Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
File: 6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer (raw, json)
Hash identifier: /suJMjJdlrBQKQ4TOPIe5d5h5TpmWKRmLRzRbYlGs7Y=
Subject key identifier: EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4E2B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Nov 2025 14:28:39 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 217.194.140.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20011 (0x4e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Nov 3 14:28:39 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91452AC, serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:3e:ff:56:a4:9c:bd:2e:7f:98:81:77:ce:
93:9c:38:5d:3c:9f:bb:9f:0a:ff:ca:04:66:a7:aa:
01:04:92:a0:be:90:4e:63:70:0a:fa:d2:7a:b7:d0:
68:cd:a6:70:80:41:57:b8:88:af:bd:57:7e:8c:40:
ec:28:b4:2b:c5:4c:88:8f:37:d9:5c:20:d6:46:e8:
b7:9d:27:1c:1d:6b:84:ed:49:6a:65:7d:84:91:22:
51:33:6a:94:31:13:b3:2e:f2:de:ec:e8:13:c1:e5:
91:d2:e3:84:12:7a:b3:39:fe:57:c4:81:75:c5:c0:
36:25:4e:0d:c6:dc:9f:f6:80:b2:71:fc:f7:7e:3b:
39:55:73:0e:68:3a:63:39:09:61:64:da:24:1d:b5:
54:ba:97:ad:be:47:61:1a:cd:ee:2f:b2:58:2f:f6:
d2:18:a2:b8:23:c4:6f:d7:b3:04:64:e2:0c:99:0e:
50:b0:ea:91:ae:ca:e2:07:d6:4f:e2:02:2b:2a:85:
ea:3d:91:fd:7b:69:b7:22:42:b8:8a:89:74:04:9a:
18:8b:cd:93:47:df:d0:2b:ab:e7:23:26:78:eb:29:
0a:81:0b:82:15:66:83:c7:74:b4:84:1a:68:12:b2:
8e:01:bb:53:4f:2c:5d:e5:10:b1:12:86:71:bb:70:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.194.140.0/22
Signature Algorithm: sha256WithRSAEncryption
80:55:81:d0:fd:bd:28:27:cf:b9:f7:4b:9a:d8:f6:24:87:0d:
55:a1:92:dd:60:30:67:da:8d:e8:77:bc:a6:77:5a:44:f5:5d:
60:8c:90:e8:13:ed:17:d5:90:4e:8d:d3:bb:61:3f:51:4f:de:
06:60:a1:4c:44:a4:7f:d8:37:1b:35:a8:a4:69:f8:7e:87:51:
d4:e1:97:f9:57:bf:dd:c6:13:5f:dd:54:c1:99:5c:58:21:70:
9e:a4:92:e6:cd:25:6d:5e:75:54:ce:ab:8f:e1:51:d3:13:0a:
f5:57:c8:eb:54:ca:c3:1d:c6:7e:bf:b8:1a:4f:aa:5d:4a:f1:
af:a9:fe:1e:e2:9d:0a:80:66:85:ba:b4:89:65:85:6d:74:66:
7f:c8:73:11:e4:72:96:78:9f:99:77:46:60:b4:46:cf:68:3c:
3a:c1:64:b9:fa:38:2f:e1:01:36:b9:af:2a:10:f7:e8:55:9c:
45:cb:d5:b5:ca:6c:85:4b:fa:82:a3:08:86:e0:de:99:53:d3:
0b:16:7c:1c:c1:27:28:22:fb:61:04:ef:3b:a1:af:90:e4:6e:
12:32:1e:83:4b:41:cb:98:99:f2:57:72:1e:2b:3e:8a:77:63:
a7:35:e4:63:22:66:41:76:ee:20:c4:3d:fa:7c:e4:51:e0:22:
71:96:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:35:27 2025 by rpki-client