Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer
File: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer (raw, json)
Hash identifier: MjxYXF1BpMXamw7pqBwSVcyRplgGeBmYP5erVNe4bOw=
Subject key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6D38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Nov 2025 10:55:19 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 138.252.58.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27960 (0x6d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 1 10:55:19 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:6e:2b:7a:32:d1:8e:bf:3c:d0:79:dd:96:
6c:1e:b8:fb:c0:81:19:4f:2e:91:19:da:a9:d7:55:
c5:2c:70:27:ce:3c:5f:0c:1b:88:a0:4e:3e:73:05:
b6:f7:f2:e6:03:2c:b9:4a:86:e2:a1:f1:6e:ee:a2:
3d:67:42:b3:7e:84:ae:30:7c:e3:1b:be:4a:e3:74:
2e:64:28:4c:13:12:0e:54:3e:62:c4:bc:62:4f:1c:
df:17:f2:8d:99:c2:66:a3:e5:b0:b9:2a:86:7b:fa:
36:15:0d:c7:d8:54:0a:ec:a8:4f:70:cf:a6:0f:ae:
b6:1f:9c:50:44:3e:96:e6:39:94:9e:e0:27:47:c6:
88:01:ac:1a:d5:d1:e5:7f:65:4d:3b:b6:a6:dc:fc:
ed:66:af:66:e0:29:d8:24:dc:7e:d3:6f:26:a2:b7:
82:f4:9e:68:c4:d1:28:fe:1e:32:43:2d:21:83:4e:
8b:5c:8d:ca:3e:a6:8b:98:bf:48:a3:e0:cc:ea:c7:
0e:b6:38:ef:f2:37:7f:7d:be:9a:fe:2f:aa:a3:2c:
82:3f:f7:62:63:46:33:7e:21:2d:fa:65:48:ad:11:
23:5c:ee:74:cd:93:99:6e:24:f6:55:db:b6:6b:c4:
43:e1:9b:0a:41:8d:a3:7a:79:c9:cb:5f:36:97:44:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.58.0/23
Signature Algorithm: sha256WithRSAEncryption
09:b6:16:7e:f1:20:fc:21:e1:11:2b:de:2c:a7:dd:c0:c5:73:
c4:06:b2:4a:2a:66:a0:85:4a:f3:48:d8:d5:68:06:08:54:fa:
3f:a6:f4:8a:2b:fb:19:8b:26:6d:d2:d1:b2:cd:eb:d0:5c:e9:
ee:db:93:bc:0f:b4:8a:b3:11:12:fa:15:5f:81:dd:08:e6:26:
9c:db:80:e0:2d:70:d9:d3:32:14:25:15:b6:5d:10:f8:8e:42:
3a:7f:af:4e:0e:62:bb:82:0f:ed:de:28:fa:fb:cd:15:94:54:
92:f6:d1:49:3c:b4:05:a9:a8:0a:f9:02:c4:6a:c5:39:bd:20:
b4:0e:03:51:62:c6:a4:96:d3:9c:c3:4c:36:a9:64:13:37:43:
c9:bb:d4:99:83:15:1e:eb:3e:e3:d9:ba:b3:e5:4a:34:31:a2:
02:ac:8a:80:e2:a6:e2:bd:0a:01:40:c6:8f:61:e3:c2:08:b5:
e6:20:f7:d2:b1:a8:f2:b3:ba:6b:fd:81:9e:e6:8a:ad:64:af:
c4:06:a4:ba:15:78:f9:09:20:c6:79:00:8a:2c:00:b2:de:18:
ad:e8:24:64:bc:b2:c9:80:3d:a9:a0:ea:f0:a0:a3:e5:9e:1e:
20:04:06:04:d5:57:d1:1d:cb:f9:44:3f:07:4d:16:48:3a:fd:
19:97:84:65
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICbTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUxMTAxMTA1NTE5WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzMUNGNDExMC8GA1UEBRMoNjlFQ0YwRTJBMUVEOEYwNUNDMjc4QjNF
MTNGNjYyRUQwQjM1NDg4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJ6zbit6MtGOvzzQed2WbB64+8CBGU8ukRnaqddVxSxwJ848XwwbiKBOPnMFtvfy
5gMsuUqG4qHxbu6iPWdCs36ErjB84xu+SuN0LmQoTBMSDlQ+YsS8Yk8c3xfyjZnC
ZqPlsLkqhnv6NhUNx9hUCuyoT3DPpg+uth+cUEQ+luY5lJ7gJ0fGiAGsGtXR5X9l
TTu2ptz87WavZuAp2CTcftNvJqK3gvSeaMTRKP4eMkMtIYNOi1yNyj6mi5i/SKPg
zOrHDrY47/I3f32+mv4vqqMsgj/3YmNGM34hLfplSK0RI1zudM2TmW4k9lXbtmvE
Q+GbCkGNo3p5yctfNpdEPxUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRp7PDioe2P
Bcwniz4T9mLtCzVIjDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFDRjQvM0VBNjM4QzhCNzExMTFGMEE1QzI4MDczQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMxQ0Y0LzNFQTYzOEM4QjcxMTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0
andYTUo0cy1FX1ppN1FzMVNJdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYr8OjANBgkqhkiG9w0BAQsFAAOCAQEACbYWfvEg/CHhESveLKfd
wMVzxAaySipmoIVK80jY1WgGCFT6P6b0iiv7GYsmbdLRss3r0Fzp7tuTvA+0irMR
EvoVX4HdCOYmnNuA4C1w2dMyFCUVtl0Q+I5COn+vTg5iu4IP7d4o+vvNFZRUkvbR
STy0BamoCvkCxGrFOb0gtA4DUWLGpJbTnMNMNqlkEzdDybvUmYMVHus+49m6s+VK
NDGiAqyKgOKm4r0KAUDGj2Hjwgi15iD30rGo8rO6a/2BnuaKrWSvxAakuhV4+Qkg
xnkAiiwAst4YregkZLyyyYA9qaDq8KCj5Z4eIAQGBNVX0R3L+UQ/B00WSDr9GZeE
ZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:01 2025 by rpki-client