Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer (raw, json)
Hash identifier: E5Yvy190FSaKO8htYCCO/bjtUP/NsU7PPBrTz0tdSWo=
Subject key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025D85
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Aug 2025 21:39:00 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 103.97.228.0/23
IP: 103.106.202.0/23
IP: 2401:8f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155013 (0x25d85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 14 21:39:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:e2:1a:2a:2d:21:be:8c:e3:89:34:1c:64:
ee:a3:38:a6:71:df:55:6e:27:61:be:dc:98:26:dc:
cc:8f:4d:dc:2e:cd:2e:eb:af:c2:f8:e3:e4:a0:e2:
74:e9:f0:3d:8b:39:f2:a2:db:5e:6b:9a:b2:17:7b:
bf:35:de:3f:79:48:37:f6:b7:60:5b:37:ce:d1:fe:
f1:11:eb:cc:09:73:e2:bb:e6:e4:6f:4e:cb:51:d8:
5c:ec:6b:1e:47:7c:c3:4e:e1:48:0a:ea:eb:2b:96:
4e:f6:54:44:94:c2:0b:5f:2f:54:e8:05:6a:21:c9:
77:43:a2:79:54:ab:90:9b:54:62:6c:aa:ea:ec:85:
b8:18:97:98:55:12:69:aa:69:d7:3b:8e:2a:0d:42:
67:9a:f2:0f:5b:91:57:a4:26:4e:aa:2e:9d:19:30:
42:60:b0:27:b9:48:a3:b0:d4:df:5c:42:38:65:a3:
b1:2a:ad:dd:65:4a:08:d2:f4:b5:8d:58:dc:99:a0:
97:e4:af:b2:e1:df:6a:4a:cb:2f:22:ab:af:35:06:
57:d2:b0:40:26:bd:07:10:09:89:da:0a:5f:4c:a1:
c5:b4:4d:d8:d4:df:d5:46:95:4c:1a:51:01:07:7f:
4b:26:8e:d8:44:f1:e1:50:84:61:c3:20:c3:86:b5:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.228.0/23
103.106.202.0/23
IPv6:
2401:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
a0:70:0a:6e:c7:15:a2:8d:5a:b9:9e:88:32:ff:a2:30:42:8f:
6f:2d:78:a1:52:5b:f8:91:15:4e:72:8c:74:fc:21:f8:8b:92:
24:f7:84:ab:c7:91:15:1d:93:f7:09:7f:c1:6f:b5:cf:30:16:
53:e9:a9:ea:ee:7d:79:d8:17:9e:ff:04:7f:53:f7:9d:e3:60:
7b:27:bf:d0:b6:80:a9:2f:99:6d:a3:95:25:d6:1f:5c:3b:cb:
b0:33:ca:07:c6:e5:01:cc:75:9c:ae:96:3e:5a:2a:76:f8:5e:
db:fd:8e:90:04:7c:41:86:d8:de:62:fb:a4:49:61:a3:ec:c7:
17:df:ea:81:c0:01:9d:be:b2:14:92:d1:70:8d:19:e8:40:6e:
a5:a1:69:51:f2:23:5a:12:2e:47:2c:b7:e8:b1:dd:00:46:04:
b6:85:c8:b6:b9:1e:d5:51:d8:61:2a:72:dd:20:2e:03:b0:80:
c1:a9:bb:05:68:57:70:6b:08:23:ed:55:f6:8e:db:f8:fb:fb:
31:ba:45:95:94:22:73:18:55:e9:fc:70:a9:e2:2d:b6:2d:11:
1d:c3:dd:8f:37:0d:d6:7f:bc:f8:8a:db:52:39:26:83:06:c1:
dc:9e:63:cb:33:06:9d:38:ed:63:60:b7:45:4b:16:ba:b2:56:
71:25:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:09 2025 by rpki-client