Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
File: 1gwwsan1nJWa1JZ_L21XKst1KZw.cer (raw, json)
Hash identifier: w+n38rwQG9XElBwmJFhtdC9HadJzgDFxFxF79K3Lk9w=
Subject key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CE4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Oct 2025 20:03:56 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.126.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 13:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27876 (0x6ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 27 20:03:56 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:0a:cb:05:39:a2:52:85:e6:66:dc:3d:e8:
83:3b:e1:28:61:db:40:dc:7f:be:ac:7b:35:bc:36:
64:ec:c3:90:fb:ff:f3:2c:0c:dd:9b:f2:eb:c9:9f:
11:69:12:ab:45:41:a6:ca:1d:78:30:78:73:9b:0f:
fa:1d:6a:06:05:5e:43:4e:23:66:e1:e4:9f:2e:a2:
40:42:ce:97:cb:c7:64:71:b1:89:91:a9:aa:6b:48:
99:a5:12:9a:00:dd:e8:c5:e1:5a:22:32:77:cf:60:
33:57:6e:b7:5f:ef:34:01:b0:70:8d:2b:cf:14:62:
4d:a4:52:cc:64:01:07:d2:fc:f3:83:ae:81:9e:72:
28:12:e5:2f:a0:59:53:e3:72:37:22:46:aa:0a:ad:
58:bd:9f:bf:00:99:e5:75:eb:59:4e:a3:cd:c4:c8:
69:0d:54:3b:a6:59:40:32:6a:89:ae:8b:16:c7:73:
b9:ac:92:d5:79:40:3a:19:cc:7e:6e:cd:bf:eb:d7:
aa:95:6b:be:72:2e:b1:ee:c5:0c:7a:76:51:25:c7:
2e:09:f2:e8:d9:5e:bd:66:74:b3:ee:f1:32:62:d6:
70:03:fb:0e:af:49:5f:9d:4b:2e:05:ef:04:82:75:
07:d4:1d:20:3b:8a:e9:84:b4:ca:c6:98:4b:2f:df:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.126.0/23
Signature Algorithm: sha256WithRSAEncryption
45:fe:af:a6:0f:20:8e:fe:2f:e1:ba:0e:d2:cf:87:ae:42:40:
74:52:2e:90:84:e7:c5:b3:ca:a8:fb:2a:f0:49:a9:7f:e5:4d:
94:64:6e:86:65:b9:dc:66:71:db:50:08:92:e0:0b:ef:48:2a:
4e:c2:bb:9d:2e:a2:7d:40:6b:3c:68:74:f3:32:1c:84:ce:2f:
b6:8e:a6:b5:62:db:6d:54:8d:dc:43:4a:be:7f:2a:86:72:14:
c5:04:a2:90:f9:8c:a4:26:45:23:ae:4f:10:38:a1:71:2f:b4:
c3:a3:ae:6d:ae:da:e3:0a:b4:8c:67:1c:9b:e6:bd:e3:81:96:
8d:bf:46:15:20:bb:6d:18:88:b1:2e:a5:91:b0:50:b1:6f:92:
64:03:22:41:0c:3d:2f:83:cd:08:f8:30:5e:50:a7:67:e1:68:
b7:e4:1a:85:5d:5c:d5:b8:e1:a4:6f:01:6f:ad:cd:83:9d:07:
24:3c:b0:53:f5:b1:94:5b:d6:8b:83:67:25:b4:f6:dd:ec:29:
a9:90:fd:5a:de:97:80:3b:f5:c2:24:c6:5d:9c:63:cd:22:23:
88:bc:9f:a3:6c:6f:6e:a3:ee:9e:f9:a8:7e:24:44:e8:6b:7d:
55:73:b5:3e:16:ef:54:53:b4:90:88:61:d0:02:7b:fe:cd:79:
3d:d7:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:41 2025 by rpki-client