Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
File: 379fgwtQs7_B5TULnGBbt1YSLhE.cer (raw, json)
Hash identifier: rV1t/QUf7hDL4zFV2bhHmrM58uL2DRvuk76NddC13GE=
Subject key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026B30
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Oct 2025 23:47:32 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 147061
IP: 103.173.235.0/24
IP: 103.198.0.0/24
IP: 2001:df7:ae80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158512 (0x26b30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 7 23:47:32 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:85:af:be:ac:c4:96:bf:6d:91:9c:24:5f:
fe:8e:69:89:fa:91:10:e6:53:05:8b:e5:94:85:3e:
f9:51:61:ed:69:0c:89:f3:99:73:66:09:9f:ad:4e:
a1:5d:35:9f:35:c4:eb:48:e1:1b:a8:c8:52:2f:f4:
1b:df:a2:92:20:7b:e9:81:74:51:74:b2:e3:46:57:
ce:66:b2:13:fb:0d:6d:3c:92:20:a4:ca:68:db:ad:
29:f0:f9:6a:ee:3c:6f:d1:55:a8:4f:37:b5:a3:d0:
6f:f1:44:82:4d:ef:fd:d8:7a:47:dd:c7:0b:db:5f:
5b:a6:ff:9f:3a:97:d4:56:2a:14:8b:a4:68:11:6a:
82:43:d9:aa:cc:12:3c:ec:86:00:23:88:bc:03:98:
5f:10:7d:6d:6c:2d:de:59:4c:94:87:32:9e:3d:55:
49:cf:97:3f:0c:4b:f3:ca:1c:11:d7:aa:85:26:c8:
67:fa:2c:f9:88:8b:01:da:61:92:8d:91:6f:43:5a:
0c:b4:0f:25:1a:48:32:d6:1f:dd:c0:aa:24:6c:ea:
dd:ea:1e:9b:cc:24:74:d3:00:35:99:f6:89:86:ec:
7f:5d:5e:10:cf:69:97:4b:2e:f8:7e:8e:8d:38:62:
ee:06:55:75:3c:ef:e3:c9:26:32:c0:76:d6:5a:3f:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147061
sbgp-ipAddrBlock: critical
IPv4:
103.173.235.0/24
103.198.0.0/24
IPv6:
2001:df7:ae80::/48
Signature Algorithm: sha256WithRSAEncryption
2b:4a:7a:bc:27:ec:7d:7a:48:99:64:f0:73:c8:19:64:87:72:
92:a1:93:fa:81:36:7e:9a:85:a2:f8:3a:1c:d3:57:72:ec:f0:
21:27:0d:c5:34:f1:6f:41:dc:9d:7d:46:df:95:40:15:fc:56:
9d:22:1a:4b:bd:a0:15:d1:07:03:0e:7d:0a:b2:71:87:9c:2c:
45:58:f6:d8:cd:ef:45:22:17:4d:cc:de:fc:96:8c:2a:e1:63:
c3:21:09:3c:08:c8:0c:77:19:7b:e5:0a:06:87:b3:1a:20:41:
9e:12:07:2f:98:84:1a:11:6c:de:45:b1:ed:9c:26:9d:90:6a:
41:8c:2e:be:2f:0b:d1:7d:ac:2c:26:56:25:50:2a:2a:ee:d3:
a6:4f:70:f4:72:75:40:a5:11:fd:a6:33:40:e0:a5:85:1a:31:
08:86:58:90:35:47:8f:35:bb:bc:f0:05:2a:5e:ce:39:f7:19:
b6:9c:ab:29:eb:b1:8f:b1:2e:3a:57:f0:88:aa:ca:1e:fb:b1:
d0:85:c3:db:72:a5:f8:a1:7f:0a:ba:d8:10:e6:0d:df:03:7d:
d5:7d:fa:85:70:65:06:0e:99:79:a8:4c:46:f7:03:3d:e5:7a:
4e:e9:1d:f1:d7:d0:a0:4e:4b:b7:85:66:3e:4d:53:b1:bf:b3:
9d:c9:99:fd
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAmswMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAwNzIzNDczMloXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUw
QjlDNjA1QkI3NTYxMjJFMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3noWvvqzElr9tkZwkX/6OaYn6kRDmUwWL5ZSFPvlRYe1pDInzmXNmCZ+tTqFd
NZ81xOtI4RuoyFIv9BvfopIge+mBdFF0suNGV85mshP7DW08kiCkymjbrSnw+Wru
PG/RVahPN7Wj0G/xRIJN7/3YekfdxwvbX1um/586l9RWKhSLpGgRaoJD2arMEjzs
hgAjiLwDmF8QfW1sLd5ZTJSHMp49VUnPlz8MS/PKHBHXqoUmyGf6LPmIiwHaYZKN
kW9DWgy0DyUaSDLWH93AqiRs6t3qHpvMJHTTADWZ9omG7H9dXhDPaZdLLvh+jo04
Yu4GVXU87+PJJjLAdtZaPxmvAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU379fgwtQ
s7/B5TULnGBbt1YSLhEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURCQjdELzMwMTcwOTZFMkJCOTExRUNCMkIzNjc0RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEQkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0
UXM3X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj51MDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ63rAwQAZ8YA
MA8EAgACMAkDBwAgAQ33roAwDQYJKoZIhvcNAQELBQADggEBACtKerwn7H16SJlk
8HPIGWSHcpKhk/qBNn6ahaL4OhzTV3Ls8CEnDcU08W9B3J19Rt+VQBX8Vp0iGku9
oBXRBwMOfQqycYecLEVY9tjN70UiF03M3vyWjCrhY8MhCTwIyAx3GXvlCgaHsxog
QZ4SBy+YhBoRbN5Fse2cJp2QakGMLr4vC9F9rCwmViVQKiru06ZPcPRydUClEf2m
M0DgpYUaMQiGWJA1R481u7zwBSpezjn3GbacqynrsY+xLjpX8Iiqyh77sdCFw9ty
pfihfwq62BDmDd8DfdV9+oVwZQYOmXmoTEb3Az3lek7pHfHX0KBOS7eFZj5NU7G/
s53Jmf0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:54:11 2025 by rpki-client