Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
File: zuSHZKosFvdaBnJE66WGaXThztY.cer (raw, json)
Hash identifier: /6roP1Hw68r06oz0pBLOAL0a4wMAWQELf3uJFN6kM+k=
Subject key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6CD5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 25 Oct 2025 09:19:43 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.30.236.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27861 (0x6cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 25 09:19:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:9d:18:6b:a4:d0:ab:ad:f8:c0:69:58:29:
4c:32:b8:75:6f:75:5e:6b:7f:93:e3:d7:0e:b7:45:
f2:1f:48:8c:3c:fc:ce:4a:94:d3:64:13:28:2d:d9:
7d:a8:07:ac:ef:4f:47:cb:9d:76:ff:00:d5:36:ce:
81:fc:cc:d4:57:9e:9b:e4:0b:18:e9:a4:37:c2:df:
82:aa:41:58:83:18:9b:01:5c:a8:e1:21:98:52:5e:
6c:02:1f:31:47:bc:dd:2e:09:ff:0b:a8:94:d3:45:
ac:da:5b:26:c1:77:f8:d5:80:42:1a:7c:4f:5e:53:
d5:29:02:95:10:79:05:40:08:ce:e9:5a:64:4d:cb:
29:f4:9d:5e:a8:89:d8:61:09:87:82:7b:94:ce:9d:
c0:72:61:97:53:0f:38:fc:81:f1:96:2b:ed:7c:b0:
b4:8a:de:90:b6:d6:6e:d4:33:4e:4d:e3:9b:61:a6:
0c:2d:c1:57:b1:14:3b:9e:a7:f6:f0:79:72:20:67:
75:eb:16:c9:9b:85:81:60:50:00:e9:2a:ab:7e:73:
32:93:ce:3f:7a:17:a1:8c:f0:07:2c:cc:db:3f:31:
43:05:20:55:b2:c8:e3:88:7d:7e:69:36:72:d0:d7:
f0:59:d8:a9:45:ec:32:13:b4:f7:b0:59:a2:69:18:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.236.0/23
Signature Algorithm: sha256WithRSAEncryption
41:da:68:2d:ac:ff:a0:48:cd:68:68:e3:28:09:6e:89:11:95:
57:a0:6a:ae:d2:5e:8b:47:f4:b5:90:03:f7:4f:63:97:0f:02:
93:2e:ea:aa:70:c1:2e:94:05:c4:ea:64:e3:d7:e7:8b:89:52:
ff:eb:30:6d:a9:39:29:9c:90:57:7a:0c:f7:1b:0c:62:66:4d:
0f:ac:79:1b:2a:ed:25:44:6a:2c:38:a5:3d:55:c9:c1:37:af:
7d:73:cf:8f:7b:57:3f:49:94:e9:2e:0b:c7:cc:f2:8e:e6:64:
8f:af:35:30:8b:92:64:0e:79:5b:84:a7:ad:4b:81:05:56:34:
84:7e:f6:dc:3f:25:11:32:55:b2:1a:ee:4d:7e:69:03:30:52:
cc:3e:4b:a6:0e:a7:4e:b0:c2:52:3c:c7:bc:0b:7d:c1:06:2c:
7c:f2:97:72:e3:42:f5:cd:8a:ce:70:8f:9e:a4:26:0a:6d:78:
16:cb:dd:d6:ce:26:ff:89:0f:cb:7d:d1:89:fb:b7:fc:cd:c0:
90:d8:f0:e6:4d:c4:f8:2e:ab:49:55:46:ce:b1:6d:cb:9a:6d:
63:51:f8:22:fd:ef:1d:86:15:42:e5:45:cc:2b:bf:d9:e4:bc:
2a:6d:49:5e:c7:80:6b:9d:ce:bf:72:a7:24:0c:a5:c9:97:e4:
b2:22:40:2b
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICbNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUxMDI1MDkxOTQzWhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1QTRBRjExMC8GA1UEBRMoQ0VFNDg3NjRBQTJDMTZGNzVBMDY3MjQ0
RUJBNTg2Njk3NEUxQ0VENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJlknRhrpNCrrfjAaVgpTDK4dW91Xmt/k+PXDrdF8h9IjDz8zkqU02QTKC3ZfagH
rO9PR8uddv8A1TbOgfzM1Feem+QLGOmkN8LfgqpBWIMYmwFcqOEhmFJebAIfMUe8
3S4J/wuolNNFrNpbJsF3+NWAQhp8T15T1SkClRB5BUAIzulaZE3LKfSdXqiJ2GEJ
h4J7lM6dwHJhl1MPOPyB8ZYr7XywtIrekLbWbtQzTk3jm2GmDC3BV7EUO56n9vB5
ciBndesWyZuFgWBQAOkqq35zMpPOP3oXoYzwByzM2z8xQwUgVbLI44h9fmk2ctDX
8FnYqUXsMhO097BZomkYx5sCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTO5IdkqiwW
91oGckTrpYZpdOHO1jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUE0QUYvNDY2NDY2Q0E2OUY2MTFFRkIyQjhBRjUwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVBNEFGLzQ2NjQ2NkNBNjlGNjExRUZCMkI4QUY1MEM0RjlBRTAyL3p1U0haS29z
RnZkYUJuSkU2NldHYVhUaHp0WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAe7DANBgkqhkiG9w0BAQsFAAOCAQEAQdpoLaz/oEjNaGjjKAlu
iRGVV6BqrtJei0f0tZAD909jlw8Cky7qqnDBLpQFxOpk49fni4lS/+swbak5KZyQ
V3oM9xsMYmZND6x5GyrtJURqLDilPVXJwTevfXPPj3tXP0mU6S4Lx8zyjuZkj681
MIuSZA55W4SnrUuBBVY0hH723D8lETJVshruTX5pAzBSzD5Lpg6nTrDCUjzHvAt9
wQYsfPKXcuNC9c2KznCPnqQmCm14Fsvd1s4m/4kPy33Rifu3/M3AkNjw5k3E+C6r
SVVGzrFty5ptY1H4Iv3vHYYVQuVFzCu/2eS8Km1JXseAa53Ov3KnJAylyZfksiJA
Kw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:02:54 2025 by rpki-client