Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
File: w-IA1ABdmiPkv66uDtty6kPx0JY.cer (raw, json)
Hash identifier: jCBWWavA8vo2Ik5emB7fQR9LoxQ/CF3/vZqeYLFo0ww=
Subject key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6BD0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 04 Oct 2025 00:48:49 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 157.15.225.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27600 (0x6bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 4 00:48:49 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:cf:b9:a9:c7:7a:2e:29:d2:f4:50:0c:32:
9e:db:34:cd:f4:07:23:83:97:0a:6e:f8:0b:e4:71:
46:04:05:bb:ce:8c:9d:07:27:85:47:02:5c:14:f4:
6c:cc:e4:a6:36:b5:3c:70:04:a0:2f:61:ef:aa:5c:
70:a5:3c:0a:63:50:12:2a:24:61:0d:43:7e:c9:14:
89:44:7e:f4:06:8d:6d:0f:a5:86:80:87:37:9a:69:
77:09:f1:8f:06:6d:1f:58:a8:f0:32:a9:26:a5:52:
f6:ed:89:48:61:67:ae:aa:d6:c4:40:ab:cf:fb:85:
64:92:50:29:48:cd:de:15:27:01:59:78:ff:1d:dc:
62:ce:1f:d2:be:9c:a0:b0:0d:29:f4:79:13:ca:66:
63:ff:8b:13:63:76:44:a0:6a:6d:2f:88:c4:ff:23:
1d:02:81:8b:a2:c2:67:3a:c7:6e:40:49:80:6e:6b:
ab:0a:93:c7:21:ad:33:16:48:33:e8:7d:33:b2:c4:
f0:c8:94:39:c1:2e:7f:4b:c6:47:cb:5e:9c:13:77:
52:5c:09:2e:a0:50:0d:be:54:bb:8e:1a:d0:6e:d1:
ce:b2:be:b0:72:cb:0c:05:cf:47:84:7b:77:f7:93:
0f:90:41:0a:9c:7b:28:b5:37:68:ac:d7:5a:6b:d0:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.225.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5a:b8:e0:77:dc:83:b2:61:32:b5:aa:66:91:c5:59:7e:09:
08:c4:40:04:5c:b3:9b:47:42:a3:08:14:3a:fe:7b:3a:e6:bd:
f0:29:c2:2c:f0:bd:68:07:cb:c1:25:f0:4f:50:3a:24:14:81:
a2:fe:20:d4:bc:26:a6:05:6d:03:7e:bc:78:25:12:07:54:30:
2f:5f:c7:08:1f:ae:28:b3:6a:48:07:3f:e0:da:e1:55:ef:1c:
c4:84:e3:c2:1b:f0:b9:11:3e:0b:af:15:31:f1:83:9d:5c:69:
3b:49:a7:82:53:98:f6:7e:39:6d:e7:16:bd:86:b0:d5:b7:e5:
70:57:b8:fd:d5:08:58:d7:c0:d4:27:48:c3:17:11:9c:d5:79:
24:bb:9b:37:2b:bc:30:3f:7a:ba:05:90:f4:44:2e:6a:69:75:
48:5a:23:4e:c6:2f:2b:03:cd:b8:75:1e:dc:0b:8a:a4:ff:89:
2d:3a:94:89:76:09:8f:ca:3c:5e:90:6e:a4:1b:13:e8:cd:f1:
aa:2f:07:9f:52:42:03:1b:04:12:4c:f1:69:12:60:2e:a1:02:
29:5f:7d:b8:e0:9d:21:74:ed:4a:41:40:48:f4:e7:5e:65:0f:
b7:98:88:56:01:8d:04:39:bb:c8:24:d6:55:4d:4e:9c:b5:1f:
d4:df:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:10 2025 by rpki-client