Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
File: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (raw, json)
Hash identifier: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=
Subject key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4781
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Oct 2025 05:34:44 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 179.70.0.0/15
IP: 179.192.0.0/16
IP: 179.196.0.0/16
IP: 187.42.0.0 -- 187.42.191.255
IP: 191.43.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18305 (0x4781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Oct 15 05:34:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:e1:28:c5:82:b6:8e:49:d2:85:12:20:02:
b6:3a:b8:b8:96:62:1d:b0:24:44:8f:2e:f7:ce:e9:
ef:d1:e0:d6:47:fb:ae:1c:22:7b:9a:d6:9a:54:49:
ae:af:2c:5a:fd:f8:5b:16:3c:20:ee:43:26:96:26:
6f:63:49:00:26:bf:db:f6:cd:98:da:86:d8:29:dc:
29:14:85:12:60:b3:6a:3c:4a:a0:db:99:98:95:c7:
12:28:ec:21:8b:d1:e6:1c:55:d8:90:f1:33:a2:4e:
97:d8:86:ef:3b:5a:77:40:68:d7:7e:e2:7c:50:6e:
2a:3b:00:4f:2d:d6:39:48:b2:90:a0:2f:3b:6f:46:
1d:09:dc:22:c5:11:87:d7:e8:22:13:1a:6f:f9:31:
cc:12:03:c2:82:65:43:95:56:ee:ac:22:b2:71:cc:
0d:52:74:f2:0c:c5:44:33:aa:e1:8e:04:02:8d:1a:
fc:13:e7:06:60:28:7f:62:91:28:02:a8:dd:29:b1:
d4:87:b8:c7:a0:00:9c:37:f4:ff:fc:e3:65:46:9e:
06:da:da:17:bc:6f:1f:94:aa:2e:15:e3:05:fb:dc:
4c:e6:7e:01:9b:a3:02:02:27:94:4e:09:e7:bc:6c:
94:58:36:bd:45:fa:54:17:99:b7:2f:57:6d:be:bb:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
179.70.0.0/15
179.192.0.0/16
179.196.0.0/16
187.42.0.0-187.42.191.255
191.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:f9:7c:82:ce:79:95:27:b3:1c:81:20:2c:5f:7d:52:c1:09:
98:bb:7f:1d:7e:29:27:90:63:20:52:db:65:6e:69:b6:63:35:
61:fa:5f:2e:71:c3:3a:fb:4b:12:ab:d5:48:b7:38:b6:56:81:
2b:9e:a3:8e:62:ce:82:f1:6a:a6:eb:ba:63:b7:ce:dc:df:75:
d8:4a:98:45:93:4e:18:97:3a:19:0f:c0:34:f3:4d:e2:e9:92:
a3:e1:8e:48:31:58:a9:56:4a:43:5f:2a:90:16:76:64:29:9a:
4a:78:1b:55:2e:3e:da:11:76:4b:66:01:c9:45:a3:e0:19:a0:
b3:9f:8e:65:c4:1a:73:e7:ab:db:6d:aa:02:ac:28:43:ce:ec:
dc:3e:aa:f6:e7:4a:d8:df:8e:4a:a7:0c:b9:02:2d:01:3f:93:
8e:6b:b0:31:58:f7:56:ee:23:9a:26:99:75:89:ef:b4:82:69:
cb:42:ff:de:5b:02:aa:19:f3:d8:00:e0:b2:af:50:07:f0:ee:
8b:33:68:8b:dd:d8:6a:2b:fa:44:63:51:e6:ca:6a:53:e9:19:
15:25:f7:80:ea:67:a8:12:ab:4d:03:1f:b8:e6:45:b7:f2:dd:
58:57:7c:d6:6d:8c:f9:9e:9c:0f:b0:79:cc:b2:5a:0a:9e:16:
91:2e:d2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:37 2025 by rpki-client