Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
File: FN2GhClPGzOjE6-48OuhyKADeAk.cer (raw, json)
Hash identifier: OnYyeUYXRUNNTDi7r+tEoo4Akab9+4yxuSImq5G6TT0=
Subject key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6D4F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Nov 2025 18:13:41 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.130.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27983 (0x6d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 2 18:13:41 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:6b:e7:cf:8b:61:c5:51:03:3f:13:fe:9b:
ed:62:5f:4b:c1:40:89:d4:77:dc:56:95:a2:28:7d:
8c:cd:74:49:64:12:07:f3:8a:4d:78:f7:cf:b5:bd:
d2:f6:3b:e7:18:bc:f1:85:f4:fc:59:dc:5b:b4:65:
4a:a4:9e:58:12:62:64:39:ac:df:55:d1:62:7e:5c:
6c:87:d8:a6:a5:1d:dc:04:bd:d9:9a:6f:10:db:1b:
ff:4f:a6:30:a5:34:84:4c:61:90:17:fc:99:f4:25:
0d:50:24:a0:22:7f:83:60:9e:b6:3a:8b:f9:b1:77:
24:3e:99:07:00:77:cf:e3:46:97:f4:ab:cf:4a:ec:
1c:9a:b8:64:7b:1d:a2:24:36:99:7a:be:be:10:1b:
f7:1e:52:67:8b:ee:ea:10:28:9c:eb:4e:9b:be:dd:
9e:a1:c9:ff:cc:0e:3d:f4:42:1e:34:82:d7:3e:6d:
a5:f7:f6:40:f0:3b:7e:55:8d:f6:08:63:c4:9a:62:
9b:3a:b5:20:7e:27:b7:ce:7c:59:60:4b:e5:e5:87:
45:c4:52:33:11:69:ed:c6:4b:01:a0:55:32:9c:9d:
16:24:f1:27:d0:df:d4:3e:2f:a9:31:86:2a:4c:02:
e1:4e:69:2e:81:43:0e:f0:9a:5d:22:f3:fe:bf:2b:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.130.0/23
Signature Algorithm: sha256WithRSAEncryption
02:cd:a3:09:93:b0:e9:f3:27:1a:b7:45:01:10:27:5f:6b:2e:
40:36:38:4d:77:ea:b6:e2:ce:6b:23:ea:bc:30:c2:c2:1e:a5:
df:1c:aa:5e:09:af:09:f9:c0:b9:3f:01:25:b2:60:10:c9:9c:
c1:e9:44:1c:69:a0:3b:f3:f7:74:5a:f5:5e:e1:06:27:a3:33:
db:2f:34:e5:18:b2:c2:72:70:21:c4:d4:0c:73:47:99:f4:87:
4e:33:88:a1:67:53:25:66:0f:f5:7d:23:8c:ac:22:8e:a3:7c:
b9:87:53:aa:98:93:8a:a9:b1:50:6b:f2:72:c5:4f:1e:99:8a:
41:80:76:fd:ba:47:7f:a7:ec:df:92:4c:56:97:86:f1:4b:d5:
02:d8:da:b5:c2:67:4d:2a:22:5e:f3:aa:15:b5:99:34:ff:30:
e8:1f:74:06:64:91:91:bc:ac:35:b3:46:b6:ec:b9:44:41:bc:
08:23:64:7b:b4:a2:91:f2:1c:05:c0:40:1a:e8:c1:63:78:b7:
5a:ec:ac:86:5b:c9:69:02:cd:e4:c1:95:40:bf:d8:fd:2d:d4:
19:ed:5d:5a:c1:09:db:42:ca:38:94:49:5b:58:c1:d1:da:51:
2b:07:7b:69:be:73:32:85:8b:4c:f6:e8:60:16:50:8b:d8:4e:
5e:91:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:30:15 2025 by rpki-client