Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
File: p_d_IEfTVowEOjOMeTKwojyPaHE.cer (raw, json)
Hash identifier: tloxHBdqm4jBjK71g1aYHorBAYEUmc0Kuq8AJl7/ZjI=
Subject key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CA2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Oct 2025 00:00:18 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.80.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27810 (0x6ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 22 00:00:18 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:c4:e5:1e:0f:76:06:9b:d0:36:69:42:d3:
98:96:0d:b2:7b:fa:7b:de:4d:36:b5:e1:74:ef:c8:
04:c3:35:19:bc:6a:58:7a:31:62:32:6c:65:81:6f:
53:a5:29:5c:ca:8f:ff:77:25:98:e9:a0:2c:76:eb:
99:cd:84:77:83:7e:55:ce:10:be:49:c1:bf:05:37:
8d:b2:b0:70:52:da:27:e7:1f:88:91:ea:c6:3d:6b:
79:c4:7c:09:9e:ef:48:71:98:c6:9d:76:92:9d:6b:
f7:a2:24:c5:83:0c:25:12:20:d1:f7:52:45:22:17:
2a:cc:1d:03:29:90:20:d4:f1:77:66:da:60:5f:17:
b3:43:d4:02:2d:33:68:dd:f8:12:0e:66:32:6d:12:
f1:e6:c3:13:c7:00:bf:c9:39:8b:ef:8d:7b:69:7d:
21:00:3d:96:54:b8:b7:c0:9f:ad:97:98:38:fa:e8:
83:7a:e2:f2:e7:1e:74:b3:80:d4:f5:b3:12:33:de:
a5:bd:4a:9e:1e:53:9e:33:82:ee:5d:cb:1c:fb:de:
f4:d5:d9:22:ef:53:cc:f0:ae:d0:63:27:b9:1c:04:
6a:be:b5:d4:1b:19:e8:1e:a1:f2:25:85:30:9a:29:
c3:95:f1:e9:aa:bc:6d:bc:01:75:ef:e3:f5:b2:ee:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.80.0/23
Signature Algorithm: sha256WithRSAEncryption
97:34:cf:68:d2:7b:0e:96:3a:5a:eb:2c:aa:1e:64:82:9b:17:
52:6a:69:2e:19:05:6a:40:27:5e:f2:a3:55:58:ac:c9:8c:5c:
72:bc:cb:e2:b0:8b:24:ba:03:10:24:02:02:7b:f3:50:c7:f9:
90:42:c8:22:ba:fd:b7:d2:0e:f6:e2:78:ab:2d:f9:bf:c8:31:
9f:e0:fa:fc:3c:7e:70:b2:59:15:04:66:95:53:ef:af:38:af:
7e:59:66:70:50:dc:22:1c:52:4d:38:59:12:ee:4d:18:b0:8c:
1c:e7:57:9d:fb:84:ae:c6:d1:20:e1:23:7e:3f:6b:36:e8:12:
8c:ee:34:34:46:42:3c:fa:e4:fa:db:1f:88:be:9e:d1:6b:d2:
16:d0:9d:cb:23:44:cf:e4:72:2d:ed:7a:24:e2:28:3d:86:2b:
12:78:de:06:49:23:3f:24:8d:52:02:31:99:e8:0d:05:86:ab:
7b:4c:5d:16:b7:7a:e2:fc:78:d6:04:88:9a:8e:85:cc:73:65:
c6:39:0d:65:10:56:09:5b:77:f5:79:a7:c6:11:8f:9b:8c:7a:
3e:70:df:14:20:ff:00:f2:c6:8d:cf:d5:eb:76:a7:f5:1f:c8:
f1:15:6c:39:0d:67:84:da:68:7a:57:95:50:55:db:5a:8f:eb:
a7:cf:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:48 2025 by rpki-client