Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer (raw, json)
Hash identifier: 2xWKpDJf9J8Xgh/SB0f2T6pN9ZiIIaR/7aP0pOnXaQU=
Subject key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6AF5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 Sep 2025 12:41:13 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 146.88.200.0/23
IP: 146.88.204.0/23
IP: 167.179.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 19:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27381 (0x6af5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 11 12:41:13 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:fb:25:38:4f:d3:44:8f:ef:1d:f5:1d:79:
54:d5:54:55:2c:aa:30:17:98:93:20:5f:21:c1:79:
f1:c6:5d:58:19:f9:32:e4:d9:bd:a7:10:51:fb:2c:
c5:0a:90:19:d1:89:e3:d7:10:e5:87:ed:d2:26:94:
03:88:93:16:21:25:71:ad:8d:0f:ea:1b:cb:21:e9:
25:47:33:9d:10:c2:ef:65:fd:7b:06:00:2d:4a:42:
9b:9d:4e:1e:6b:d6:81:28:0c:29:59:31:e8:bd:01:
52:b1:9f:b6:e1:5c:0d:7f:3e:09:0e:db:9e:9c:6d:
ae:15:89:d1:64:5a:1e:51:ab:cc:51:96:87:74:00:
a1:9e:e7:3c:12:54:74:5e:4d:bb:df:e2:3e:42:77:
e2:da:e5:23:47:76:49:5d:6b:9f:50:99:bf:bc:16:
ff:d7:40:5a:92:e7:81:14:88:0b:41:59:d6:3b:ec:
6d:07:e7:3c:fb:5e:f7:42:7f:46:87:a7:da:e9:0f:
7e:76:92:30:c1:90:42:4d:74:88:aa:de:b8:ca:c0:
ad:29:37:07:e8:bc:ad:bf:50:56:03:e1:e0:ed:e8:
47:fb:20:74:d1:9f:dc:a9:90:ae:5f:bc:ca:88:76:
18:e8:52:73:02:a0:5b:23:f8:50:a6:9b:2f:5b:15:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.200.0/23
146.88.204.0/23
167.179.20.0/23
Signature Algorithm: sha256WithRSAEncryption
59:19:e2:62:e5:7e:6c:46:97:01:e2:1e:2c:55:a3:85:c7:91:
83:05:25:37:dc:59:31:1e:47:df:b5:42:d6:6c:b8:e5:51:15:
36:6b:f8:f9:32:5e:42:b2:d1:2a:26:ae:bb:06:73:da:e7:57:
09:79:ac:af:b6:b0:cd:30:fb:e1:40:f8:4e:62:ae:ff:32:9e:
ab:a6:c3:2c:de:ff:5a:16:91:ed:ad:b9:d7:4d:b0:50:41:e1:
70:79:c8:4a:86:75:00:19:99:5d:1c:06:41:cc:b8:1c:74:8f:
2f:5a:cb:69:dc:1c:ff:c2:db:01:cc:67:44:da:9e:1d:8f:fb:
1d:b7:ea:29:36:0b:27:06:8b:9d:cc:57:81:09:a5:96:f3:fa:
ea:48:7d:bd:aa:6e:40:d6:3b:4b:a3:84:1b:28:e0:e5:70:19:
2c:f2:22:30:23:c0:f4:4e:c8:8e:8b:2d:49:ba:5e:38:50:3a:
03:2c:8a:35:f7:ee:9a:69:c0:e9:4f:5c:7a:18:eb:45:90:b2:
1a:25:ea:98:a8:65:36:da:52:26:d5:1a:84:be:c5:14:d0:ef:
43:c7:43:e8:c9:cf:77:f2:8c:60:57:94:fd:6f:ef:27:87:ae:
b0:11:70:ad:93:7a:ab:9b:d1:3b:81:45:70:cd:41:3a:08:fb:
4e:7e:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:54:24 2025 by rpki-client