Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer (raw, json)
Hash identifier: 61+wdZcfMfXPlQ9mSRhEfGjVNadqN3faHCE0qIW/IcA=
Subject key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CC9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Oct 2025 14:54:15 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 192.173.16.0 -- 192.173.24.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27849 (0x6cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 24 14:54:15 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:38:8d:20:d7:29:34:14:de:88:f9:69:d1:
ac:2f:f0:0b:2c:62:57:c0:35:b8:de:be:0c:e0:92:
c3:4e:9f:f9:5c:24:1b:bd:aa:3c:46:3a:49:59:02:
25:d1:4e:60:d6:09:d2:f9:4e:18:fd:9e:77:06:d2:
c7:b1:fe:33:c9:06:85:88:bc:92:ae:23:ef:3c:2a:
37:7b:2c:a9:50:af:b0:22:95:e9:7f:f5:ce:cf:ce:
c5:88:5c:2b:40:9f:04:1c:0d:d1:68:64:e1:bb:b2:
fc:2b:45:89:c6:33:49:cb:49:1b:44:56:07:da:00:
ec:b9:28:09:a8:61:4f:67:ad:5c:99:bc:3c:8d:a5:
b3:23:0d:44:33:6d:ae:fc:f7:15:98:a2:30:04:9a:
02:2c:c9:8c:15:4c:db:7c:9d:f1:06:31:ee:a6:ca:
88:bf:48:e1:65:eb:50:c3:f5:0f:63:4b:12:ae:5e:
09:8c:ee:ce:8c:c2:31:99:1f:71:a7:ce:c6:56:81:
d3:ca:f1:58:f1:86:fe:8b:74:9f:f9:f6:1e:bc:4a:
e7:67:40:61:77:c8:70:fb:5e:07:ba:a1:cf:66:2e:
51:2f:28:58:64:4e:c3:ef:52:19:b5:9c:d6:55:31:
2d:44:c4:66:81:f1:2a:30:8a:54:98:95:ae:5c:32:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.173.16.0-192.173.24.255
Signature Algorithm: sha256WithRSAEncryption
69:6f:50:e4:53:db:fb:2f:c7:d3:24:b7:e3:4e:2f:6e:19:cd:
0e:4b:8a:fb:3b:0a:70:d5:aa:ff:cd:34:05:a9:a9:ef:d6:ac:
c0:0d:4a:5c:51:df:cf:b2:df:de:b4:cb:fd:4f:13:72:4c:ea:
d5:8e:e3:af:b1:24:69:33:91:25:2a:2f:c5:ef:82:77:ca:a5:
23:84:13:6f:fb:28:f2:21:8d:53:f4:56:b2:f7:cb:a6:cc:4f:
76:16:c6:ee:5e:57:9d:b3:71:7c:d5:f4:34:ad:d6:82:18:98:
43:7e:85:48:0a:3d:e4:5a:47:12:cd:18:b3:7c:a1:39:96:24:
95:eb:21:e0:1b:73:b5:9e:cf:78:5b:11:22:42:34:ff:7a:4e:
8b:c2:67:47:36:70:7f:f7:91:6e:5a:06:97:1a:ef:ae:5a:71:
95:a9:b9:42:7f:25:fa:cc:2b:57:be:85:88:e5:aa:05:f4:9d:
22:11:07:83:f6:ea:d2:cf:bc:a6:df:9f:42:48:14:cb:71:de:
ca:f8:b6:89:2c:99:33:0c:15:67:a4:07:ff:21:34:7b:2c:2e:
49:ed:3b:aa:5f:86:f9:3e:4b:10:0d:9b:3e:84:04:51:8a:b2:
57:ce:69:e9:da:c0:a9:7c:0c:cd:cf:84:f7:3c:c6:cb:f6:4f:
8e:49:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:01:44 2025 by rpki-client