Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
File: 9U-AgBarS7BveWqJRmfHC91I-_Y.cer (raw, json)
Hash identifier: 3XGTJEA7euN4lPUb2Qcj5o8bZPmhjXgzQraIyww8QE0=
Subject key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C3D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Oct 2025 09:13:39 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 107.6.124.0/24
IP: 160.187.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27709 (0x6c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 15 09:13:39 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:ca:21:f3:05:df:df:ef:2f:5b:8d:f1:0f:
f7:28:c7:b6:35:2d:23:e5:89:b5:5d:32:10:07:64:
a7:17:8b:cf:f5:24:3e:be:68:67:de:01:80:c7:62:
eb:81:8e:8d:50:56:3a:ed:a1:48:fe:ed:d7:a2:1d:
15:68:08:6c:dd:35:90:7d:89:34:3d:61:46:98:10:
f5:3c:cc:81:52:3f:0a:fc:72:63:1f:81:78:f4:41:
4f:a8:e6:d9:a8:e5:8a:c6:38:fd:3e:3d:4e:18:83:
7e:91:55:27:c1:cf:f5:53:0a:a4:3a:0c:52:de:29:
52:2d:e8:6b:65:fd:b3:c3:f9:d8:cc:76:66:4b:d6:
73:bc:13:f9:e9:7e:a8:24:09:e8:49:e4:c4:f0:d1:
f4:bc:6f:b9:13:4a:44:df:77:f1:b9:0c:15:a1:45:
d5:39:0c:5e:80:b8:12:ed:9b:f3:ca:ad:55:6a:88:
4f:65:7e:be:1d:b6:0c:02:de:04:4c:e1:10:c7:8f:
46:26:ee:07:73:85:61:49:c5:b4:12:7e:37:36:9a:
76:ad:9f:7d:d0:57:62:6e:ad:6a:64:e2:3a:7f:8a:
67:b1:65:7e:ae:a3:fe:1b:70:37:fc:a7:8c:9f:2c:
53:f1:6d:cc:a5:42:14:9e:33:1b:d3:f8:ba:62:22:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
107.6.124.0/24
160.187.32.0/23
Signature Algorithm: sha256WithRSAEncryption
05:91:8a:35:ae:0a:92:ba:bb:bc:ea:c2:cf:23:90:1f:c2:2b:
19:72:88:41:b5:4b:2f:bb:d8:f6:12:34:02:fc:f6:84:2a:59:
ab:aa:de:fc:bb:36:1e:c5:f3:6a:83:1e:f4:9f:31:92:86:25:
5f:fd:51:43:7c:9b:16:2f:71:d5:33:61:01:45:24:c8:42:04:
78:ac:e0:ef:64:e1:f7:3c:40:19:57:e9:c7:19:be:f5:cf:e8:
6a:ea:9e:8f:a4:dd:9e:40:9d:74:e6:43:6a:2d:d0:49:32:ae:
8d:96:ba:c4:f8:9f:73:5c:f2:90:a0:b4:67:9f:ef:c8:19:5d:
f7:24:e2:b5:c8:ce:6a:79:c4:2d:df:4e:44:e2:74:d8:16:d9:
1f:d7:79:df:39:82:87:6e:73:70:b1:f5:23:45:90:dd:68:c8:
ae:63:0f:e4:b5:11:a5:de:26:a6:38:7e:23:6d:b7:07:a7:d8:
32:83:a2:cb:e2:0f:5f:10:cc:7f:12:d1:54:ec:4c:1c:58:86:
dd:5d:73:02:2b:f4:56:ed:e5:79:07:18:28:de:8b:b2:69:b0:
ab:5e:f6:c4:6e:30:a9:f3:e4:c1:12:36:67:91:79:33:a2:bb:
ab:5d:78:ca:e2:9e:2b:ab:06:43:6f:b2:b3:63:9e:00:a0:af:
8a:ab:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:59 2025 by rpki-client