Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
File: _Z1_Zg86Ewyki-u6ZuFivTA0440.cer (raw, json)
Hash identifier: QDUvO4SqLRBGrU9yMj60jg0cFzFgv8pXTQZn0zqynD4=
Subject key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C77
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 18 Oct 2025 14:09:21 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27767 (0x6c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 18 14:09:21 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:7a:37:8d:36:69:b4:9a:f6:74:7e:f6:4f:
22:8e:e3:81:14:fb:1c:3c:fb:6a:9d:be:fb:eb:0e:
a8:b0:73:9e:22:c6:18:9e:02:ea:9e:0e:fb:71:e4:
f6:95:89:fe:14:ca:9a:ca:c3:f2:b3:83:85:5d:4d:
6b:14:71:8b:92:f2:e8:a0:ad:13:fb:c4:6e:0f:27:
00:d1:d2:a6:74:2e:82:b4:8b:90:de:19:c5:7c:41:
26:43:be:b1:1d:e8:25:76:30:52:6e:a8:9e:73:7a:
a7:62:ca:51:12:c2:a1:e8:43:a6:63:a1:f4:fe:72:
7e:f3:58:26:dd:53:af:eb:c7:df:4f:04:69:39:c4:
38:03:8e:7f:cb:0e:53:5e:af:18:2b:e4:30:5e:dc:
e7:39:fc:7e:a6:af:cf:ec:45:ec:48:73:a6:89:97:
04:c2:07:fb:62:80:c3:f7:93:f6:e3:6f:95:6f:42:
02:11:3c:69:42:9e:14:f6:ba:7c:b4:6f:fa:42:7b:
12:68:81:77:45:c0:4d:a5:3a:3e:cd:76:d3:06:4c:
59:3f:93:3f:fa:05:3c:f2:dc:45:b1:ab:fa:64:bf:
cf:d1:ed:69:2a:98:90:bb:b0:7e:67:1e:c4:6d:7a:
4e:5b:d2:cb:ac:2f:0c:d6:d2:48:3a:a6:b8:52:2b:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.20.0/23
Signature Algorithm: sha256WithRSAEncryption
05:cf:7d:84:fd:1c:e1:94:7d:dc:a9:b9:ee:29:7b:60:91:2d:
8b:79:9b:da:6d:55:03:17:bc:05:d1:ba:1b:60:ee:d2:99:a7:
7e:fe:9d:87:ed:db:47:4a:cc:0d:59:d7:b7:81:ec:ac:51:02:
f5:a6:7a:4a:f5:c5:a7:7a:1d:77:d1:c6:a4:1f:cb:0a:2e:83:
a9:ec:f8:44:2e:d6:f1:cf:02:6c:a9:fa:9f:b3:55:df:cc:32:
3b:7a:66:0e:86:b6:ce:18:6d:5c:a2:d2:13:91:b5:cf:f8:42:
cb:e7:0b:59:b2:72:13:9a:f5:b1:ea:4f:a9:b4:bb:82:95:3d:
4a:c0:24:b8:5c:c6:f7:d7:d2:63:b8:12:ed:3d:db:d2:2d:72:
b8:8b:6f:78:da:72:e1:e4:02:94:61:3f:30:6e:53:b3:46:4c:
58:c0:fb:c0:a5:64:84:6d:35:67:ce:d9:33:d9:f6:ce:75:c8:
49:8c:93:4c:7c:5f:d3:4c:af:aa:73:74:7d:39:4d:1e:17:bf:
18:bc:19:39:cb:64:0a:88:dc:74:c7:47:b6:c3:54:41:1b:80:
93:91:c9:e1:66:2e:bd:16:9a:f5:6a:b3:5e:ff:26:1e:94:9a:
e8:7e:1d:af:0a:0e:9a:f4:fc:5f:28:04:01:1b:42:83:3f:30:
cb:07:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:41 2025 by rpki-client