Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer (raw, json)
Hash identifier: blw/jkuVywCJ3ZIXLiLuaSgsetcWsA6D8lOCdoamAs0=
Subject key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6C9A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Oct 2025 10:21:25 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.74.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27802 (0x6c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 21 10:21:25 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:c1:a0:cd:76:7f:7a:ab:44:83:fa:f6:31:
55:c6:43:a7:eb:8a:70:b8:fe:76:66:0c:ea:f3:66:
af:05:cf:a3:8c:8d:78:27:44:e9:bc:3c:85:0c:bd:
32:fe:be:e0:12:d3:58:d5:d7:28:50:7f:b5:05:5c:
53:5e:77:21:41:b5:1c:25:03:44:54:24:bd:25:69:
a8:88:12:05:70:df:67:39:fb:15:cb:87:f3:00:5a:
5f:ee:cf:38:39:ad:03:37:0c:12:de:0b:b9:31:90:
aa:33:aa:d4:b8:0e:92:0a:9d:33:6d:75:87:a8:bf:
25:ce:76:72:34:1d:80:de:41:44:d6:87:de:9c:3d:
48:f3:78:cd:0c:97:52:2b:28:c8:61:03:0f:77:1b:
60:e4:27:2e:a4:f3:43:01:21:35:b3:00:57:e8:5c:
f6:5a:89:12:b5:d5:c8:07:1d:c5:35:96:b7:ea:42:
bd:a6:b1:61:d9:4d:ea:c0:9f:3c:ee:5b:56:39:47:
95:c3:cc:39:31:fe:e4:b4:07:5a:25:7c:23:0b:1c:
7e:d8:5c:66:fa:de:f6:ff:b8:73:87:1b:42:33:da:
a8:90:ec:7c:65:28:c6:87:aa:38:32:2e:b7:bc:08:
21:7a:4c:c1:bb:e7:82:a6:fc:fa:e1:60:4a:12:4f:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.74.0/23
Signature Algorithm: sha256WithRSAEncryption
96:8a:ad:67:69:42:aa:48:6c:d7:35:5d:80:dd:10:24:24:91:
b5:0a:ff:20:a3:2d:5f:93:80:1c:08:b6:e7:60:55:b6:65:6e:
1f:0a:db:04:3d:5a:9c:21:7c:d4:01:21:47:b3:6c:cf:81:db:
ab:6c:f0:88:de:cb:47:06:97:f8:3e:83:a3:96:ed:77:d8:1f:
98:52:e9:2c:ed:5c:89:c6:77:90:63:25:01:03:9d:c3:f4:af:
a3:fe:a1:7f:df:cd:b6:0c:48:d6:cf:ae:c7:96:49:50:be:c1:
17:cd:55:38:60:b5:79:80:79:5d:47:dd:47:fb:f4:05:6d:a1:
55:a4:f7:ca:fa:f9:8a:91:c6:10:04:82:e8:df:eb:4a:41:eb:
e1:8b:44:f8:27:67:b6:85:71:fd:03:1b:d8:36:33:23:8c:bf:
ba:13:b0:36:7d:e7:46:b1:df:93:f3:af:35:a7:9c:17:58:8f:
90:40:fc:10:16:1a:7e:f2:d3:6e:81:07:89:c1:2a:91:51:01:
6a:c0:69:b7:d5:19:ae:43:93:2f:17:58:13:00:d4:35:b6:fb:
ea:eb:f7:ea:70:28:a7:2d:06:ba:96:02:2b:15:1d:00:0e:57:
c3:a8:71:ab:9a:dd:28:f0:cf:27:86:2d:df:42:7c:f7:b1:83:
db:b5:4b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:08 2025 by rpki-client