Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer
File: 4-ABdWjohx9OiHmxBiqu1yw08jo.cer (raw, json)
Hash identifier: pNyZrUqmqZV9S73EUclsRg8ABfWmj4nNZ1TPt4Pf9D8=
Subject key identifier: E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CE8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Oct 2025 04:10:57 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.100.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27880 (0x6ce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 28 04:10:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91A05BF, serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:3d:c1:e2:bc:6f:ed:f2:12:3f:5d:9a:7d:
ff:7d:a4:28:f0:d7:ae:73:c3:4b:55:3d:53:a3:7e:
e3:e3:96:4b:0f:7a:fc:d9:bf:b8:c1:d3:bd:a3:9e:
86:b2:a7:44:d8:50:fb:e9:ed:ec:80:4a:b3:b4:43:
40:78:67:84:b9:c7:5e:94:57:b7:32:a2:83:d1:66:
82:f1:87:c3:93:1a:ec:c4:24:3a:8d:6a:d3:46:f9:
92:01:05:57:f5:e1:42:96:ce:78:54:b6:c3:96:4c:
d2:eb:c4:31:d6:b6:51:13:7c:ed:f9:66:8d:a3:ea:
05:8b:8c:e9:71:6c:6b:bc:8a:79:75:f6:bc:60:b3:
a5:d9:5c:95:da:71:db:8d:30:75:74:1c:f2:7d:08:
2a:77:7f:30:40:23:52:96:d9:01:15:c7:e3:71:f5:
df:a9:fd:1c:db:85:3b:aa:ba:a8:9e:0f:26:aa:f6:
0e:4b:bf:2f:58:70:24:9f:cf:a8:dd:18:f6:df:3b:
58:6e:7c:64:21:42:25:21:ce:45:ef:e3:a3:03:87:
06:27:60:6a:06:e3:b0:9d:41:30:44:9e:0b:8f:3c:
1a:c3:54:bd:14:bf:f2:2b:48:b5:60:ee:2c:0c:2a:
5d:8c:20:6e:1d:94:c8:88:94:5b:56:c7:e0:55:11:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.100.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:f5:85:0d:9f:69:e5:98:47:37:5f:4f:93:c8:c9:4d:22:69:
8a:50:de:72:58:fd:be:c8:c5:97:cc:d8:7a:c6:51:7c:88:43:
b0:c4:97:33:8f:ea:58:53:22:be:63:6e:a7:93:1e:9f:b3:3d:
6b:96:ed:80:01:44:b0:91:5c:a6:ad:56:64:74:be:e0:ab:61:
82:9c:1e:2c:06:18:04:91:c9:e9:2b:9f:72:ee:19:ba:f7:08:
1c:2d:61:7c:d2:15:f7:99:db:ae:8e:d1:f8:98:64:1a:8a:42:
8b:b6:bd:60:26:11:61:37:af:07:86:d7:28:d4:56:8b:88:c9:
c7:7f:53:77:6d:57:e8:47:b8:fb:36:bb:a7:63:51:d0:fc:b8:
ce:27:d8:3e:a2:46:10:71:53:a7:a8:e6:e5:0b:4f:16:c0:82:
3a:4c:5d:75:a9:e0:b8:78:7c:5e:49:af:bb:6d:97:08:c5:5d:
90:0b:d5:7d:46:9c:00:17:04:06:52:82:fd:c2:fb:eb:80:76:
fd:e7:3b:6c:e2:24:4f:9c:5e:f7:c5:99:08:d1:1f:3a:a6:e6:
44:f7:59:81:4c:2f:88:a4:a9:09:b8:7e:de:26:fb:d7:58:38:
6a:ad:54:f9:4e:12:41:c3:f3:4a:cd:db:41:d5:87:63:63:48:
ab:08:8c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:31 2025 by rpki-client