Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
File: gcJvPY9BNuUZDMehfWr3IkIutm8.cer (raw, json)
Hash identifier: qHzw3+w9euoCOwlTpfjiw6HJnUVTMSZ+F3FE57YBzdI=
Subject key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C8F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 19:17:30 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.116.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 19:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27791 (0x6c8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 20 19:17:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c0:19:ef:46:14:d5:43:a1:b4:fc:e2:63:b3:
a0:5b:49:2b:65:60:93:4f:f8:e5:2f:89:e4:5c:13:
8c:cc:ce:96:fb:1b:91:b5:c9:e2:0e:30:e9:10:7b:
02:6d:9a:82:e7:06:17:56:43:29:ad:ba:6a:5e:21:
54:50:ac:ac:16:5c:bf:20:f7:88:5d:09:48:52:26:
31:4b:df:8e:62:e0:29:52:8e:55:9d:b4:7e:4a:9f:
45:90:d0:19:b6:b6:90:82:c5:d6:81:9c:74:3d:ee:
c6:b0:7c:7d:ba:3f:c4:d6:c2:3a:1d:08:57:a3:03:
b7:1e:12:54:8d:55:7a:15:e3:91:ba:66:1a:4f:81:
e0:94:ee:9e:34:24:fb:34:d8:50:8d:80:43:77:a3:
53:d4:39:d6:0f:10:0a:b4:44:bc:31:bf:22:60:f6:
0c:02:ec:6f:22:24:7f:d5:80:7d:d3:d5:8e:71:b2:
66:e4:d7:8a:28:60:3c:c8:79:3d:28:3d:09:99:a3:
e2:ca:95:4f:b8:b1:11:56:53:fb:1c:bc:14:56:bf:
cc:95:36:81:22:f1:2c:85:a5:6a:bf:ee:12:60:57:
e6:6b:92:35:83:d4:ab:5c:a4:ab:69:ae:a0:92:bb:
41:b0:40:e0:c3:16:85:1d:bf:f1:13:03:99:02:2c:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.116.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:b5:1e:21:e1:cf:d9:2e:7a:ae:4a:e0:6d:e8:ad:a9:54:23:
45:85:1b:b5:5b:cf:74:9c:9a:06:ec:09:af:50:a0:a6:da:d3:
1c:cf:29:f8:04:fe:9e:d8:6f:f6:30:8a:70:6c:db:6d:a3:98:
e8:cc:ca:78:e3:54:77:6f:dc:40:ed:ed:fe:f9:5a:f2:2d:28:
15:bb:73:7d:0d:ee:2f:de:11:6a:8e:92:7f:c5:a0:0b:11:dc:
84:46:ce:d6:49:b7:9c:80:41:f9:7a:54:f4:63:d3:36:9e:5b:
a1:36:24:b8:32:c2:42:86:57:9c:41:d8:b1:d0:8f:d7:17:16:
cc:02:1b:30:9d:c2:d0:bb:3c:a1:3b:48:c0:ce:82:b5:43:04:
82:68:0b:fd:e0:ca:35:b7:3c:ac:73:2b:59:36:ca:11:56:fe:
b1:38:f7:50:05:69:b8:f1:dc:f4:3b:9f:cd:b3:ac:4a:c4:b2:
4e:52:79:f1:8b:7d:5c:42:05:c1:33:30:62:e7:20:2d:30:9e:
45:e9:07:ef:38:83:1b:d9:1d:08:d7:bb:f0:e1:f6:59:c0:97:
33:cf:0d:a6:a0:59:14:ad:49:92:13:8d:1c:e5:73:5e:82:17:
5f:29:b9:62:d9:f2:c6:44:b3:b5:04:c7:75:68:aa:14:63:46:
98:7d:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:42:05 2025 by rpki-client