Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
File: wN0sVYV6kv_nzcuilJmD1IpCudg.cer (raw, json)
Hash identifier: v7DbANn0hh6zf1Dl7WPG0s1PDkZ9Unpp93dF46ZRkAI=
Subject key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6B00
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Sep 2025 14:01:28 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.141.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27392 (0x6b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 12 14:01:28 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:4c:39:a2:3a:67:41:66:90:11:46:fe:73:
4d:fa:a6:c3:1f:d5:74:17:57:6a:77:9b:73:de:66:
6d:7d:dc:30:2d:48:39:a5:13:58:52:55:37:69:1c:
b2:3e:f6:47:48:d3:da:06:d4:c9:1a:3b:1d:b3:05:
85:78:56:51:0c:83:97:96:1a:2f:f9:08:a7:24:01:
40:5e:67:50:7b:88:12:c7:9f:d5:cd:3b:ba:91:1a:
19:66:a5:e9:83:50:3b:1b:e8:b9:42:3f:f9:5e:55:
a1:14:63:d8:bd:16:c7:31:d2:6e:fc:bb:9a:5b:16:
57:b9:30:b4:d3:ee:c3:6d:14:47:66:dd:b4:ec:10:
c0:00:f2:51:19:06:9a:09:51:69:a5:c9:de:6b:06:
35:4f:2e:73:f6:d0:2f:ef:c0:e8:00:7c:1d:85:55:
7d:a8:0a:c9:f4:2f:2b:b6:3b:23:3e:41:27:d4:ff:
61:22:7e:d4:ec:6d:e6:76:34:f7:2a:7c:30:ee:cb:
36:d0:4a:4a:fc:28:5f:4c:4f:b7:e4:da:dd:96:fa:
bd:10:d1:bd:5c:ef:aa:e1:8c:cf:97:05:f5:03:23:
76:3f:14:d6:6b:98:54:8f:53:27:e2:f1:58:89:3f:
08:35:03:38:88:19:78:12:6e:3a:7c:57:43:7b:db:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.141.0/24
Signature Algorithm: sha256WithRSAEncryption
66:de:1d:a4:ac:b4:0f:58:46:cf:4f:fb:75:a3:46:4f:91:aa:
5b:71:44:b4:a5:85:2b:cc:08:3a:8f:9d:49:e8:c6:7a:28:51:
a0:80:e2:34:2f:41:33:78:21:3e:f6:85:14:bd:aa:e8:d8:21:
f1:e1:2f:27:c6:1c:4f:fb:f1:11:4b:33:f2:29:03:ca:c8:e5:
66:ea:e0:c4:c1:8c:ee:90:7c:66:27:85:76:e6:be:fd:61:26:
42:8c:f9:e1:96:3f:ed:91:d5:53:8a:85:62:6f:07:03:29:02:
76:b5:48:a2:e3:08:f8:cc:43:7e:9d:5e:cf:ba:4c:2a:15:a5:
99:20:cc:61:08:09:e9:09:f0:1b:f0:27:40:be:5b:f7:ab:73:
3e:0d:ae:58:39:9b:89:a1:03:51:9c:17:97:6c:b2:60:87:11:
88:4a:30:8d:9c:87:d7:25:0c:08:0d:43:67:21:9a:45:f6:a6:
21:6f:0e:25:98:93:46:91:2e:3b:a1:81:21:29:59:01:bc:41:
22:9c:06:8f:57:09:e8:0d:9f:71:50:c7:07:6c:18:0a:78:53:
de:34:cf:81:b9:a5:9b:fa:c5:ed:07:81:2c:34:a0:a8:52:52:
6c:11:97:25:06:c8:32:e2:c2:55:e6:f3:19:7f:0a:1f:16:04:
d9:51:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:45 2025 by rpki-client