Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer
File: w373yMNE0xhYKbwsuZbIlKqoDvM.cer (raw, json)
Hash identifier: 1Oess38ntFv2YFVx3WztKjZAQhmxLlbwEEyLM0lT1Ho=
Subject key identifier: C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6AC1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Sep 2025 13:21:00 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.120.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 19:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27329 (0x6ac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 4 13:21:00 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A912756D, serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:2f:cf:a2:43:4d:2d:13:06:93:fe:2a:c5:
89:5d:c7:fe:1d:d2:59:c1:f9:fe:a1:63:9c:82:5c:
4b:4d:1c:da:de:bf:28:de:83:99:0a:62:45:ac:8a:
eb:20:b7:dd:b5:33:5d:46:dc:e8:cb:6c:8b:07:79:
77:6a:b2:a9:b2:ab:13:69:1e:4d:ab:1a:cf:45:16:
06:4d:c4:7f:96:5a:38:7e:15:5c:4f:44:70:b5:5f:
9c:87:6a:f0:99:da:9c:80:2f:61:2f:23:33:2f:13:
9d:57:9d:1e:37:ea:8b:7c:c0:c4:74:4f:04:e2:35:
bf:6c:85:29:36:02:60:1b:cf:55:46:b6:1c:7d:fd:
53:7c:3b:59:70:86:35:63:79:46:6e:a5:e9:75:02:
ec:dd:76:27:bb:10:3f:e6:12:ca:df:d4:d8:12:13:
8a:de:1e:73:68:ba:d9:21:64:ca:d2:fa:d1:c6:92:
d1:db:63:52:8e:7c:e7:34:89:26:7c:b5:30:2c:6d:
c0:da:e7:92:44:52:e7:a1:c1:bb:e1:10:1c:0f:4a:
8a:50:34:99:34:e1:06:b7:1d:6e:85:aa:17:84:86:
11:eb:d5:71:43:f7:44:9b:70:c5:e3:0e:28:10:93:
cd:33:79:9e:f8:42:b1:c5:de:54:a1:b7:f7:58:59:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:f6:70:96:a6:10:cb:70:75:8e:56:bf:09:f1:2d:a3:16:2c:
96:ab:01:ed:0e:7e:9b:5b:e9:f6:a5:86:16:03:ab:bf:48:f6:
d0:c2:e8:8c:74:18:5d:69:7d:60:61:16:f0:a2:3a:60:9d:29:
96:e6:b6:92:c5:ae:e8:c9:83:40:93:1d:d6:78:91:48:9a:23:
eb:e1:9a:89:dd:36:4b:52:e3:a0:3a:e9:34:61:2e:e2:f2:3a:
96:20:6a:a8:c5:d7:8a:fb:0a:59:03:0e:91:f0:7d:7b:1e:61:
14:b5:83:59:ef:2e:51:45:93:c6:43:94:48:79:a7:16:59:2b:
a3:20:30:8a:2c:1f:e7:5f:1b:a1:d1:3a:4e:98:b2:8c:30:34:
2a:b9:15:cb:24:d0:29:1f:87:0f:ef:ae:a0:24:d0:de:d4:0c:
6c:91:bf:78:1c:33:fd:15:11:67:dd:10:6c:81:b8:ca:84:50:
9a:ff:86:ae:9f:1a:18:de:37:bb:31:2d:99:9c:8d:63:5b:c1:
d0:3a:d7:21:e3:0a:49:ff:68:7c:a3:07:06:4b:2e:c5:86:26:
00:13:90:e5:b6:35:ff:ad:96:a8:8f:99:9d:4e:d8:4e:30:0d:
e0:e4:87:fc:3f:49:f0:a3:90:2a:81:76:ca:8c:50:f6:87:23:
f6:54:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:10 2025 by rpki-client