Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.cer (raw, json)
Hash identifier: I4xV/ttkfw8nXFXDlxYiy8wtAHSsq66jVfzggSLp8E0=
Subject key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0261AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Sep 2025 08:17:16 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 135022
IP: 103.107.122.0/24
IP: 103.110.5.0/24
IP: 103.114.54.0/24
IP: 2401:cc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156079 (0x261af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 08:17:16 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:bb:57:74:4c:6f:d0:99:da:1d:3e:2a:7e:
33:07:84:49:d2:84:a1:3e:e1:18:e2:bf:e8:1d:97:
16:78:5b:b2:fb:bd:b6:cc:86:e0:2e:73:b2:3c:8d:
0d:c5:4d:52:ce:11:92:a6:3c:90:cf:5d:93:2d:3f:
a0:b1:64:16:da:18:33:d5:1a:2f:0f:6d:03:e8:fe:
17:aa:9b:63:d3:21:e3:e4:8a:2b:77:c4:9c:d0:46:
19:d6:19:07:b0:af:ec:ef:9e:30:e8:b4:d0:11:fc:
c8:ab:7c:cf:ed:a9:65:ca:bb:b6:ee:f1:4b:68:3c:
85:1e:ce:71:85:51:81:92:f3:45:cf:93:c9:17:b8:
d8:d5:96:e6:85:8d:62:e2:83:1f:4f:17:4b:f2:3b:
09:c7:83:e1:da:19:66:16:cc:05:2f:66:fd:80:bb:
c7:7f:bc:c9:d6:f6:a1:b9:2e:fb:e4:b7:6f:85:a1:
fc:7a:38:d7:f8:79:ef:5c:c4:4d:e1:a9:cb:51:4f:
7c:8b:1d:89:30:67:2e:ab:65:47:0c:b8:d1:58:37:
30:64:0a:f9:c5:59:1a:69:b4:28:c9:f7:54:0f:6d:
55:4d:ed:6e:d9:aa:7c:1c:76:72:be:b0:e3:3d:46:
1c:75:19:e7:71:a2:9e:31:a5:9e:4a:f7:c1:84:89:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135022
sbgp-ipAddrBlock: critical
IPv4:
103.107.122.0/24
103.110.5.0/24
103.114.54.0/24
IPv6:
2401:cc40::/32
Signature Algorithm: sha256WithRSAEncryption
82:1c:4c:f9:b4:aa:e7:24:9a:59:a5:40:79:a9:c7:5e:36:ff:
5f:06:28:de:01:f2:e7:1c:61:4d:cb:9b:90:7e:4f:7d:e5:c6:
48:bb:00:6a:fc:4e:0c:2b:36:67:5d:b1:40:83:21:9d:16:ef:
f9:08:af:3e:6e:f8:56:37:df:95:a4:62:14:ed:90:18:1c:d7:
37:a0:86:38:36:a0:98:b6:41:d8:e3:15:6c:77:10:1c:a5:58:
af:75:9f:8a:82:8f:1b:b4:37:c8:b7:73:bd:25:99:cf:24:66:
45:69:0b:9f:e5:e8:3e:b1:9c:8f:4b:8c:c3:17:7b:58:d7:ae:
87:f3:38:b1:fc:e7:77:87:46:c5:ef:21:44:0d:96:83:ca:61:
aa:ef:be:36:37:cf:d3:b9:c3:81:50:c2:ce:49:ee:bc:bf:d8:
7c:52:1b:d9:b6:f3:bd:58:b8:d5:2f:19:51:b5:a7:36:19:6f:
1c:d3:11:5d:e3:08:f1:09:06:23:a1:13:b5:10:27:f9:ef:d8:
94:3e:12:d4:23:02:47:e3:cd:c2:fa:f0:cf:55:45:1c:df:2b:
49:30:9a:d7:41:ab:79:93:37:12:48:7a:a8:26:4c:a9:2e:76:
ad:60:cd:d8:23:88:2e:b9:f0:e3:3b:ab:e7:e8:11:01:0f:f5:
2c:14:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:43 2025 by rpki-client