Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
File: 58raXwiB13vqSLB2ijdmtQBlrwg.cer (raw, json)
Hash identifier: yjxRP8yxV0gQ/6myZLuIpk0nFkC6m3jYgpH1fP4Y+dg=
Subject key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0266EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/708aafaf-00b4-485b-854c-0b32ca30f57b/notification.xml
Certificate not before: Mon 22 Sep 2025 22:25:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58588
AS: 154263
IP: 43.224.76.0/22
IP: 103.8.172.0/22
IP: 2403:b300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157422 (0x266ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 22 22:25:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:8f:bb:f5:34:5c:6a:f4:f7:41:7f:c3:7e:
73:13:40:35:ec:79:ed:ba:3a:af:41:fe:09:65:89:
9b:dc:3c:78:22:bb:cb:00:a8:0a:22:88:6d:65:75:
5f:76:fe:8f:78:9e:45:5d:60:60:fa:8e:14:30:86:
29:4c:33:72:74:e9:29:54:b1:32:f7:d0:b4:0e:06:
b5:54:2f:a1:28:49:a2:07:26:9b:5e:46:e5:d9:23:
d4:fd:98:84:b4:22:0f:c8:ec:1b:7a:9b:73:d3:ce:
05:76:f0:78:99:fb:5e:6e:65:97:ae:01:94:0e:61:
34:b0:7e:21:3a:3f:e5:71:22:08:c0:09:d7:5c:a5:
23:a5:59:37:49:fa:57:53:04:f6:a9:ef:93:7e:dd:
d9:0c:31:ac:bf:76:f0:30:0c:fe:b3:36:7b:6b:cc:
b9:3a:72:b9:68:79:74:c7:7c:d2:0d:5d:f4:fa:f8:
89:b8:74:72:b3:c3:5e:61:34:84:be:5b:c6:ed:68:
9e:11:48:15:54:e2:49:75:1e:55:05:6a:88:c8:a7:
d7:7a:d7:cf:ce:bf:23:58:55:e0:c9:f8:75:0a:9e:
b7:39:19:1c:2d:21:b1:75:cb:db:14:54:1c:d8:73:
88:5a:19:d1:7c:77:9d:24:22:2d:57:4b:26:a9:59:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/708aafaf-00b4-485b-854c-0b32ca30f57b/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58588
154263
sbgp-ipAddrBlock: critical
IPv4:
43.224.76.0/22
103.8.172.0/22
IPv6:
2403:b300::/32
Signature Algorithm: sha256WithRSAEncryption
66:d0:98:6c:15:d6:c6:d1:52:c2:67:19:fb:12:bb:bb:65:4a:
aa:47:77:e9:1b:a1:78:f3:79:62:7a:bd:e9:1d:29:5f:59:9e:
62:75:9d:bf:03:09:92:9b:78:77:3f:ba:fa:d1:b1:32:c4:64:
5f:c4:00:34:90:50:de:30:5f:95:19:d6:cf:f6:4d:cf:52:5f:
e1:4c:85:c8:70:49:5d:05:23:47:8e:c4:00:31:cd:11:16:4b:
fe:0a:61:c8:49:82:1a:9e:6a:e2:a7:8b:b4:72:47:1c:b2:2d:
0b:dc:fb:a8:61:1c:e1:44:71:a8:e7:8a:5a:48:bd:b3:c1:67:
bc:48:c9:2e:5a:44:34:7d:2c:7d:2b:2c:64:c5:e9:68:ea:89:
28:31:d0:42:71:c9:e9:5b:c2:39:ec:c8:d4:5a:ac:ee:5a:d0:
d7:35:b8:0a:df:80:66:61:b2:c4:b3:c8:da:61:ab:4c:b3:14:
2a:5e:bb:af:d0:f6:58:0f:fd:ec:90:93:c8:7f:e8:d9:70:78:
c6:e7:02:f5:b8:e4:78:3a:c1:6f:54:b0:47:5b:08:8e:c3:e4:
86:6f:cb:d5:7e:92:fe:7b:40:2e:c2:76:86:78:1a:cf:9b:6c:
7b:99:8f:5a:d7:cc:d3:1b:20:7e:d6:57:4f:e1:69:30:27:cd:
09:bf:9b:26
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIDAmbuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkyMjIyMjUyNloXDTI2MDcwMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4ODFENzdCRUE0
OEIwNzY4QTM3NjZCNTAwNjVBRjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAkKePu/U0XGr090F/w35zE0A17HntujqvQf4JZYmb3Dx4IrvLAKgKIoht
ZXVfdv6PeJ5FXWBg+o4UMIYpTDNydOkpVLEy99C0Dga1VC+hKEmiByabXkbl2SPU
/ZiEtCIPyOwbeptz084FdvB4mftebmWXrgGUDmE0sH4hOj/lcSIIwAnXXKUjpVk3
SfpXUwT2qe+Tft3ZDDGsv3bwMAz+szZ7a8y5OnK5aHl0x3zSDV30+viJuHRys8Ne
YTSEvlvG7WieEUgVVOJJdR5VBWqIyKfXetfPzr8jWFXgyfh1Cp63ORkcLSGxdcvb
FFQc2HOIWhnRfHedJCItV0smqVmEvQIDAQABo4IDWzCCA1cwHQYDVR0OBBYEFOfK
2l8Igdd76kiwdoo3ZrUAZa8IMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBWgYIKwYBBQUHAQsEggFMMIIBSDBjBggr
BgEFBQcwBYZXcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2Iv
MG8GCCsGAQUFBzAKhmNyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lLzcwOGFhZmFmLTAwYjQtNDg1Yi04NTRjLTBiMzJjYTMw
ZjU3Yi9tYW5pZmVzdC5tZnQwcAYIKwYBBQUHMA2GZGh0dHBzOi8vcnBraS1ycmRw
LnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3JyZHAvNzA4YWFmYWYtMDBiNC00ODVi
LTg1NGMtMGIzMmNhMzBmNTdiL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgB
Af8EEDAOoAwwCgIDAOTcAgMCWpcwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD
BAIr4EwDBAJnCKwwDQQCAAIwBwMFACQDswAwDQYJKoZIhvcNAQELBQADggEBAGbQ
mGwV1sbRUsJnGfsSu7tlSqpHd+kboXjzeWJ6vekdKV9ZnmJ1nb8DCZKbeHc/uvrR
sTLEZF/EADSQUN4wX5UZ1s/2Tc9SX+FMhchwSV0FI0eOxAAxzREWS/4KYchJghqe
auKni7RyRxyyLQvc+6hhHOFEcajnilpIvbPBZ7xIyS5aRDR9LH0rLGTF6WjqiSgx
0EJxyelbwjnsyNRarO5a0Nc1uArfgGZhssSzyNphq0yzFCpeu6/Q9lgP/eyQk8h/
6NlweMbnAvW45Hg6wW9UsEdbCI7D5IZvy9V+kv57QC7CdoZ4Gs+bbHuZj1rXzNMb
IH7WV0/haTAnzQm/myY=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:04 2025 by rpki-client