Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
File: pRz7iig43CPyh2RKRzXvwT2MMRM.cer (raw, json)
Hash identifier: Y4O6eASqi+FnTwNC/9Ag0D2dAKS8dlXeeq3MgaGxvRc=
Subject key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6D05
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Oct 2025 18:55:25 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.222.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27909 (0x6d05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 29 18:55:25 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7a:57:15:4b:1f:15:69:c6:6e:6a:5b:70:74:
7e:51:d6:66:e1:e0:63:ac:ad:f9:5a:e0:1a:c6:98:
e4:0b:10:50:0b:f1:32:a6:95:19:67:1b:5d:48:e7:
ed:25:ae:cd:11:ac:ec:d8:00:b5:54:e3:c1:7e:46:
b6:56:bb:b6:82:30:e1:6b:15:f7:eb:26:9c:22:f6:
17:4b:be:94:bd:15:c1:67:c1:fd:60:e2:cb:aa:51:
42:59:75:0f:b2:99:cd:cf:97:62:4e:8e:51:81:b1:
49:8f:3e:82:5e:67:8d:31:d5:24:25:12:3f:a4:b5:
67:d0:1f:01:34:34:5c:44:10:d7:4d:b5:09:da:d3:
73:bf:33:73:61:86:2a:1c:6e:0c:c6:57:69:a5:99:
41:65:c8:1a:69:84:b7:1b:07:27:eb:6d:d1:e4:9b:
82:ec:69:23:ec:d1:58:b4:93:e1:99:23:31:c8:e9:
a8:d2:95:8d:60:74:c0:bc:72:d6:43:1e:e3:fd:5b:
a9:1f:81:ec:28:46:13:88:e9:39:76:c1:88:c0:7a:
05:d6:6d:1b:30:fa:71:bd:ad:ec:e4:7f:7b:cb:2b:
49:9f:da:90:23:fc:d0:02:52:e3:23:55:ab:1c:a8:
07:f7:00:d3:f4:55:ad:43:c8:02:10:f1:ed:13:b0:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.222.0/24
Signature Algorithm: sha256WithRSAEncryption
08:63:de:54:f9:e3:55:38:c8:2b:a2:1d:72:bb:c8:86:a8:73:
56:91:50:f9:8f:24:55:b9:09:00:73:ab:1b:b7:c0:e3:59:27:
3b:a3:02:5e:0d:0d:42:e1:7a:6e:40:8b:28:79:1f:67:b2:41:
2f:a9:18:88:3d:66:a9:26:7c:2f:d8:83:b1:5e:6e:53:99:6d:
03:48:1b:55:23:f6:1d:b7:0b:75:6e:9e:dd:b6:1e:33:c7:75:
f4:69:73:6e:72:70:43:69:d8:31:40:23:7f:fa:03:95:f9:d3:
a8:98:0d:48:5e:a0:f2:fc:77:83:12:79:8f:cb:16:30:45:98:
f9:8d:66:0d:d4:ee:2c:b4:b4:eb:f3:54:a6:eb:df:1d:03:f0:
db:43:ef:6f:53:cd:36:af:28:7a:d2:78:d4:e5:d9:e3:a6:a5:
25:9d:9f:86:f9:31:13:71:ba:a6:59:81:7e:86:dc:88:bc:a7:
7a:2f:c6:c6:a7:f4:9d:44:5d:98:b4:84:d4:a0:6c:ea:6f:7b:
fa:3c:81:5b:7f:8c:3d:f2:f4:9a:fc:84:16:2e:e4:f2:74:51:
75:98:08:79:b9:24:d0:51:9c:a6:5f:0a:09:47:16:b6:c5:97:
3a:7c:c9:ef:11:bb:2c:d9:5c:80:80:6f:39:30:db:9c:45:f9:
4a:88:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:04:19 2025 by rpki-client