Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer (raw, json)
Hash identifier: OOUYMOjMtix1IwPIzfE9pOELPctkJxf5k9RUo1RnU10=
Subject key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8004
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Aug 2026 14:34:24 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.117.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32772 (0x8004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 2 14:34:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:94:0c:39:1c:0c:ac:29:38:cc:88:87:d0:
d3:2a:5f:73:f6:86:a7:5b:40:f1:4f:f5:56:c0:4b:
f7:4a:6a:fc:7d:ee:72:07:e1:74:2e:a1:ec:5c:f1:
dc:81:a6:1f:49:43:91:67:8d:10:4e:8b:d3:13:1c:
63:92:5f:58:0d:f7:65:48:90:c3:04:05:9d:a3:ab:
15:d3:6c:0e:0c:60:90:75:3c:a3:3a:70:45:f2:de:
9d:dd:98:33:c4:ba:59:44:06:81:5c:94:ef:2e:f9:
3b:b5:ab:d1:57:ff:4c:c1:14:ae:20:73:62:fa:d5:
85:21:30:d4:c8:96:1b:bc:78:44:7f:7a:5b:29:11:
a7:b9:d1:ac:c3:f8:c0:d9:52:d6:18:59:54:52:49:
53:68:d7:cc:5d:d5:4c:de:24:52:2e:b7:e6:69:75:
95:5d:f3:4f:b3:26:ec:2e:ab:27:df:0c:80:fd:d9:
41:dc:2b:fc:2f:bf:db:47:79:c3:44:3c:61:2a:30:
3f:eb:a1:f2:08:bd:00:4f:a6:ce:12:fb:da:91:3e:
43:3a:fb:99:61:a2:91:dc:d0:6c:b6:5f:d6:df:d3:
4a:90:39:65:b3:26:e2:5a:72:91:18:13:2c:1f:6e:
13:b9:fc:c1:3b:68:b7:20:16:8d:c6:f3:4b:ac:0c:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.117.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:14:0e:c8:ef:7e:88:cb:68:83:7e:ea:b2:42:97:36:b6:87:
92:d9:39:29:2c:f4:25:07:2e:30:ed:4a:31:d6:76:f3:db:d7:
a9:39:28:65:7d:f8:e6:b6:ab:0b:42:84:a7:e3:58:d6:ad:21:
0b:ed:76:1f:4e:d5:35:eb:8d:72:e2:5f:69:79:e8:0d:ab:a8:
1d:20:d7:9d:2a:f1:16:0b:89:1d:80:87:9c:7f:64:a0:ae:ce:
eb:f3:d2:ba:2c:40:ee:57:c8:6b:44:6b:33:f9:b5:b7:e5:88:
34:f6:66:b2:71:d1:11:13:e8:42:e4:2b:1c:55:83:0b:bf:15:
cb:e3:d5:40:f1:a4:43:1a:f4:52:e4:4d:09:50:17:5a:92:bc:
dc:b6:d6:ed:f6:ac:4d:4e:4e:24:25:17:06:fe:57:54:13:f0:
04:6f:15:36:b2:7d:c6:c6:fa:70:05:13:67:d3:90:76:68:b0:
66:db:12:ca:94:c6:ee:04:fb:a5:e8:b3:7a:b1:85:cf:ba:13:
92:7f:bc:e7:bc:69:37:4a:35:52:40:8e:d9:09:0a:a2:6c:24:
2c:c0:5d:73:5e:d0:44:a1:8f:e8:0c:3c:1e:06:40:e8:de:00:
40:b6:41:47:dc:6c:95:46:d7:b9:fe:5a:4f:29:20:a5:9c:38:
d0:30:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:57:05 2026 by rpki-client