Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
File: mAzlu_LPNdYK47ByGKtcqRAULJA.cer (raw, json)
Hash identifier: Ye794fn8noD3D8i+RCt6gCXM5WMnD8dJnEnLBjPjGb4=
Subject key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6B66
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 Sep 2025 19:57:24 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 09:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27494 (0x6b66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 24 19:57:24 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:f7:fc:76:5f:7e:16:05:6c:f9:1b:93:58:
c5:33:07:70:3d:10:9c:5b:12:23:44:e4:56:a3:8b:
21:6c:7a:41:b5:08:71:6d:47:bf:7e:75:b3:a9:61:
f2:7e:13:62:41:65:2c:96:f9:9b:35:e3:70:76:84:
fb:32:64:f2:04:d3:ef:cf:d2:31:94:6f:6f:5c:bd:
cf:94:0a:ae:6b:96:a6:5f:35:c6:17:d2:fa:fd:c7:
60:1c:a1:fd:c0:94:f2:67:bc:9a:48:ce:b8:8b:0f:
f3:fc:bc:62:0e:85:6b:ed:ea:8d:b7:6e:18:0c:f6:
2d:2a:3b:f4:8a:e0:b0:7c:50:ca:85:74:9d:11:9a:
bd:96:eb:cc:8a:24:a6:f1:f7:8f:37:43:12:b0:99:
52:8a:1b:c4:30:a5:87:e8:5d:4b:f3:88:c3:75:1c:
3c:4c:a5:4a:3d:12:fd:7b:55:c8:9e:be:16:05:8d:
1a:02:71:41:73:a8:f3:56:88:5c:23:c1:2d:b7:a4:
17:f5:f8:cc:84:e2:73:c5:01:80:4f:3c:82:13:64:
6d:a5:c1:fc:ff:a1:bc:d3:ec:21:4f:53:c2:ef:21:
d0:6e:c2:0a:0e:b6:f8:07:b0:ad:bc:01:5f:60:15:
bc:61:45:e8:f4:bb:8b:a8:02:7b:fb:c4:64:a2:55:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.180.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:34:00:4d:d7:3a:8a:d5:03:88:62:43:0b:3d:58:35:19:a0:
d1:65:a7:4e:a7:86:d5:46:0f:d9:05:12:2e:c3:73:34:06:7b:
67:81:83:6d:f6:54:78:a1:45:14:f1:c9:8b:a8:f1:24:fb:73:
2f:d5:db:90:49:3a:23:6d:97:e1:83:57:d6:bd:83:a5:39:e6:
8b:40:08:d5:07:18:3b:91:75:10:5d:64:b5:ce:d8:fc:08:46:
6e:60:f2:79:8f:73:bb:02:e0:c1:d8:f9:d0:dd:5e:27:db:6a:
d0:55:bf:a1:c9:2a:d5:d0:03:bd:52:27:93:e4:5f:38:44:9c:
53:4b:84:2a:55:63:b8:48:8c:97:dc:85:6c:ab:0c:c9:b9:f3:
e0:1b:32:b7:70:32:97:e7:94:42:e0:1f:f6:b2:73:6e:25:c8:
1c:b1:0d:26:14:40:84:22:c9:09:4c:14:a8:94:5a:7d:03:9a:
fc:63:eb:5a:98:aa:9c:dc:75:7d:40:25:c6:d7:81:b3:04:9c:
cb:4b:b8:74:13:9a:84:50:a2:9d:f6:b5:2b:8c:d5:48:bb:34:
09:e4:ad:23:5f:0d:34:d5:b3:c9:91:ed:8c:9f:83:ed:dc:5e:
74:8d:f0:85:72:8d:0f:d9:fc:b9:9a:7a:89:2d:cb:76:81:b6:
5d:cb:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:00 2025 by rpki-client