Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer (raw, json)
Hash identifier: BOG7Lhst/m4qjEYtYs6hLBnVAotsPHWZz8Iq6TTph7Y=
Subject key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C42
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Oct 2025 17:28:35 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 162.249.119.0/24
IP: 204.48.62.0/23
IP: 216.157.157.0 -- 216.157.159.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 05:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27714 (0x6c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 15 17:28:35 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b8:22:46:8d:6e:53:be:a8:83:af:22:de:15:
fc:ff:81:5f:14:59:49:ef:bd:6f:69:ae:51:01:96:
56:4d:db:15:6a:40:1f:00:2d:dd:c0:96:8a:14:32:
93:fc:35:e2:ca:07:2c:b6:b9:88:41:c7:41:91:46:
44:0c:59:4c:e9:1b:0c:68:a2:7a:f3:25:dc:b0:51:
2d:ce:b8:90:8b:16:fc:63:05:67:3f:97:9e:68:eb:
a0:53:bc:19:60:cf:d1:e2:59:3b:20:dd:e4:bc:a9:
66:21:9b:88:bd:43:fd:51:af:5b:35:b9:92:3e:e4:
a5:f6:a4:73:38:06:c0:d3:d0:cf:98:bf:f3:b7:bc:
31:e4:07:3c:e4:ed:bd:16:f8:04:0e:77:2b:d0:54:
77:d4:68:6b:eb:38:06:bd:69:af:6d:f0:8a:e6:94:
4b:38:e4:f1:36:25:47:17:ca:35:14:42:c1:2f:67:
94:f9:00:35:ab:4c:2d:2a:7e:99:03:73:54:56:97:
f7:e6:df:24:fd:b3:ae:5c:85:00:c2:fe:d2:04:f5:
f1:34:25:8f:02:f9:77:83:2b:d9:23:17:0d:c4:db:
55:79:ab:1d:de:93:3a:70:86:ea:07:7c:98:1d:7e:
8e:79:9f:87:49:cc:5b:46:4e:59:75:5d:5f:ee:ea:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.249.119.0/24
204.48.62.0/23
216.157.157.0-216.157.159.255
Signature Algorithm: sha256WithRSAEncryption
b3:80:d3:66:3a:86:23:5e:a9:57:2a:31:a2:97:74:71:be:6f:
5e:b6:40:68:26:ff:06:be:b8:00:60:87:3e:48:5a:2d:24:4d:
d1:88:f0:50:3a:d2:f0:6d:cf:64:b9:fa:a4:14:02:e7:f0:f5:
e8:05:ac:86:54:b6:59:3e:ff:37:c7:e3:02:e8:50:10:86:6c:
77:57:b2:0f:0e:1f:8e:ad:0a:2b:bd:98:a6:33:e3:12:b7:45:
38:ed:82:5c:ae:ba:17:4f:a4:52:54:a0:15:e0:6e:f5:09:2f:
b5:28:66:80:b6:cd:35:25:59:2a:57:98:23:1c:d8:65:33:a7:
3d:c3:a9:25:c5:6f:46:52:0d:12:71:44:56:c4:41:94:f2:cf:
3e:b9:99:12:aa:bb:8d:25:90:fe:b7:6e:c3:9b:1e:fd:95:78:
31:0f:df:49:b2:80:f9:5a:3c:39:0e:f3:54:b5:9a:af:4e:32:
eb:33:9f:a6:0c:43:0a:cc:d2:e1:dd:4b:a4:ea:eb:35:59:c6:
fa:92:8f:4f:1d:a9:96:7e:4b:d2:0e:83:c1:69:e9:ac:65:25:
e3:33:5b:69:c8:0a:f7:ec:3a:78:1e:88:7b:45:29:20:05:b3:
db:91:fa:73:38:81:62:46:99:0d:ec:d4:79:75:9d:af:90:c0:
30:81:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:55 2025 by rpki-client