Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
File: 8keuvQdfyMvz2bgFVp6rvueXWws.cer (raw, json)
Hash identifier: QelgRzONQT2oZyjK1I7vufZWozmzGKKrF5iymYIYzPg=
Subject key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6AF0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Sep 2025 15:41:16 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.96.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 09:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27376 (0x6af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 10 15:41:16 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:78:0a:e9:26:98:d2:a9:3e:ce:21:8b:cb:
7c:71:7e:c0:37:e3:d2:a0:b6:36:53:c1:32:f9:28:
ea:f7:4e:19:5c:0e:59:e7:7f:0c:c7:7e:6e:65:69:
16:f5:70:19:b1:88:9b:b5:18:59:be:4e:73:93:c6:
51:cc:2f:78:89:ab:52:16:8b:ef:eb:ca:e2:84:75:
ca:2a:98:c6:53:65:44:16:5e:9c:ae:bd:39:e7:66:
66:cc:92:a2:f3:00:73:b2:1f:f4:e6:67:c5:a3:fd:
0b:09:18:29:17:b9:ec:bf:b5:d3:b0:d1:13:8a:9f:
8a:df:7f:b8:dc:c7:00:51:3e:fc:bb:27:38:f9:df:
6b:b9:d9:65:d5:13:92:15:2d:f2:2f:f3:d6:6e:62:
2a:f4:0a:cb:94:29:d7:9b:6f:1b:ec:84:96:fe:2d:
dd:62:62:5c:55:11:e9:b3:6f:38:78:fd:3d:75:3d:
11:ba:ad:8a:40:84:19:8b:bb:67:5a:a9:e6:b1:83:
07:f5:99:5a:09:a2:c1:db:a2:8b:21:42:b3:23:59:
36:ed:b5:8e:3c:42:81:62:3b:22:50:37:2a:3a:8a:
71:ba:93:eb:28:25:82:3d:11:53:41:5d:05:05:4d:
52:e8:bd:ea:a2:36:ee:ac:b5:9c:14:0e:ae:c7:27:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.96.0/23
Signature Algorithm: sha256WithRSAEncryption
82:72:9e:a8:5b:06:62:76:45:04:24:d9:7f:46:f0:be:2e:ef:
c9:93:fb:d3:bf:36:c4:ec:85:aa:a7:48:21:c4:97:71:0f:ed:
43:64:a4:2d:92:ed:5b:a6:95:77:0f:ba:17:7a:d0:2c:87:2e:
cc:c3:03:d2:e5:8d:a4:4c:c6:fe:2a:a0:9c:01:ca:c6:8f:ce:
2c:67:6c:6b:a4:0f:96:06:e2:27:bc:c8:69:6a:f3:34:19:c4:
a3:e8:af:2f:fe:52:e6:54:1e:17:1c:dd:50:e9:26:58:b6:18:
14:8b:62:e3:f7:35:71:bd:8d:ad:dd:46:e3:8e:63:f2:ad:1e:
6f:cf:01:ad:9c:bf:d4:d9:ee:5c:46:ff:ec:3e:94:3f:51:8a:
42:4b:0d:a1:36:67:bc:a5:dc:f4:27:e7:50:2f:9d:de:a2:cb:
6e:61:c5:b2:0f:6b:a1:a4:ff:fc:74:d6:b0:bc:d8:de:f3:19:
e7:7a:53:70:13:84:a7:a9:90:b5:c2:4e:89:66:b7:14:4e:9d:
0a:bf:5e:30:d2:ae:1d:5b:8d:60:af:e5:e4:38:9e:5c:a7:28:
55:d2:df:41:5a:b5:fb:36:37:b3:ff:e9:e2:37:5b:fb:4e:1e:
76:52:fa:0b:d7:31:f8:32:77:1f:78:3b:84:84:b1:29:1a:82:
cc:31:c7:d8
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICavAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwOTEwMTU0MTE2WhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2NUE1ODExMC8GA1UEBRMoRjI0N0FFQkQwNzVGQzhDQkYzRDlCODA1
NTY5RUFCQkVFNzk3NUIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOHpeArpJpjSqT7OIYvLfHF+wDfj0qC2NlPBMvko6vdOGVwOWed/DMd+bmVpFvVw
GbGIm7UYWb5Oc5PGUcwveImrUhaL7+vK4oR1yiqYxlNlRBZenK69OedmZsySovMA
c7If9OZnxaP9CwkYKRe57L+107DRE4qfit9/uNzHAFE+/LsnOPnfa7nZZdUTkhUt
8i/z1m5iKvQKy5Qp15tvG+yElv4t3WJiXFUR6bNvOHj9PXU9EbqtikCEGYu7Z1qp
5rGDB/WZWgmiwduiiyFCsyNZNu21jjxCgWI7IlA3KjqKcbqT6yglgj0RU0FdBQVN
Uui96qI27qy1nBQOrscnzjcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTyR669B1/I
y/PZuAVWnqu+55dbCzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjVBNTgvRDZGMTA1MjI3QkZEMTFFRkE3QjhFQjVDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY1QTU4L0Q2RjEwNTIyN0JGRDExRUZBN0I4RUI1Q0M0RjlBRTAyLzhrZXV2UWRm
eU12ejJiZ0ZWcDZydnVlWFd3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaC7YDANBgkqhkiG9w0BAQsFAAOCAQEAgnKeqFsGYnZFBCTZf0bw
vi7vyZP70782xOyFqqdIIcSXcQ/tQ2SkLZLtW6aVdw+6F3rQLIcuzMMD0uWNpEzG
/iqgnAHKxo/OLGdsa6QPlgbiJ7zIaWrzNBnEo+ivL/5S5lQeFxzdUOkmWLYYFIti
4/c1cb2Nrd1G445j8q0eb88BrZy/1NnuXEb/7D6UP1GKQksNoTZnvKXc9CfnUC+d
3qLLbmHFsg9roaT//HTWsLzY3vMZ53pTcBOEp6mQtcJOiWa3FE6dCr9eMNKuHVuN
YK/l5DieXKcoVdLfQVq1+zY3s//p4jdb+04edlL6C9cx+DJ3H3g7hISxKRqCzDHH
2A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:58:43 2025 by rpki-client