Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
File: 4eaQihbsgT2qC9ZHl66dvesJIlc.cer (raw, json)
Hash identifier: fz/YEMXHGjzav5h/AA+KjH4dEgmlDGJGKv7ISnd+Sho=
Subject key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026BB8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Oct 2025 23:57:24 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 17469
AS: 18012
AS: 38030
IP: 175.29.0.0/16
IP: 202.22.192.0/20
IP: 202.73.4.0 -- 202.73.6.255
IP: 202.161.176.0/20
IP: 203.76.144.0/20
IP: 203.82.192.0/20
IP: 2404:150::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158648 (0x26bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 9 23:57:24 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:b7:50:ed:9d:6b:72:44:07:91:c7:b6:08:
ac:d7:62:d4:7a:1b:8e:5e:5e:45:c6:12:22:38:2b:
d0:3e:cc:d7:1f:e1:dc:d3:5f:a0:46:c5:ce:ec:ca:
fa:08:53:86:c4:d8:30:42:95:84:1c:13:bd:a6:47:
84:ec:2c:b9:d3:c2:fb:7b:09:18:1a:f3:7c:c1:32:
95:6f:c8:14:8a:3a:5c:9b:11:b2:60:5d:a5:f3:49:
9b:d0:7c:98:5c:f0:3c:ed:47:67:e4:9c:b9:86:b8:
f3:11:c6:dc:49:5e:19:54:d4:18:b4:e2:4c:c9:0b:
38:ef:71:65:be:2f:7a:7b:a9:19:72:94:fb:3e:84:
03:d1:8e:b8:3e:f9:a4:02:7e:d4:d5:a0:10:ff:91:
62:37:da:eb:cc:f5:65:70:e6:5b:5c:4e:e1:be:08:
e1:8d:90:dc:42:bd:91:00:d2:3e:99:87:c6:61:d6:
5a:19:0c:ff:18:36:a5:6d:ba:21:51:6c:d5:6d:ce:
62:62:4d:a7:dd:0f:13:b5:87:1a:41:6e:e7:a6:ed:
0b:91:c4:a2:a9:2e:de:88:e2:33:e2:10:cf:0f:69:
7d:e1:66:c1:36:fd:3e:5a:4d:f1:14:83:1e:ac:38:
5b:f4:c2:30:d0:96:cf:cf:0a:f3:3e:f9:75:ac:42:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17469
18012
38030
sbgp-ipAddrBlock: critical
IPv4:
175.29.0.0/16
202.22.192.0/20
202.73.4.0-202.73.6.255
202.161.176.0/20
203.76.144.0/20
203.82.192.0/20
IPv6:
2404:150::/32
Signature Algorithm: sha256WithRSAEncryption
aa:08:85:db:c0:ef:e9:c9:95:c9:24:91:87:b6:24:f3:de:56:
11:2a:4a:10:03:71:ad:75:af:ee:7c:20:3b:f3:70:25:5d:c7:
e1:dc:51:b7:36:20:04:4b:f8:03:0c:14:3a:84:da:65:a2:a5:
60:07:01:80:ca:91:aa:95:6c:67:16:9c:2d:b3:f6:0b:91:06:
ab:2a:04:f8:bc:42:19:9a:33:aa:dc:12:56:5d:0a:8d:b2:54:
fd:ef:61:ce:e7:07:5f:18:49:43:35:3c:af:f3:3c:1d:f5:95:
c9:e8:4a:f5:ee:f8:76:91:15:cf:4b:ad:95:0b:8e:d1:f8:2f:
2a:df:4b:44:0a:52:8d:5c:d4:97:dd:44:71:d9:8f:8a:87:70:
b7:43:aa:17:5a:d9:9d:68:d3:8d:bd:76:c7:73:dd:42:d6:b7:
0b:05:52:cf:26:46:27:3a:39:e7:e0:30:9a:e3:d1:0c:f4:2b:
d8:b1:54:81:25:55:cf:9a:e8:0d:1e:c8:e7:06:3d:ba:84:46:
5d:0c:cd:1a:a0:5e:a8:30:84:68:39:10:3b:d0:f6:f2:a1:84:
03:7b:42:7b:de:cf:79:91:8e:e4:39:f1:1d:c3:b3:ae:85:43:
f9:34:31:5f:a5:d7:4c:b3:e1:63:30:60:3c:e6:d7:7a:8c:1a:
d3:c2:45:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:09 2025 by rpki-client