Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer (raw, json)
Hash identifier: 2BBPy052XCKzwWwZnIT+piqrWa0AWgcuPRf0JwQ1gsk=
Subject key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024ECB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Jun 2025 20:32:39 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 10122
IP: 103.139.72.0/23
IP: 164.90.64.0/18
IP: 202.63.32.0/19
IP: 202.168.96.0/19
IP: 2404:efc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Jul 2025 17:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151243 (0x24ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 17 20:32:39 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:70:35:01:1c:e4:67:52:82:1a:3a:a3:cd:
0f:c9:e5:38:9a:fa:41:1b:b0:c1:17:04:6d:39:f2:
1f:ba:be:6f:a0:35:e4:b3:36:a0:6a:44:07:14:c9:
3e:91:36:a2:24:70:3e:e2:9a:09:0c:7d:76:bb:5e:
0e:e2:d8:ee:c2:25:31:e8:da:64:ac:95:69:47:e7:
af:c3:49:f3:59:be:38:a8:62:88:27:9f:57:09:72:
59:e7:2f:f8:d4:69:e3:c9:63:a1:91:ef:f2:1c:3e:
01:41:71:4b:3a:09:f3:06:5a:0b:4b:f9:b1:43:9e:
79:03:ed:c6:66:6d:f7:5d:92:0f:a8:73:8d:aa:47:
f4:29:23:61:eb:a2:e0:f7:93:cb:7c:58:60:90:aa:
fa:97:6e:1a:5c:51:a2:c2:18:a1:da:c2:ef:1a:30:
0d:a6:f2:5c:34:99:0a:34:74:11:94:0c:96:0c:27:
8d:e7:be:08:8c:cf:3b:fa:ee:8e:68:b0:73:e9:e4:
70:74:a1:a8:48:44:94:99:30:26:1b:db:df:52:2d:
d7:c3:30:51:ac:00:a3:e0:4f:53:cd:b1:66:a3:a6:
d2:70:39:35:99:95:1a:c5:d2:23:03:c7:03:a4:d1:
54:0f:eb:18:98:fb:7d:ea:75:e2:cc:87:59:11:4c:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10122
sbgp-ipAddrBlock: critical
IPv4:
103.139.72.0/23
164.90.64.0/18
202.63.32.0/19
202.168.96.0/19
IPv6:
2404:efc0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:1c:7a:d3:a4:12:f2:13:29:03:bc:83:a2:c8:37:70:e9:22:
d3:99:6c:eb:b7:39:c0:29:29:f1:9f:1d:a8:cb:6e:4a:41:3c:
b2:b2:95:50:48:af:76:9c:90:e6:44:0c:de:1b:f8:1c:06:7f:
5c:21:bf:76:64:37:e9:c8:c9:70:b5:ee:ee:42:26:51:e0:3e:
6c:2b:15:aa:8b:0e:42:bd:79:e6:c9:ec:d1:df:2d:b3:9c:81:
aa:13:a2:81:5c:34:9d:62:de:d7:a5:b5:15:d3:f6:62:42:09:
f1:60:45:11:c9:87:dd:fb:3a:76:7b:73:9f:8c:10:8d:9a:6b:
a3:54:6e:d0:d5:ba:fa:73:15:97:ca:8a:f4:8d:e2:98:fb:91:
0c:a2:03:36:9c:7c:7e:bc:6d:59:55:35:55:2f:14:e6:4d:d2:
2d:3c:cc:05:7c:b5:dc:7a:e4:1f:e5:87:75:57:33:dc:37:d1:
8d:dc:90:a5:28:4b:78:37:6c:3f:5c:43:03:6d:a2:fd:3f:64:
6b:cc:10:34:82:10:fe:70:7c:1e:0d:2c:1b:73:67:27:87:42:
9f:9b:e4:2c:27:87:fc:81:b1:eb:f7:8f:91:db:4c:0c:89:84:
2b:25:1b:cb:d2:64:c8:df:be:7e:52:ed:12:69:ab:33:29:b5:
6d:db:4c:c5
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIDAk7LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYxNzIwMzIzOVoXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0
OUU5RjJGOENGRDJCRTgyNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGaHA1ARzkZ1KCGjqjzQ/J5Tia+kEbsMEXBG058h+6vm+gNeSzNqBqRAcUyT6R
NqIkcD7imgkMfXa7Xg7i2O7CJTHo2mSslWlH56/DSfNZvjioYognn1cJclnnL/jU
aePJY6GR7/IcPgFBcUs6CfMGWgtL+bFDnnkD7cZmbfddkg+oc42qR/QpI2HrouD3
k8t8WGCQqvqXbhpcUaLCGKHawu8aMA2m8lw0mQo0dBGUDJYMJ43nvgiMzzv67o5o
sHPp5HB0oahIRJSZMCYb299SLdfDMFGsAKPgT1PNsWajptJwOTWZlRrF0iMDxwOk
0VQP6xiY+33qdeLMh1kRTI15AgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUB6HAhUXK
zGXgiC1J6fL4z9K+gmAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURGOTNBL0ZGNTFFNTlFRTVGMzExRUFCM0E5MTU2MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVY
S3pHWGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICJ4owQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAFni0gDBAakWkAD
BAXKPyADBAXKqGAwDQQCAAIwBwMFACQE78AwDQYJKoZIhvcNAQELBQADggEBALQc
etOkEvITKQO8g6LIN3DpItOZbOu3OcApKfGfHajLbkpBPLKylVBIr3ackOZEDN4b
+BwGf1whv3ZkN+nIyXC17u5CJlHgPmwrFaqLDkK9eebJ7NHfLbOcgaoTooFcNJ1i
3teltRXT9mJCCfFgRRHJh937OnZ7c5+MEI2aa6NUbtDVuvpzFZfKivSN4pj7kQyi
AzacfH68bVlVNVUvFOZN0i08zAV8tdx65B/lh3VXM9w30Y3ckKUoS3g3bD9cQwNt
ov0/ZGvMEDSCEP5wfB4NLBtzZyeHQp+b5Cwnh/yBsev3j5HbTAyJhCslG8vSZMjf
vn5S7RJpqzMptW3bTMU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:24 2025 by rpki-client