Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
File: PuJvukvjWd6uUAeS6_940ArLdgw.cer (raw, json)
Hash identifier: MbMvEHK+qZbcsLf4KSARNbc5VvxKRiC8Rv3KkhYrpfk=
Subject key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CFF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Oct 2025 15:20:53 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 149.234.189.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27903 (0x6cff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 29 15:20:53 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:9e:15:9b:6a:54:87:ec:3e:05:48:c7:91:
41:28:54:65:d1:5e:0c:94:8b:c0:90:a1:23:49:88:
47:0e:dc:25:80:a7:4b:b6:bb:99:87:b7:b8:b2:ae:
8f:76:7e:39:49:f0:e6:d2:d4:28:d8:86:27:cd:8a:
25:3c:f9:21:b3:25:6c:f0:56:bc:e8:aa:77:90:f5:
26:b0:f1:62:62:44:be:96:6d:be:c1:9b:07:22:11:
8c:36:5f:b2:0e:e5:77:b3:df:f1:33:36:d9:d8:b6:
68:e7:62:b8:bb:80:07:f7:bc:be:91:06:fe:d9:eb:
a3:26:f9:88:4c:9f:14:7c:14:22:d1:d3:78:e9:c4:
28:f1:46:21:5b:a5:96:62:82:4c:5a:0b:4a:cf:d8:
b7:ba:f8:f0:be:af:e4:93:78:29:1f:72:cc:81:47:
32:6f:3f:d3:09:7b:23:e0:51:0b:bf:dc:c5:75:a3:
f1:83:87:b8:c6:61:ce:be:04:3d:81:a1:fe:2e:69:
94:a2:fe:e4:43:b9:da:ee:f2:fb:76:77:dc:cc:f4:
40:c5:ad:c2:29:86:dc:3c:04:9c:7f:88:07:83:6d:
23:cb:41:3a:55:85:9c:b0:cb:d1:b4:c5:b7:c4:b4:
c9:ac:99:a3:ac:f7:ba:e7:f1:b4:7e:34:1d:8c:c1:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.189.0/24
Signature Algorithm: sha256WithRSAEncryption
13:93:2d:dc:1a:f9:f5:31:e6:70:9b:bf:d2:0e:62:ce:cd:c9:
ac:fd:6b:ff:5e:66:a4:e0:34:da:c3:67:58:b1:51:58:37:62:
86:52:58:9f:34:bf:06:b2:47:c6:ea:99:6d:9e:a3:2c:e0:5b:
76:15:aa:d8:45:90:78:65:b7:35:1d:a0:1b:ba:21:9a:27:a3:
74:59:e2:d7:68:dd:d8:44:c1:9b:d5:0e:b6:66:05:cf:d7:ec:
3f:12:89:68:6f:49:3d:04:0c:82:1a:48:90:3a:80:76:6a:0d:
05:43:64:de:30:ea:d3:a4:d7:0e:0a:54:dd:a7:c6:56:47:b7:
27:39:ca:f0:dd:eb:25:f7:ff:a5:62:28:ab:96:24:1d:7a:04:
7c:fc:ab:50:04:85:3a:eb:91:5c:be:27:0d:2e:44:43:3a:e9:
b3:81:f0:77:8d:f7:96:c7:f8:a3:c7:6c:fa:11:74:3a:ac:e9:
90:6b:4c:ad:fc:9b:bb:e8:23:af:3f:75:8c:70:d4:6c:23:88:
1a:1f:d0:b7:20:33:d4:8d:60:14:e1:93:cf:ab:17:5e:e8:d6:
41:97:32:0f:91:a3:a8:fb:f1:f8:7f:d3:b2:dd:38:6d:8f:54:
10:1a:53:37:b1:fa:2c:91:5c:d8:38:48:5b:d7:6f:ae:e4:a0:
45:b3:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:06:42 2025 by rpki-client