
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
File: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer (raw, json)
Hash identifier: MH0+dS4FRRW/U+SDU9jTnkTw7lrTvNNQrm2n/kuplmo=
Subject key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026CBE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Oct 2025 11:42:25 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 150370
IP: 103.19.50.0/23
IP: 2001:df1:61c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158910 (0x26cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 15 11:42:25 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c9:94:8c:f9:62:2f:c5:25:e7:c4:18:33:a1:
66:3e:1c:17:46:78:c0:d0:c6:64:64:2d:b7:ab:26:
28:54:e6:24:89:e2:75:21:9b:a2:31:0f:75:0c:a6:
bb:37:17:da:91:92:6f:1f:61:f7:99:2a:47:f6:39:
e2:7c:e1:3b:23:92:b5:b0:a1:01:fc:82:5c:f1:0d:
2d:74:22:33:0e:bc:66:56:e5:73:72:b5:f9:9f:fd:
16:ce:f8:bd:c9:a6:56:2e:fc:71:72:bb:b2:4d:5c:
97:f6:a5:b0:ea:d7:6f:db:96:23:ea:df:b1:37:40:
ad:e8:c1:6e:41:ee:49:54:28:a2:3e:0b:9d:33:dd:
17:9b:f6:4f:fb:d5:be:db:61:b2:35:0a:a2:a9:8c:
7f:b6:08:cb:e6:7b:bf:e3:78:74:e8:5c:09:80:50:
c3:53:3c:67:f1:b2:28:1d:39:58:cb:1c:b4:85:1c:
c7:9a:5a:5f:47:33:10:5c:6b:2a:85:5a:ec:69:75:
00:3b:2d:4b:ad:e8:f4:24:c5:ce:7b:09:a8:ac:be:
3c:28:ac:6d:09:bd:c6:96:97:4c:6e:9d:d7:d1:03:
2d:d3:21:26:17:00:fd:2a:dd:98:eb:f4:ef:09:2f:
eb:17:23:51:54:79:d2:fd:d4:fa:fb:1d:7d:38:b5:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150370
sbgp-ipAddrBlock: critical
IPv4:
103.19.50.0/23
IPv6:
2001:df1:61c0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:e0:17:4b:72:a3:b4:f5:c0:a6:2f:e1:d5:46:0c:60:dc:40:
31:34:e2:3d:e6:8e:0e:58:fe:f9:80:54:ba:87:20:f8:1b:09:
63:b7:7f:97:f0:6b:a9:c7:2e:9c:06:32:04:85:8e:bf:d4:8f:
c8:7e:e8:d0:fd:ef:4b:e3:4f:a5:90:35:8d:a4:2e:b9:cf:c5:
db:95:90:34:7b:c9:f3:d1:e0:fa:55:c6:cf:c4:b2:45:25:26:
83:7e:be:32:a1:98:05:1e:f0:fb:22:f5:6b:5e:10:59:1e:72:
e1:89:28:fe:20:8c:1b:79:2d:13:b0:45:78:17:f3:5c:af:f2:
d6:1d:cc:ea:bc:00:9d:73:bf:07:c6:4d:fc:a7:67:23:48:ad:
00:15:03:4a:99:47:71:4e:64:1d:05:b5:fa:d6:05:b0:f9:77:
1d:3c:26:fd:f0:5a:4c:8e:99:13:c3:ac:02:a0:d4:75:6c:d6:
69:7e:d9:45:8c:96:57:04:39:6c:1e:d9:a8:b4:36:23:fb:7b:
bd:18:e4:09:bc:af:d9:f1:7b:e7:2c:22:18:39:e5:a2:a3:09:
94:15:63:f9:62:5a:b1:53:7f:2a:04:24:0e:71:1f:4d:b3:0c:
1f:aa:a6:3d:c0:d7:b6:92:1f:41:f0:f5:58:cf:90:38:77:dd:
4d:c9:3a:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:44 2025 by rpki-client