Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
File: XwTABfKMKFbHu_R2uRxioC8vxRw.cer (raw, json)
Hash identifier: 9naZvqVz5nTqj0HgoIolfw7PZnDazTh3x222cMjCqgQ=
Subject key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6D33
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Nov 2025 05:06:17 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.140.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27955 (0x6d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 1 05:06:17 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:b1:2b:af:74:6b:47:d7:86:6d:ca:55:c4:
f8:00:59:0e:e6:88:ce:99:56:58:c9:8c:4c:4d:4e:
64:cd:43:3e:8d:19:dd:f2:76:41:f6:44:36:02:7d:
7c:4d:66:d0:1e:10:ad:29:a4:4c:59:27:0b:85:5a:
90:09:d3:59:8c:bf:6c:39:ac:aa:57:2f:2c:4c:3d:
31:35:ed:cb:b8:43:3c:ed:ab:fe:a6:5a:bf:c3:7f:
3f:c5:79:c5:d5:94:73:95:1e:c6:40:f4:01:93:bb:
8a:1d:61:b6:b1:3e:2d:aa:76:36:82:9c:b2:89:70:
e4:09:c6:29:df:ac:db:f1:25:bb:62:4e:1e:51:b2:
af:1d:1a:96:46:a3:8c:72:c4:37:1e:c1:e4:49:5e:
ab:7d:d4:60:cd:95:75:b1:bc:35:5a:81:5f:18:c3:
b1:1f:1e:52:b4:69:8d:5f:4d:dd:16:d9:96:8c:01:
72:f1:91:db:02:ed:65:2f:5a:4e:18:c2:24:44:63:
25:66:bd:f1:d1:9f:30:88:eb:03:fa:d1:a0:3f:37:
68:4e:02:1e:29:4c:b3:9d:eb:05:fc:27:3e:9c:fd:
98:5c:fa:e9:05:60:09:cf:f2:c6:35:bf:21:3c:0d:
0b:7f:67:c0:0d:76:58:b1:cf:a3:cb:b8:f6:bf:6b:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ce:cc:0c:9f:59:a8:f4:31:87:69:61:e8:36:a6:19:b5:38:
54:35:77:92:15:90:6a:a9:7f:de:8a:e0:90:52:d4:a0:9c:7b:
18:d9:27:98:ea:01:ad:01:08:e6:bf:e3:78:2a:12:e1:cc:1a:
b4:fc:a9:b6:ad:4f:31:43:d9:46:d6:a4:63:d6:04:a9:2a:17:
2f:32:79:a5:5d:43:d5:83:71:96:2f:37:98:49:52:5b:01:a7:
6c:73:83:5f:ff:76:dc:b7:bf:c1:4f:fc:66:0f:50:8d:0f:ac:
3a:73:ce:12:0c:f5:08:a1:ed:62:b6:60:8c:e6:02:c3:c3:8e:
ee:6f:1f:8b:71:2b:db:4b:ba:f5:c7:fd:1a:88:cd:8c:bc:a2:
ba:57:2c:1f:a7:95:56:ba:bf:97:8d:bc:26:37:ae:1d:05:be:
a1:f2:82:c8:72:12:42:6d:97:3c:04:3c:69:c5:4b:c8:14:09:
02:18:4f:41:a2:5c:1e:3e:29:ff:ec:04:2f:ac:49:8a:0b:10:
9c:03:9d:1d:da:0b:bf:bf:a3:84:2d:c8:48:2c:bc:89:68:e4:
30:5b:bc:18:c7:dd:67:86:47:8a:01:e6:de:5f:ee:2f:9a:32:
b8:02:7a:04:94:b3:6b:84:85:73:65:c2:07:1e:aa:ba:40:1c:
47:ad:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:01:43 2025 by rpki-client