Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
File: Zd_y7j-bsuskVR4dGPHWPewKbhc.cer (raw, json)
Hash identifier: BabTcerH+HmJh3wsjMH65y74eOuP3KN7m+oQzggzykI=
Subject key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BF3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Oct 2025 00:06:16 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 146.88.24.0/22
IP: 164.52.192.0/19
IP: 205.147.96.0/21
IP: 205.147.108.0/22
IP: 216.48.176.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 05:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27635 (0x6bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 8 00:06:16 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:ee:18:05:09:02:51:be:f7:6a:c3:7c:d7:
2f:c9:36:a6:30:03:a8:34:7d:2f:a6:d6:db:13:43:
e0:c6:53:0a:7a:26:4a:f0:b0:28:74:71:67:3f:5f:
6b:a0:19:1b:0e:ba:97:09:35:d8:fb:18:70:fd:f6:
72:9c:99:19:2a:fc:8e:f5:b9:2a:d3:db:26:26:b9:
89:48:e7:5c:dd:6c:76:07:ea:70:09:72:5e:5f:15:
fc:d8:b9:81:e0:c2:2e:04:f2:20:09:21:d9:d2:82:
98:7e:ec:96:69:df:71:fb:66:8e:63:a0:2a:38:e2:
76:9a:7b:8e:81:65:67:d2:e0:a5:5b:cf:30:69:82:
89:85:c0:9e:e8:d9:85:55:7a:08:41:ff:e2:fe:86:
5b:36:a5:3e:41:75:3c:d9:47:4e:ad:b7:b3:f5:26:
4a:f8:27:f6:13:e6:71:46:9c:02:f3:90:26:ba:40:
c3:97:90:4f:28:2e:f1:fc:65:95:ef:2c:79:c6:2e:
93:aa:c6:d1:e5:01:41:9e:92:cc:41:c7:97:74:aa:
b6:b9:a7:7c:f4:f8:d2:bf:7f:b7:4a:2f:d5:f0:db:
9a:6b:f6:0a:e4:a4:e9:63:7a:0e:b5:9a:24:60:7b:
07:ec:b6:61:c3:86:3c:ae:85:11:16:27:f6:ec:df:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.24.0/22
164.52.192.0/19
205.147.96.0/21
205.147.108.0/22
216.48.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:d0:79:bb:ab:e9:0d:5a:d0:1c:7a:4a:f8:22:ce:62:aa:bd:
63:c6:ef:c0:0a:dc:88:35:05:0b:aa:55:a6:e6:04:00:d5:ed:
65:d7:da:23:6e:0c:69:89:e7:a7:d7:9f:da:3f:d3:6c:ad:ac:
a6:37:9d:fb:27:da:b0:35:1d:9f:00:65:80:8a:62:32:ba:b2:
f5:c1:d6:6d:ed:98:75:c0:a2:34:54:9c:4c:3f:5c:be:a5:b5:
87:37:1a:75:e0:6d:f5:bf:01:af:58:63:18:f9:ef:ce:ac:0a:
f5:73:ad:3e:9e:d2:d2:52:58:9c:40:53:f0:7e:b8:1f:43:ea:
c9:79:49:cd:eb:24:46:5d:b1:c5:f3:31:97:40:70:e1:02:df:
23:e7:09:23:d4:33:48:7f:30:4f:8a:06:d9:34:9f:9a:dc:9b:
9c:65:71:03:5e:32:43:7e:9a:9f:07:c7:8e:25:c5:24:ef:40:
69:b9:17:26:58:20:14:8d:72:6a:9b:e3:8c:4b:07:0c:eb:01:
bc:86:bb:00:61:43:6b:33:29:7f:f2:e0:21:e9:b0:94:ef:92:
af:cb:92:63:80:be:ac:21:27:50:aa:b1:75:88:e2:4b:28:a7:
39:ae:2c:d5:ab:49:01:77:89:2b:89:30:36:aa:b8:50:bf:e0:
c2:fe:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:13 2025 by rpki-client