Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
File: iH4RB6g_EXT_fj54CIjbVyO3kls.cer (raw, json)
Hash identifier: i1WeacF0aylh3eMP4Tc4m5th1A6oAspB6ysIh0wsQJI=
Subject key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CB4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Oct 2025 07:38:50 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27828 (0x6cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 23 07:38:50 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:8a:16:f0:51:44:fb:9d:30:bd:e7:7e:70:
0a:8a:d9:3c:29:0e:17:81:a0:6f:00:e3:be:d0:8e:
4b:39:d4:51:ce:9b:51:3b:92:82:94:ea:ec:28:bc:
83:57:8b:51:45:7d:b3:b3:9a:08:fe:0b:2d:b0:5a:
e6:97:d4:71:b1:a5:71:b4:d2:00:34:e7:56:b2:a4:
2c:af:64:ad:3a:ab:e0:b4:62:ec:7f:0d:c3:34:10:
e6:1d:3f:3a:12:b4:5c:73:13:9e:7a:37:af:6b:c8:
cd:45:12:1a:a9:c4:52:7e:49:40:3d:5c:8a:34:e5:
a3:68:4c:1c:4e:54:d0:76:5f:9a:48:ea:45:04:aa:
57:44:4c:9e:3a:02:2a:e7:a9:b6:31:3e:a6:4a:72:
28:fa:78:d3:3f:4d:02:4d:a0:8f:f9:21:11:97:d1:
30:c1:8e:09:27:ec:df:eb:7d:86:bd:1c:0d:6e:9b:
d9:a2:1d:b8:18:6f:52:05:6e:5e:67:16:c6:b1:5c:
e5:53:8c:d5:9a:a8:bb:a1:bd:fe:61:2c:29:c8:fa:
fe:77:e1:90:1e:4c:fd:63:d7:51:03:f9:b9:5a:ef:
bb:11:97:19:e9:ea:40:73:75:12:14:0d:87:ed:c0:
cf:a9:e2:69:6e:dd:e4:39:d3:8a:7e:6e:56:c1:4b:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.20.0/23
Signature Algorithm: sha256WithRSAEncryption
82:f4:7b:32:b7:30:0f:d9:e4:79:d8:4e:e0:52:68:15:f1:64:
95:66:23:ff:90:3c:c9:02:e0:33:8c:84:bd:7a:8b:17:80:bc:
e4:f7:13:bd:53:c1:c8:fe:7c:64:4f:af:fa:a0:17:4a:e7:16:
51:27:30:9c:53:14:1f:9a:06:c6:b2:4a:41:dd:ef:fe:0a:e3:
fd:4f:48:5d:7c:b7:b3:9c:a4:76:b2:9d:ed:74:c2:c6:9d:cd:
f5:ad:38:29:a6:d2:27:22:74:28:08:27:47:73:fa:e2:31:c7:
73:64:ef:73:42:48:22:81:53:c4:66:4b:07:1f:16:ad:59:ee:
8e:df:94:97:90:ad:89:97:a5:98:d9:bc:be:9c:24:80:31:90:
08:5c:09:c8:74:af:09:02:bb:9e:05:88:56:bd:84:ed:b4:dc:
a2:a8:96:13:83:5e:29:ff:9d:65:5e:bd:69:fc:f4:a3:54:77:
ee:02:f3:98:a8:22:f3:79:8b:b5:29:d5:1f:fb:35:80:4c:9b:
ce:9b:64:15:b8:d8:b7:31:04:b3:fc:31:ce:36:ce:56:ea:6c:
14:37:a2:7b:6c:c2:a4:2f:e1:56:99:d4:77:db:06:50:c3:d1:
38:b7:e5:28:b9:e3:e6:47:70:94:d8:d8:ce:09:c5:7f:29:41:
60:41:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:42:13 2025 by rpki-client