Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
File: PnIyBI3L0sabqyJbikIhYEbBiyU.cer (raw, json)
Hash identifier: 4vc/fAOsuAicGD6YPxs9VUYZDqwEBH+/zWeViG/OsVI=
Subject key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6D43
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Nov 2025 12:52:05 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 147.158.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27971 (0x6d43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 2 12:52:05 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A911CA78, serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:00:e0:29:3e:18:11:53:2d:35:77:70:00:
6f:4c:b7:88:38:8f:fd:00:4f:62:1e:73:f6:11:65:
e5:03:32:ea:71:e8:ad:f7:16:b3:fb:9d:b0:8f:4f:
11:a0:1c:43:ac:67:26:71:78:26:a5:ec:c0:e1:91:
35:75:a9:36:d0:bc:2b:11:38:a3:f5:cb:44:8f:4e:
9d:01:10:d1:fe:77:e7:a4:59:ed:54:06:18:e9:f7:
c8:40:29:0b:31:eb:6f:19:14:83:31:64:2e:85:56:
9d:b9:e3:66:e9:13:8a:a5:7e:a6:d1:1d:07:5f:59:
c6:f1:0f:50:05:fa:5d:d6:08:2e:f3:ed:36:b5:91:
24:d1:9e:45:a2:68:b2:2f:d9:6b:f4:64:af:84:c4:
39:02:01:3d:ba:42:83:f5:65:e0:13:ac:d6:b0:9a:
7f:c3:e6:fe:f9:9a:10:2d:51:fc:a6:8e:66:02:b2:
e1:ee:7c:a3:fc:c2:f6:59:a6:65:1d:33:f7:2f:60:
54:01:dd:e6:eb:8f:f1:59:1a:9d:5a:61:dd:dd:25:
f6:5b:bd:59:49:ea:cc:e8:30:96:b3:3e:cd:30:a8:
d6:4b:0d:ab:87:ff:74:cd:22:6f:74:8f:9e:ed:97:
d0:75:e0:a8:bc:1c:b2:80:f2:d8:14:01:07:b7:b8:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:4c:47:a9:1c:f4:8e:60:c9:43:7f:c8:5e:0b:f8:0a:e2:ba:
08:83:08:83:ed:78:f3:3c:c6:ec:9f:30:0c:5c:4f:dc:e8:67:
bd:41:07:2e:a3:da:6c:d4:2b:e4:08:de:f6:72:61:c2:02:27:
5b:cf:18:2d:3e:29:eb:1e:ab:84:af:ea:9e:f7:89:be:9d:d8:
51:0f:8f:47:d4:e2:65:bf:dd:b9:91:00:60:77:32:b0:21:af:
74:c2:d1:fd:a0:7e:25:53:c2:4e:12:95:7c:f5:bc:3d:00:dc:
24:be:b8:d1:df:c5:4c:68:48:27:1e:10:ed:75:09:8f:6c:fe:
cd:a1:99:b5:a7:50:41:9a:12:c5:fa:02:84:0b:39:ec:0a:8b:
74:41:df:01:24:1d:89:ec:f7:88:60:5e:b0:b6:16:e0:4a:cc:
e4:0f:b9:eb:65:21:b5:a6:77:f3:c5:e2:ab:bd:ae:97:fd:e3:
36:20:54:a3:b8:39:29:56:5c:f3:a8:de:c9:f5:02:81:3c:b4:
aa:91:9c:73:58:9d:47:c6:9f:7c:f8:94:b2:4c:e4:7c:04:61:
de:08:b6:cb:89:ac:e0:8c:aa:57:4f:ec:ea:08:23:4d:a3:10:
41:b4:14:e9:2d:5c:20:e8:97:06:e6:1d:ef:28:aa:2b:43:09:
8b:a9:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:08 2025 by rpki-client