Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
File: J4qsn8YiO7A3FX6zn5bbvajm0lY.cer (raw, json)
Hash identifier: uk6Tcq68JCYEliLaUKUagvpz8dUK930BGMODv8qRy/8=
Subject key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4E18
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Oct 2025 15:06:47 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 91.109.216.0/24
IP: 91.109.218.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19992 (0x4e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 30 15:06:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:3f:2a:39:37:28:05:68:32:f6:62:3c:20:
58:cc:dc:e9:a9:d8:da:70:a7:19:a2:4f:b7:7e:49:
a6:21:2f:a4:34:c6:96:11:09:7c:1b:86:c6:8d:72:
75:63:93:1d:3a:84:e9:da:6a:10:f4:aa:9d:84:e2:
b2:fd:92:d3:b2:57:15:10:14:c9:f3:4a:64:d2:b9:
93:f2:52:6d:c8:38:fd:ff:41:12:de:71:06:48:18:
31:98:3d:bd:37:70:f8:a8:ab:73:dc:e8:33:1a:41:
82:e1:13:b2:58:1b:96:98:e8:58:19:eb:91:21:0b:
c2:c6:60:68:05:50:19:87:38:b7:c8:99:fa:11:26:
f0:62:60:50:3d:54:4a:00:48:58:5a:6e:eb:5d:5f:
98:78:40:d3:c7:a4:ee:f2:63:4e:67:ae:7d:64:36:
09:95:5e:8c:8f:89:f1:d9:88:b1:80:29:d7:69:14:
8f:b3:ef:5c:5e:6f:a1:4e:0b:90:90:28:7b:48:89:
5c:08:fd:e9:cd:1f:82:22:85:1f:d0:ef:14:aa:be:
7f:7b:21:f5:63:72:38:6c:e6:d3:ef:65:42:9e:c3:
d0:6e:60:11:e6:91:4e:23:9f:51:84:83:d8:8d:6a:
d0:7f:5f:5f:7e:28:9b:4e:48:0f:c3:a1:1e:9b:d3:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
91.109.216.0/24
91.109.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:18:03:c9:17:9b:10:9b:76:36:3f:07:27:cf:38:55:cf:2b:
df:d7:fc:01:8a:9c:1c:e7:d5:fd:e7:c1:a6:f9:78:80:5c:a4:
a7:0e:89:37:10:8b:d3:11:a9:50:a1:08:53:62:b2:e6:69:a9:
97:bd:fa:1c:34:38:68:95:53:18:88:d8:9f:2c:25:fe:c6:e3:
c5:ce:3e:9c:04:d9:86:79:d5:04:cf:6c:e9:5f:1e:32:82:24:
f1:d0:93:30:1c:1e:17:d3:6e:82:f4:99:7f:e7:4f:30:70:10:
d9:a3:1e:5f:78:ec:6f:25:fc:a7:4e:d1:ac:f0:8b:fa:bd:19:
46:5d:fc:8f:82:4b:4d:e7:cb:fd:cf:3a:53:08:c7:cb:13:55:
03:47:26:f5:c7:eb:f5:05:dc:15:0d:a0:a6:19:c7:48:0a:a8:
6e:4d:d0:32:1c:9d:3b:67:e7:ef:05:3b:0a:5d:4c:a9:75:2a:
7d:fd:e8:a3:36:a5:6d:a7:08:e6:68:b9:97:ca:9d:92:93:69:
01:a9:6a:21:53:de:eb:e9:76:81:91:87:a7:da:9e:0c:f1:39:
08:31:ee:17:aa:76:9e:cb:1a:ea:f2:6d:3a:46:bb:cb:e7:4a:
ce:6c:c3:76:c2:82:bb:52:40:e0:50:08:6c:aa:0f:fc:21:aa:
bd:37:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:24:21 2025 by rpki-client