5e:12:fa:de:bc:ac:
22:86:ce:13:94:d2:88:b5:09:81:47:dc:ff:3c:44:
8e:bd:2d:41:e8:20:a7:6d:32:c6:fd:e0:c1:23:d4:
76:b1:f4:9a:f7:40:e1:78:ce:cb:ff:02:a8:5c:25:
3f:b2:b8:73:04:12:ef:f4:22:00:21:0f:58:7c:a8:
dd:f3:53:19:1d:03:6e:86:02:46:5c:2a:82:08:84:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.110.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:77:e1:fa:af:9c:a5:56:86:c5:fb:42:97:01:3b:9a:9c:d3:
6c:4a:c4:8b:00:b6:cd:3c:d4:5a:2a:e2:d3:8b:99:0a:1d:79:
02:17:b3:6a:42:22:ff:48:74:be:72:17:b2:03:02:1e:b7:69:
1f:0b:af:f5:2f:49:36:be:95:b1:5c:ab:b2:71:41:7e:67:f3:
02:0c:38:e8:c1:52:7d:d2:62:a5:00:29:4e:19:2b:23:4f:90:
21:6d:c6:6c:54:b8:fb:2c:c5:31:cb:64:f4:ff:0a:fa:bd:ba:
60:7f:2e:26:a0:e5:24:5a:dd:34:14:cd:04:eb:55:08:8d:52:
01:cc:dd:66:d7:46:f5:c3:36:68:68:08:6d:78:b6:12:51:49:
0e:a3:34:db:44:09:b1:ca:db:9a:98:e2:10:26:d5:15:63:32:
ea:5e:de:28:2e:9e:2b:24:5e:1e:e8:56:c2:98:03:bf:8e:04:
a1:20:05:77:c5:e5:7f:7e:ea:8c:c4:2d:62:11:d7:3e:36:ac:
b2:5e:4c:f0:7b:a5:b0:10:d0:ae:41:ab:04:d0:e7:cb:75:7f:
f2:93:2e:f1:dd:0b:7e:b4:59:b4:47:3e:d1:f1:9e:0e:f3:6a:
91:12:0b:4d:fd:aa:25:02:1e:dd:72:be:a3:3c:f4:ea:d3:d8:
54:e6:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:11 2025 by rpki-client