Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer
File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer (raw, json)
Hash identifier: uyvsv30Bm2pU+6pXfRwrkiKCuc5gXmwC9awv8NtL4vE=
Subject key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6994
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Aug 2025 00:42:15 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 192.190.181.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27028 (0x6994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 7 00:42:15 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5f:4d:30:b1:a3:78:92:a1:4d:e4:d1:af:c5:
bc:49:07:b8:d5:b1:c4:99:bc:79:e0:04:5d:de:96:
a4:da:8c:81:be:9f:ae:bf:e2:75:8c:23:b3:92:65:
84:80:11:bd:90:af:a4:af:18:19:e9:5c:90:9b:fd:
33:9f:44:a6:b4:2a:46:2e:4d:64:33:66:42:d5:68:
07:ea:36:7c:da:d1:c7:45:89:d0:db:01:c2:8c:99:
44:ad:95:84:b3:39:e1:0c:cf:95:c2:a5:31:13:ed:
f4:3c:27:93:35:31:bd:f7:16:51:53:82:c0:2b:fb:
9f:60:c8:63:71:39:1e:76:19:bc:ce:a3:ce:46:45:
2c:d0:e7:40:bf:da:87:2d:9a:6c:7f:b3:51:ea:03:
48:ac:e8:b4:1f:60:b7:8c:b8:78:97:66:4c:9b:74:
50:e6:de:79:77:45:c6:4b:82:9c:0e:da:27:7a:38:
04:2f:04:ae:6c:cd:4a:21:43:2f:f8:7e:6f:a8:93:
f8:53:28:b0:0c:1e:2d:d2:51:ca:66:c9:87:d1:c9:
ba:c8:3e:a4:3b:75:c6:12:e0:92:59:5e:2d:14:a7:
69:5f:56:52:97:4a:0b:b4:30:e6:dd:37:a2:33:73:
67:84:d9:90:31:84:b7:9f:49:06:1d:07:b2:e7:5a:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.190.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e5:04:e1:6f:db:4c:65:8e:30:e4:41:dc:70:ae:3d:7e:d2:
1f:76:8b:d1:65:c9:85:1f:8e:39:55:5d:96:26:6d:91:59:90:
4b:d8:6b:7c:63:6e:0e:cf:2b:5e:18:d7:51:71:5b:1d:0b:4c:
7f:aa:d1:7e:3a:fa:29:2e:8a:e1:0d:c2:ef:04:99:11:a1:6b:
d9:89:63:7a:3f:47:e5:ec:8c:de:43:ce:4f:07:2e:ff:2e:80:
d9:f1:b4:8e:2e:dd:2e:a8:8c:19:9e:d3:14:d7:41:d8:b4:60:
99:26:07:2e:7f:78:2a:c6:f0:83:09:ba:83:27:ae:f2:cb:ef:
47:7b:58:38:a9:b0:06:bb:04:da:cb:2b:94:36:79:b3:e3:d7:
5a:52:70:10:65:7d:ad:8a:a3:fa:ec:75:9a:db:94:d1:0e:10:
79:eb:93:33:10:c0:8f:d5:ee:58:c4:a9:cf:0a:59:76:8f:5d:
20:3e:f1:bb:da:62:3e:79:73:d0:fa:3a:64:36:6c:f3:2c:3b:
2f:3e:12:fb:21:4a:6e:f8:d4:33:8b:b2:42:8e:51:80:43:20:
3e:4d:8b:6b:bf:1e:49:de:c3:bf:79:73:35:32:bd:2d:08:5b:
7d:89:c8:cf:f2:d3:1a:90:b8:c4:44:7d:9a:0f:6c:77:9f:f2:
c4:c6:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:55 2025 by rpki-client