Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
File: Iln4cJbkCts8hBgOKLVsPogi9lE.cer (raw, json)
Hash identifier: im+CsNiE7u0Bw72j1BXfQlnmJkK2WcYbzD8U1QCzedw=
Subject key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C72
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Oct 2025 23:45:37 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.10.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27762 (0x6c72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 17 23:45:37 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:e5:85:60:7c:e3:d1:c7:4a:17:00:f3:e6:
45:dc:38:2c:c8:e8:52:dc:3e:18:a4:22:23:19:3b:
ac:a5:65:03:d1:b1:4e:42:b8:52:14:3b:76:b2:6d:
67:cc:b3:6d:ec:c3:57:ff:20:0e:1d:13:12:a9:85:
f7:d1:29:0e:ad:f8:7f:04:52:ca:44:c8:01:29:86:
24:11:0d:14:47:42:3b:d2:73:f6:d4:84:15:9f:4a:
c6:8f:d7:9a:fe:6d:45:fe:33:9f:4c:9c:08:5d:0e:
cd:51:bb:09:7e:85:78:36:a1:0b:a4:60:5f:e7:9e:
de:b7:b2:df:25:77:da:c7:5d:e3:3a:2d:64:17:4f:
17:99:a0:dc:b6:00:a7:da:6e:00:37:5c:9b:76:48:
53:c6:0f:b2:01:26:e0:0b:32:dd:12:d9:1f:26:95:
f2:44:29:98:bc:99:70:02:c2:63:78:21:c4:8b:e3:
d2:ff:35:60:8f:b9:de:01:14:b5:c0:78:c1:9b:9a:
41:89:3b:b0:5c:0c:e7:12:ae:db:af:4f:77:a7:aa:
22:99:28:9b:6f:42:66:88:29:a9:54:ce:33:e5:5f:
53:c6:35:58:3d:f7:21:ef:35:f8:da:54:dc:3a:4f:
f5:3a:91:00:aa:29:ef:81:61:0c:31:ec:0e:84:2d:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.10.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:d2:55:e6:4a:7e:5d:8a:1d:67:f2:f4:3b:ed:b7:03:d0:91:
a5:c1:bb:05:7a:41:7c:29:28:a2:e8:d6:50:b1:81:0c:97:3b:
6c:ff:0d:a0:40:46:af:1a:71:ef:ae:75:de:19:df:47:08:80:
d7:96:7e:d6:52:42:eb:82:32:34:92:8e:ba:dd:86:6c:86:42:
12:a1:7f:73:ef:c6:a3:21:cb:11:3b:2e:81:0e:b7:e5:56:fc:
a9:d0:8c:d3:d9:47:10:61:80:94:b8:ea:36:b9:b2:00:20:fa:
00:09:eb:e2:ff:9d:3a:ed:8d:d7:ed:36:f0:e1:b3:b8:e8:44:
cc:33:2c:16:e7:02:a3:72:e3:7c:d1:f5:6f:61:d7:65:5b:68:
9c:2d:c6:04:49:cf:3f:ff:74:71:bf:78:9c:8e:0e:3e:cc:cd:
50:02:46:cd:49:b7:a2:18:ce:32:5d:a6:62:69:e3:44:9b:b2:
ce:ce:51:cc:21:ec:b7:a6:37:ae:ec:e5:b4:6b:f7:a4:2c:9f:
f3:52:12:c5:3e:92:e7:27:d6:91:32:68:18:68:63:97:8a:f6:
7f:23:0a:8a:9c:6b:a4:33:6c:f5:81:ae:8c:3f:fa:a6:1d:79:
54:50:f5:d4:4c:10:50:12:7c:20:6f:98:51:ba:48:63:10:ac:
3b:ae:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:03 2025 by rpki-client