Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer (raw, json)
Hash identifier: JSWT2VUeFiKczpp727wZNbouF+opdPwSvmCrKl+Q4OI=
Subject key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CC2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Oct 2025 04:56:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 161.229.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27842 (0x6cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 24 04:56:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:6e:e4:81:9f:ad:01:2a:eb:93:bc:4d:53:
87:6a:17:b7:ba:9e:2b:6e:63:7e:8e:ed:66:6d:51:
65:af:b4:b7:34:37:f6:4e:d1:dc:57:3d:41:83:43:
84:26:37:f6:d8:2f:54:37:58:89:0f:b9:f8:5d:d6:
ea:3c:63:82:ae:c8:73:8f:f6:3f:53:45:72:9f:00:
58:07:5c:81:02:5d:a2:78:8d:8c:d2:19:4b:41:f6:
a2:f7:31:33:64:ac:80:97:30:07:4d:31:ae:0d:95:
ae:d5:b9:6c:13:92:fa:a4:f4:c4:c4:9d:7c:2c:ac:
5f:3f:7d:02:ca:92:6e:8e:ed:71:e5:ee:e7:67:c1:
17:56:22:d3:19:63:62:67:7f:54:b2:84:a8:37:9f:
5f:1c:d5:01:52:f2:85:2e:95:2e:a5:35:83:c1:d3:
f1:f2:81:7d:a4:51:53:f9:5c:48:59:75:5e:af:18:
31:f5:53:39:ae:90:1a:c1:19:ca:80:55:15:a5:b4:
97:b2:96:54:3a:94:fc:f1:19:48:f3:0c:a5:9c:6f:
eb:a1:5e:72:d9:ef:02:24:88:2b:b8:0a:c1:8f:8d:
3d:5d:90:8b:a3:27:0c:80:a8:71:ca:45:52:ff:88:
0b:6b:52:24:ae:35:0b:e3:24:c2:5b:9a:41:79:e8:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:91:89:2c:82:ee:fe:df:6b:18:60:d6:96:8b:95:99:79:5b:
ea:96:fe:48:26:84:9d:fb:24:70:7f:2b:ea:54:ac:4b:ae:6a:
0e:9f:a1:5a:0a:00:7a:a0:40:98:89:f3:21:eb:dc:29:af:f6:
4b:27:e2:dc:ad:8a:51:d4:a0:88:56:09:54:1d:44:25:ac:c4:
c7:86:b5:62:f4:c1:2a:75:b7:b8:3d:2e:60:ce:8a:63:de:0c:
b4:2a:b0:6a:22:31:4d:24:de:d9:da:b4:f0:bb:26:57:8f:d8:
d0:ac:71:6b:cf:b6:77:30:9c:c2:5f:1c:12:d4:fa:ff:09:6f:
63:fa:42:61:2c:b4:61:11:7c:5d:e1:21:70:36:09:19:2f:30:
0a:01:b3:b3:e7:b1:8c:ae:45:8d:e0:d9:10:33:9e:b9:59:39:
6f:91:ec:a3:77:9e:50:c2:df:93:71:88:83:65:84:70:70:ad:
22:95:ff:a9:40:70:78:94:4e:76:32:c2:6f:af:e6:eb:67:04:
b9:aa:20:cd:f4:b6:2c:46:3d:26:4b:a0:8e:6c:9e:14:f3:2f:
45:c8:06:11:dd:39:4c:04:c4:8b:92:e1:b6:b3:8a:4d:03:b8:
58:e5:3d:6c:11:4c:ef:df:d4:54:6d:e4:3f:3e:d4:af:99:b0:
24:e7:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:15 2025 by rpki-client