Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.cer (raw, json)
Hash identifier: wSku5lYpWyodJFsdK+kwVEu7DOl7OUWHgCV2buZBxI0=
Subject key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026DA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 18 Oct 2025 14:31:27 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 150310
IP: 103.250.220.0/23
IP: 2001:df1:45c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159145 (0x26da9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 18 14:31:27 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:f4:6f:43:41:cd:49:fb:7b:c3:d4:52:42:
f6:70:43:15:f1:e0:b3:83:1f:36:a1:ad:27:c3:9e:
43:a1:07:ef:4d:7c:6b:79:db:72:66:1f:7d:90:67:
83:5d:f4:90:29:d3:37:cf:e0:be:f8:38:22:e3:00:
0e:5b:41:c8:db:32:99:2b:97:08:90:be:9e:80:13:
dd:1e:b9:41:1a:bc:5b:8a:76:57:61:71:44:d7:ec:
94:48:24:d9:65:09:ac:fc:5b:e2:5a:b5:af:35:ca:
81:f9:09:d2:ca:59:6c:6e:8c:38:67:46:59:ab:77:
60:d3:3c:d7:71:5e:ea:2a:1b:0e:75:70:b9:92:85:
50:94:c3:53:41:1b:bc:38:10:57:33:dd:07:34:fe:
d6:3d:7e:99:fd:56:73:f9:c6:14:66:fb:e4:58:53:
30:f2:fc:22:9f:bd:10:13:f7:ce:9a:26:c3:70:54:
59:96:38:2e:8b:7e:e4:ac:7e:2d:dc:e5:44:4e:1b:
1f:18:99:e3:0b:bd:b0:2d:ec:c6:08:52:45:1f:73:
d0:d7:8b:b4:2d:6b:27:27:e7:22:2b:4c:ed:83:3c:
f7:67:7c:0b:b6:4f:90:d0:50:c6:53:ec:c2:55:4d:
40:b6:64:c6:26:99:29:e6:d3:05:02:ff:42:a1:74:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150310
sbgp-ipAddrBlock: critical
IPv4:
103.250.220.0/23
IPv6:
2001:df1:45c0::/48
Signature Algorithm: sha256WithRSAEncryption
a0:25:f5:53:76:ed:51:d0:be:38:ba:65:ea:37:8b:28:4d:59:
bb:72:22:c3:d7:3f:c6:46:81:a9:c8:bd:3a:6d:f9:c1:90:bc:
57:48:9e:5f:67:f7:8f:3e:2e:62:dc:3d:f5:d1:54:33:da:e6:
ae:bc:44:9f:a2:07:98:fb:e2:09:94:82:6f:81:19:99:cc:ff:
76:56:0e:8d:76:70:ff:f1:e6:d3:b0:57:4f:74:bf:5a:2c:54:
1b:aa:8f:61:74:c6:38:98:bc:8c:cb:73:4f:ae:38:35:84:8e:
01:eb:19:d3:48:01:f5:79:dd:ad:b6:8e:e6:75:ae:eb:f3:0e:
d2:57:84:68:51:91:df:82:25:b0:6e:6c:fd:cd:30:d5:f7:c4:
b6:3f:9e:20:79:5a:10:00:fb:0b:f0:81:a0:21:a5:d4:89:22:
7e:03:ab:f4:97:a4:03:fd:fe:78:5e:fa:8c:bb:25:f1:f3:d6:
9c:95:3d:8d:ee:d4:34:83:be:65:6a:0e:4f:d8:6f:cb:d6:e8:
cb:a8:9f:d9:18:21:3a:1f:fb:fc:8d:6a:3f:4f:1d:23:96:d2:
24:4f:0c:fb:c1:79:97:1c:68:34:07:97:37:de:b6:34:b3:cc:
1d:ba:53:da:6e:77:97:59:91:e9:05:29:4a:29:fd:0d:a3:7e:
63:a4:04:1f
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAm2pMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAxODE0MzEyN1oXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkZEMkIxMTAvBgNVBAUTKEQ2MURDMTc4MDhGNThFMEY5OUIyODUy
Q0U3NDg2MEY4NTNDQjIwREIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZoPRvQ0HNSft7w9RSQvZwQxXx4LODHzahrSfDnkOhB+9NfGt523JmH32QZ4Nd
9JAp0zfP4L74OCLjAA5bQcjbMpkrlwiQvp6AE90euUEavFuKdldhcUTX7JRIJNll
Caz8W+Jata81yoH5CdLKWWxujDhnRlmrd2DTPNdxXuoqGw51cLmShVCUw1NBG7w4
EFcz3Qc0/tY9fpn9VnP5xhRm++RYUzDy/CKfvRAT986aJsNwVFmWOC6LfuSsfi3c
5UROGx8YmeMLvbAt7MYIUkUfc9DXi7Qtaycn5yIrTO2DPPdnfAu2T5DQUMZT7MJV
TUC2ZMYmmSnm0wUC/0KhdIhPAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU1h3BeAj1
jg+ZsoUs50hg+FPLINswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZGRDJCLzNGODZENzlBQTgzNTExRURBNzc2QUIzMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RkQyQi8zRjg2RDc5QUE4MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFq
MWpnLVpzb1VzNTBoZy1GUExJTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAksmMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ/rcMA8EAgAC
MAkDBwAgAQ3xRcAwDQYJKoZIhvcNAQELBQADggEBAKAl9VN27VHQvji6Zeo3iyhN
WbtyIsPXP8ZGganIvTpt+cGQvFdInl9n948+LmLcPfXRVDPa5q68RJ+iB5j74gmU
gm+BGZnM/3ZWDo12cP/x5tOwV090v1osVBuqj2F0xjiYvIzLc0+uODWEjgHrGdNI
AfV53a22juZ1ruvzDtJXhGhRkd+CJbBubP3NMNX3xLY/niB5WhAA+wvwgaAhpdSJ
In4Dq/SXpAP9/nhe+oy7JfHz1pyVPY3u1DSDvmVqDk/Yb8vW6Muon9kYITof+/yN
aj9PHSOW0iRPDPvBeZccaDQHlzfetjSzzB26U9pud5dZkekFKUop/Q2jfmOkBB8=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:57 2025 by rpki-client