Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer (raw, json)
Hash identifier: Y7vhDnqyw64FW067QT41ghNabT6beLmeBCbS2qO5lWY=
Subject key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6B96
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Sep 2025 06:28:31 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.47.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27542 (0x6b96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 29 06:28:31 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:5d:bc:4a:e4:eb:19:53:47:d5:c8:a3:55:
49:21:47:7e:c0:5a:dd:bf:85:31:0e:33:ec:4c:95:
98:07:4a:10:1b:89:4b:c3:bd:58:b3:d4:43:65:3f:
24:87:69:a4:9d:43:b7:13:09:f6:4a:0a:87:55:f5:
19:3c:d0:cb:66:51:77:40:eb:60:e3:ff:0a:a9:68:
95:a2:91:0b:b4:af:52:2d:d9:24:db:6d:63:ac:cf:
4e:df:8b:15:91:3d:ae:a4:47:5a:77:01:74:64:5e:
ec:f8:6e:6c:20:20:90:6f:70:50:45:cf:f8:1d:ad:
ad:9a:9b:76:d3:1e:59:0a:4d:9f:3a:c6:58:27:06:
73:54:23:63:91:32:bc:e8:0c:66:00:7c:2a:b8:22:
47:61:f4:47:7a:33:09:a2:0b:16:aa:69:fe:61:ca:
62:9a:b0:4a:ab:0e:dc:02:72:11:52:52:a3:96:b9:
5b:61:e8:b6:34:26:a0:4a:37:43:94:00:9b:93:98:
a8:f0:84:05:a1:10:e2:38:3e:1d:49:62:cc:7d:30:
c8:1a:1d:95:3e:d0:b3:db:79:51:4f:a2:73:b1:ec:
01:68:e7:c7:39:c6:92:f6:c3:6c:e0:15:14:8c:aa:
2a:f2:57:0f:c0:4f:d0:44:97:6a:ed:ac:d7:30:20:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.47.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9e:fa:2a:40:c3:e5:0f:3d:20:2b:ab:b6:83:8b:72:68:4c:
f3:7f:53:51:42:84:e8:0e:fc:18:56:c8:7b:4b:28:b7:6a:cf:
fb:ee:1c:8f:35:ae:ed:1d:43:a0:95:6b:fa:56:c6:3e:ce:2e:
63:69:36:23:13:91:ba:f6:5a:82:d7:7a:f8:a5:a6:65:79:3b:
0a:f6:84:92:ff:59:8d:08:74:19:82:ec:ad:44:91:bc:a1:68:
f2:2d:67:53:db:0a:4e:98:b7:ee:5d:92:ce:96:f9:7a:40:1c:
2f:8e:22:bc:86:ab:6c:d5:86:91:12:84:88:2f:77:9c:ca:47:
fa:35:79:b9:d1:8f:69:32:12:ed:28:d9:fc:5b:c5:58:07:97:
1e:60:42:13:26:1b:ff:d5:98:d6:dd:b2:b6:e6:53:a2:52:86:
51:fd:94:d8:7b:d9:6f:1d:d3:f1:b0:d1:2b:48:f5:8a:23:c3:
cd:01:0c:fa:4c:19:66:67:b7:98:96:60:3b:b8:99:47:aa:f4:
f7:eb:d8:ce:66:1a:ce:73:20:77:94:f6:03:73:5e:4e:9e:ab:
e7:2e:ca:6e:6e:7e:c5:a8:8e:9d:9e:7e:b1:a7:22:8c:ac:7d:
af:35:ea:d9:e5:01:45:c2:51:2e:8c:41:52:5b:03:27:69:da:
0d:6d:af:9b
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICa5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwOTI5MDYyODMxWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCRkU0RTExMC8GA1UEBRMoQzcyMDAyNzY3QTEwRUMyRkYxNDUxNUEy
QUFCODZFNjE0MDk3QTc1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALKPXbxK5OsZU0fVyKNVSSFHfsBa3b+FMQ4z7EyVmAdKEBuJS8O9WLPUQ2U/JIdp
pJ1DtxMJ9koKh1X1GTzQy2ZRd0DrYOP/CqlolaKRC7SvUi3ZJNttY6zPTt+LFZE9
rqRHWncBdGRe7PhubCAgkG9wUEXP+B2trZqbdtMeWQpNnzrGWCcGc1QjY5EyvOgM
ZgB8KrgiR2H0R3ozCaILFqpp/mHKYpqwSqsO3AJyEVJSo5a5W2HotjQmoEo3Q5QA
m5OYqPCEBaEQ4jg+HUlizH0wyBodlT7Qs9t5UU+ic7HsAWjnxznGkvbDbOAVFIyq
KvJXD8BP0ESXau2s1zAgsy0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTHIAJ2ehDs
L/FFFaKquG5hQJenXDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkZFNEUvRDE2NUU0QTI3QkUzMTFFRjg4RDlDNzUzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJGRTRFL0QxNjVFNEEyN0JFMzExRUY4OEQ5Qzc1M0M0RjlBRTAyL3h5QUNkbm9R
N0NfeFJSV2lxcmh1WVVDWHAxdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKAeLzANBgkqhkiG9w0BAQsFAAOCAQEAcp76KkDD5Q89ICurtoOL
cmhM839TUUKE6A78GFbIe0sot2rP++4cjzWu7R1DoJVr+lbGPs4uY2k2IxORuvZa
gtd6+KWmZXk7CvaEkv9ZjQh0GYLsrUSRvKFo8i1nU9sKTpi37l2Szpb5ekAcL44i
vIarbNWGkRKEiC93nMpH+jV5udGPaTIS7SjZ/FvFWAeXHmBCEyYb/9WY1t2ytuZT
olKGUf2U2HvZbx3T8bDRK0j1iiPDzQEM+kwZZme3mJZgO7iZR6r09+vYzmYaznMg
d5T2A3NeTp6r5y7Kbm5+xaiOnZ5+sacijKx9rzXq2eUBRcJRLoxBUlsDJ2naDW2v
mw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:40 2025 by rpki-client