Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
File: MtNTdDyP4vCOl7IuW2CavBTM_js.cer (raw, json)
Hash identifier: W4c2idkZeOYR1AQYmWwMD5xiU9C8KdfM1HW3rV7Q4/4=
Subject key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6B84
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Sep 2025 17:02:46 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 09:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27524 (0x6b84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 26 17:02:46 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:88:6b:b6:02:b5:4c:bd:18:39:93:f9:4a:
19:dc:8e:b6:5a:62:54:f4:a5:97:c9:78:7c:61:c7:
35:9f:fb:1a:5b:35:66:b2:e8:55:2b:4c:3b:31:a8:
7f:9f:6f:e0:7c:de:02:38:04:26:9b:ce:df:9f:c4:
ae:68:8e:5a:4f:71:aa:10:29:69:9d:ea:02:9c:e4:
ad:4d:af:2e:2a:92:01:4d:4f:cb:87:19:58:a2:71:
0f:cb:fa:05:19:6e:6c:86:af:01:37:af:77:8b:a6:
c3:76:c9:bd:5a:f7:37:bf:05:4f:71:ff:a4:57:01:
a1:c5:c2:29:75:17:78:c6:50:20:a7:af:3a:c2:67:
f6:e4:5b:b5:1e:d5:7e:b1:0d:2c:a8:0b:ec:00:ea:
b9:2f:6e:81:4b:55:e6:37:66:c2:86:a3:d1:1f:8c:
6c:0c:fc:a9:53:eb:f1:ae:1c:0c:52:7b:39:8d:3b:
68:e5:ee:88:4c:ec:3d:85:66:82:fe:57:50:35:37:
ea:7e:b2:7a:02:ff:50:60:e0:d6:ff:91:1c:05:97:
53:29:30:05:40:50:00:3f:02:9a:86:75:13:a6:db:
a3:bc:29:88:32:e1:33:9e:5c:ec:ee:cd:38:d0:0f:
52:2d:1a:a3:f5:c5:fa:21:21:f8:fb:e1:d9:cf:1e:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.178.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:30:bc:74:b8:b6:a1:d7:c3:52:54:ca:bb:d6:dc:6e:af:8f:
47:45:fd:c9:78:7e:e8:16:4f:b4:fc:5c:fe:94:b6:e5:05:73:
ec:eb:66:09:3d:07:f4:59:ee:12:ec:a6:14:49:95:90:12:fa:
2b:2d:62:19:fb:7a:69:28:7f:f6:ea:9b:d8:a1:1f:73:9f:2e:
5d:86:ff:93:ef:ad:18:87:96:d4:d8:0e:ca:8b:79:8a:a3:98:
ca:5a:1c:73:c2:15:39:20:a8:94:be:47:a2:c8:86:87:eb:e0:
2b:32:3d:35:c1:93:b3:03:ed:f2:ac:e1:49:4d:eb:08:d2:de:
14:42:1b:18:a5:33:8b:69:78:a7:79:5a:53:b2:f2:d7:6b:36:
07:3a:e4:f7:cf:8c:4d:12:6a:b5:ed:f9:39:62:57:88:86:77:
71:dd:28:6b:64:ff:93:a6:34:91:e6:e0:e5:d3:a2:2c:0c:a0:
e7:84:c1:64:2f:75:e0:08:73:90:36:46:3e:7c:0e:4b:01:fe:
77:40:c6:e9:a1:ee:dd:6f:d5:9f:ec:bd:c4:b8:a9:7c:df:bd:
f4:cc:ee:cf:e9:66:b3:f5:8c:ad:3a:5f:0a:61:32:8c:d0:5f:
36:ec:75:3f:f1:1d:f1:68:74:24:41:7f:37:1b:72:02:8c:47:
94:0e:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:30 2025 by rpki-client