Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
File: jqW5VjInwuWNQ4vBe6giUHVCRDs.cer (raw, json)
Hash identifier: gnkqV3gkZDSD3SAhyrjGqQ75yBdmUZxONZ+4zKizIQc=
Subject key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Sep 2025 22:41:00 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.238.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 09:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27561 (0x6ba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 30 22:41:00 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:03:68:41:76:60:77:6b:c1:3d:61:fe:50:
51:fd:e7:a3:ec:df:19:7b:d3:dc:af:22:64:17:99:
a4:7c:84:1f:05:68:1b:da:6f:7e:63:3e:da:cb:6a:
89:2f:75:44:ff:6b:0e:db:cc:5e:f4:fc:b1:2c:0e:
c5:58:34:7f:f8:c3:63:bb:a9:22:56:19:4c:0d:fc:
1d:f2:13:1d:fb:34:75:13:e0:40:03:40:e5:94:18:
79:82:63:50:a1:fe:f2:94:a9:a2:8d:79:51:f5:c3:
39:7b:78:a5:dd:48:22:3d:f2:8c:a8:01:af:f4:f6:
7e:dd:7d:ec:e9:14:be:3d:9a:a5:7b:7e:23:4f:0b:
83:9f:f9:c0:e3:50:91:f5:9c:94:a6:81:b6:82:42:
5c:b8:d4:2b:b3:41:13:e8:3c:fc:16:af:7e:e7:2c:
56:7d:5f:93:a6:cd:7d:d6:5d:d0:c7:49:4c:c2:83:
72:87:6e:02:c6:ec:33:8e:94:85:3d:7f:e7:6a:f3:
2e:b9:0c:32:f8:ef:0c:a7:f0:66:45:0b:69:3a:ce:
04:93:1e:59:87:de:fb:10:61:90:45:12:aa:fc:9e:
03:ed:91:34:ee:80:f4:07:05:3a:8f:30:20:f0:97:
b8:77:9d:ae:3e:07:e9:ce:32:3f:b3:6a:9f:9f:9c:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.238.0/23
Signature Algorithm: sha256WithRSAEncryption
42:58:ea:02:c8:3d:f4:c9:78:2f:ca:35:a0:ae:6b:d0:61:03:
f1:9d:dc:e0:7b:95:e9:12:54:71:44:69:3b:1c:dc:18:6b:80:
ad:aa:de:ff:af:06:e8:6f:51:60:43:c0:a1:75:3d:bb:8a:c7:
70:72:ab:de:36:44:03:3f:01:85:59:4c:26:cc:6a:59:dd:c1:
33:de:5b:e4:58:a1:3a:8c:07:90:f4:c2:ed:62:d4:b6:49:c8:
e6:a5:d2:5f:5f:cf:44:29:94:91:64:05:88:bb:36:92:23:14:
0d:1a:5a:02:3e:d0:81:2a:13:16:c3:d3:d3:f3:4f:50:c2:99:
5c:5b:f4:8a:54:4c:75:90:65:49:99:8b:57:fb:c6:0e:34:b5:
c0:00:8b:a4:8f:ad:ae:63:0d:ea:91:8e:89:70:2f:1a:41:08:
ca:00:9d:61:37:eb:e3:d9:80:c8:f7:f2:ef:2f:65:3a:73:c3:
7a:4d:b3:00:98:88:8d:64:e6:79:f1:71:b3:df:00:9a:61:e8:
5c:74:6b:b0:83:c2:b3:e6:b0:3f:ed:8d:6a:6a:3d:a7:a7:16:
cc:7e:4b:1b:f7:48:e0:2c:3d:de:31:7c:91:b4:07:5f:62:d9:
2b:18:13:52:61:5d:68:19:8c:97:ed:db:33:33:f5:b6:6c:0b:
12:f8:cb:1d
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICa6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwOTMwMjI0MTAwWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCMERFMDExMC8GA1UEBRMoOEVBNUI5NTYzMjI3QzJFNThENDM4QkMx
N0JBODIyNTA3NTQyNDQzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMLoA2hBdmB3a8E9Yf5QUf3no+zfGXvT3K8iZBeZpHyEHwVoG9pvfmM+2stqiS91
RP9rDtvMXvT8sSwOxVg0f/jDY7upIlYZTA38HfITHfs0dRPgQANA5ZQYeYJjUKH+
8pSpoo15UfXDOXt4pd1IIj3yjKgBr/T2ft197OkUvj2apXt+I08Lg5/5wONQkfWc
lKaBtoJCXLjUK7NBE+g8/BavfucsVn1fk6bNfdZd0MdJTMKDcoduAsbsM46UhT1/
52rzLrkMMvjvDKfwZkULaTrOBJMeWYfe+xBhkEUSqvyeA+2RNO6A9AcFOo8wIPCX
uHedrj4H6c4yP7Nqn5+cRusCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSOpblWMifC
5Y1Di8F7qCJQdUJEOzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjBERTAvNzA0MEE4RTg2QTg1MTFFRkIxNTY4MTQ3QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIwREUwLzcwNDBBOEU4NkE4NTExRUZCMTU2ODE0N0M0RjlBRTAyL2pxVzVWaklu
d3VXTlE0dkJlNmdpVUhWQ1JEcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAe7jANBgkqhkiG9w0BAQsFAAOCAQEAQljqAsg99Ml4L8o1oK5r
0GED8Z3c4HuV6RJUcURpOxzcGGuArare/68G6G9RYEPAoXU9u4rHcHKr3jZEAz8B
hVlMJsxqWd3BM95b5FihOowHkPTC7WLUtknI5qXSX1/PRCmUkWQFiLs2kiMUDRpa
Aj7QgSoTFsPT0/NPUMKZXFv0ilRMdZBlSZmLV/vGDjS1wACLpI+trmMN6pGOiXAv
GkEIygCdYTfr49mAyPfy7y9lOnPDek2zAJiIjWTmefFxs98AmmHoXHRrsIPCs+aw
P+2Namo9p6cWzH5LG/dI4Cw93jF8kbQHX2LZKxgTUmFdaBmMl+3bMzP1tmwLEvjL
HQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:08:00 2025 by rpki-client