Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
File: M3WpYTTFczGvVN1xTtNj2rMba9A.cer (raw, json)
Hash identifier: Brc7msB//nxQTRa+eq4KGIPYtiqd5yer3t4Xvoo5KVA=
Subject key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6AFC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Sep 2025 12:30:11 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.68.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27388 (0x6afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 12 12:30:11 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:c2:fc:6a:eb:98:2c:19:2f:c4:ff:56:f0:
6d:9e:d5:bd:e6:c8:c3:4d:79:6e:6b:09:7a:6a:3d:
b3:38:ad:85:cc:c4:b4:f2:e1:14:fb:b5:e3:e8:3a:
59:f1:a0:8a:f1:bd:58:1e:7e:ce:a6:31:ed:8b:51:
ba:9e:f6:a9:6a:52:bb:89:ab:34:16:32:79:49:96:
49:ac:79:06:9b:59:cc:3d:d9:5f:01:47:3b:e0:a9:
39:fa:94:9c:e6:32:3b:87:cb:df:7a:23:74:86:c5:
22:0b:df:38:28:4b:d3:85:56:b3:c9:71:8f:38:9c:
38:24:ba:af:9a:79:24:d8:b8:69:d2:3f:43:c0:4f:
33:13:3e:01:e9:84:8c:64:6b:b1:67:d9:c7:5a:76:
dc:82:9b:bc:68:e6:89:93:e2:82:8b:22:30:3f:5c:
90:88:6a:aa:75:34:ef:59:52:66:06:38:4b:63:46:
30:64:d1:39:68:3b:eb:84:7c:b5:83:91:9f:7b:73:
6f:1e:42:68:fd:4b:50:35:77:ae:e3:ed:df:c8:86:
18:68:34:bb:39:0e:b1:36:e4:64:a7:7d:bc:7d:cc:
16:20:55:48:d5:fe:15:0b:02:a4:36:31:49:ab:73:
7d:0f:25:90:a8:2a:e3:bf:ee:9a:4f:40:20:2a:1c:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.68.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:a7:76:ae:de:88:30:ad:f3:04:67:9b:12:12:14:5e:33:23:
e1:84:b5:4c:ed:03:bb:5e:0e:48:10:a2:e5:40:27:19:a5:39:
bc:41:91:fb:59:1f:e4:37:15:da:26:aa:d7:dc:0b:19:c9:a3:
1a:35:fc:f0:9b:aa:10:0c:ea:ff:e9:fe:e1:04:30:ef:78:a0:
f1:5e:d0:9b:29:72:24:74:d3:1f:6d:c5:d9:2b:f4:fe:b9:55:
d8:97:60:0e:a4:61:dd:5b:d1:60:32:3e:dc:e2:d8:2f:90:f3:
89:b3:3d:7c:0d:f5:be:b4:c4:ee:7d:47:93:b5:e1:f3:10:93:
be:bc:ef:bd:3c:fc:50:cc:85:d7:11:f2:0f:40:75:76:6d:8e:
a5:49:1a:36:32:a7:f9:12:c6:58:9a:8e:33:ac:16:44:43:b8:
38:14:a1:00:4e:be:d9:dd:96:07:2e:56:bd:c7:7e:d2:d5:24:
2f:11:62:73:a7:6f:3c:15:e3:2c:e4:34:13:85:cd:1a:69:1d:
29:be:17:b9:32:56:4d:c7:88:de:63:98:d9:83:09:f1:ad:8e:
de:e2:e0:eb:45:19:65:43:b2:ef:28:8a:4e:5e:86:43:c9:1c:
7d:ea:24:d2:6f:d1:98:65:d4:c7:f0:40:f8:28:ce:8f:cf:3e:
1a:fc:e0:2d
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICavwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwOTEyMTIzMDExWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTExNTYyMDExMC8GA1UEBRMoMzM3NUE5NjEzNEM1NzMzMUFGNTRERDcx
NEVEMzYzREFCMzFCNkJEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKoXwvxq65gsGS/E/1bwbZ7VvebIw015bmsJemo9szithczEtPLhFPu14+g6WfGg
ivG9WB5+zqYx7YtRup72qWpSu4mrNBYyeUmWSax5BptZzD3ZXwFHO+CpOfqUnOYy
O4fL33ojdIbFIgvfOChL04VWs8lxjzicOCS6r5p5JNi4adI/Q8BPMxM+AemEjGRr
sWfZx1p23IKbvGjmiZPigosiMD9ckIhqqnU071lSZgY4S2NGMGTROWg764R8tYOR
n3tzbx5CaP1LUDV3ruPt38iGGGg0uzkOsTbkZKd9vH3MFiBVSNX+FQsCpDYxSatz
fQ8lkKgq47/umk9AICocXqsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQzdalhNMVz
Ma9U3XFO02Pasxtr0DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTU2MjAvMTRBMzc2NDQ2QkE5MTFFRkEzQjM0Njg0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE1NjIwLzE0QTM3NjQ0NkJBOTExRUZBM0IzNDY4NEM0RjlBRTAyL00zV3BZVFRG
Y3pHdlZOMXhUdE5qMnJNYmE5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAeRDANBgkqhkiG9w0BAQsFAAOCAQEATqd2rt6IMK3zBGebEhIU
XjMj4YS1TO0Du14OSBCi5UAnGaU5vEGR+1kf5DcV2iaq19wLGcmjGjX88JuqEAzq
/+n+4QQw73ig8V7QmylyJHTTH23F2Sv0/rlV2JdgDqRh3VvRYDI+3OLYL5DzibM9
fA31vrTE7n1Hk7Xh8xCTvrzvvTz8UMyF1xHyD0B1dm2OpUkaNjKn+RLGWJqOM6wW
REO4OBShAE6+2d2WBy5Wvcd+0tUkLxFic6dvPBXjLOQ0E4XNGmkdKb4XuTJWTceI
3mOY2YMJ8a2O3uLg60UZZUOy7yiKTl6GQ8kcfeok0m/RmGXUx/BA+CjOj88+Gvzg
LQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:09 2025 by rpki-client