Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer
File: adZjNUxrsvo0MdQq-FaCEER_2-E.cer (raw, json)
Hash identifier: kmJaHMjDYbodH6/braRYsgk8CK4Fupj3DqvaApUPTa0=
Subject key identifier: 69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CEA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Oct 2025 07:44:10 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.106.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27882 (0x6cea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 28 07:44:10 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9150F54, serialNumber=69D663354C6BB2FA3431D42AF8568210447FDBE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:6c:26:46:af:71:f5:2f:91:2e:eb:4b:e9:
47:75:0b:2f:62:d2:a7:75:59:2b:59:a5:49:99:58:
ec:3d:d9:09:89:fc:69:4c:13:14:7a:9e:b0:a3:cf:
c9:7a:0f:a5:03:d6:f9:a5:02:58:ac:91:66:65:34:
aa:26:2a:8c:4f:ca:12:5a:71:b8:ee:07:c2:53:a2:
82:ff:85:9d:1e:a0:79:23:bc:ba:78:a2:d5:2c:b2:
e9:b9:bd:27:d3:b5:8b:48:85:91:59:8b:21:ca:8d:
5b:e8:fd:05:d6:af:00:05:7d:8f:c4:a3:8b:81:77:
f8:8c:24:f4:cf:77:b6:04:f2:d4:9d:93:d6:47:f0:
3d:35:78:24:87:25:cf:75:73:26:6e:93:8f:35:d4:
42:bc:fe:87:13:1a:43:7c:c8:b5:03:3a:2b:cc:71:
55:26:1d:86:70:23:cd:76:bd:fe:16:f6:ef:dc:64:
61:6e:bc:86:c6:60:54:00:c6:7b:f6:c7:6e:04:70:
23:4b:09:af:91:3f:44:e1:be:37:e2:26:a5:79:86:
71:da:3f:2f:20:73:47:f3:07:3a:de:d5:3d:fc:dd:
be:4d:14:8b:a2:6b:38:bc:2d:e1:de:29:0f:bd:b5:
ae:94:51:3d:3b:55:79:30:bd:d7:42:20:4d:02:20:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.106.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a3:0f:65:b6:c7:16:d8:f4:f1:3b:1d:dc:e0:32:46:9d:c9:
fc:5e:52:b5:af:c7:05:62:09:db:14:80:5f:a8:14:08:e0:6d:
5c:26:4a:d5:21:59:88:e5:11:df:0a:01:9e:89:76:41:2a:73:
cc:52:7f:70:93:70:e1:12:a0:b5:da:56:c6:1c:d9:a6:b6:c6:
b0:12:a4:b8:5a:e7:ef:31:cd:b2:fc:5c:6f:3b:ae:d2:8d:48:
24:af:33:1a:0c:c4:90:c3:87:ad:37:0b:64:3b:b5:e9:cf:a3:
bb:e6:d0:95:b0:05:98:97:c0:ff:57:f3:95:03:b3:23:f8:80:
9a:40:94:97:85:26:4c:b3:b8:af:8a:f6:90:d1:74:5b:af:86:
86:e2:12:56:a0:4d:0b:4f:8d:ca:2f:9e:f7:6a:7b:79:64:70:
d9:cb:ac:fe:a8:dd:d6:84:f7:61:df:b7:c1:66:f6:f1:93:a4:
7d:13:af:a0:4a:ce:5d:fe:b6:21:d3:68:8c:8f:d4:d2:23:f6:
21:99:98:09:a6:37:f9:88:0f:5c:fd:73:cc:55:d4:66:1d:03:
ab:6a:db:80:e0:6e:4f:07:b0:02:5d:0c:8a:c6:65:31:2a:8b:
3c:68:b0:1a:fc:95:f3:ce:44:a3:69:9b:5e:95:05:cb:2e:f9:
1f:7e:31:42
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICbOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUxMDI4MDc0NDEwWhcNMjYwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1MEY1NDExMC8GA1UEBRMoNjlENjYzMzU0QzZCQjJGQTM0MzFENDJB
Rjg1NjgyMTA0NDdGREJFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANS3bCZGr3H1L5Eu60vpR3ULL2LSp3VZK1mlSZlY7D3ZCYn8aUwTFHqesKPPyXoP
pQPW+aUCWKyRZmU0qiYqjE/KElpxuO4HwlOigv+FnR6geSO8unii1Syy6bm9J9O1
i0iFkVmLIcqNW+j9BdavAAV9j8Sji4F3+Iwk9M93tgTy1J2T1kfwPTV4JIclz3Vz
Jm6TjzXUQrz+hxMaQ3zItQM6K8xxVSYdhnAjzXa9/hb279xkYW68hsZgVADGe/bH
bgRwI0sJr5E/ROG+N+ImpXmGcdo/LyBzR/MHOt7VPfzdvk0Ui6JrOLwt4d4pD721
rpRRPTtVeTC910IgTQIg2nUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRp1mM1TGuy
+jQx1Cr4VoIQRH/b4TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBGNTQvRTExNjNFMENCM0QxMTFGMDg4ODZBNzVCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUwRjU0L0UxMTYzRTBDQjNEMTExRjA4ODg2QTc1QkM0RjlBRTAyL2FkWmpOVXhy
c3ZvME1kUXEtRmFDRUVSXzItRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKVlajANBgkqhkiG9w0BAQsFAAOCAQEAZaMPZbbHFtj08Tsd3OAy
Rp3J/F5Sta/HBWIJ2xSAX6gUCOBtXCZK1SFZiOUR3woBnol2QSpzzFJ/cJNw4RKg
tdpWxhzZprbGsBKkuFrn7zHNsvxcbzuu0o1IJK8zGgzEkMOHrTcLZDu16c+ju+bQ
lbAFmJfA/1fzlQOzI/iAmkCUl4UmTLO4r4r2kNF0W6+GhuISVqBNC0+Nyi+e92p7
eWRw2cus/qjd1oT3Yd+3wWb28ZOkfROvoErOXf62IdNojI/U0iP2IZmYCaY3+YgP
XP1zzFXUZh0Dq2rbgOBuTwewAl0MisZlMSqLPGiwGvyV885Eo2mbXpUFyy75H34x
Qg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:34 2025 by rpki-client