Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer (raw, json)
Hash identifier: iQ697hIk3RkjNoErChpqOIsqi/qadnkOdCySVbPmo6o=
Subject key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02631F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Sep 2025 19:32:49 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 24064
AS: 45204
AS: 133531
IP: 103.8.60.0/24
IP: 180.149.64.0/18
IP: 2001:df3:a340::/48
IP: 2401:d600::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156447 (0x2631f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 3 19:32:49 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:27:e6:d6:59:d4:ba:bd:f5:c6:b1:99:48:
6a:3b:58:11:13:d8:f1:e1:94:79:17:62:5a:4a:3a:
58:7b:81:54:e6:40:22:d2:7d:00:6a:d7:80:d1:e5:
de:34:ab:09:ec:7d:08:60:81:77:b5:72:78:e3:d7:
74:4d:d0:bc:b6:61:98:99:b6:9e:e0:18:e9:98:15:
f6:b0:cf:c9:36:3c:dd:80:6f:5e:f1:0d:5c:e6:87:
42:fa:b6:a5:9b:69:d7:dc:bd:5c:a5:06:1e:0e:35:
61:9a:0c:68:6f:18:78:8a:32:a7:6d:4c:b7:61:86:
03:da:26:ad:2e:54:23:71:84:67:7e:b8:a1:f2:0b:
d0:be:7d:8f:5a:ca:1e:4c:15:0b:b2:68:18:da:73:
2b:16:46:73:b8:fc:62:33:44:a3:a1:eb:27:69:15:
47:b6:ff:9b:0b:62:00:60:37:b1:8c:14:86:47:73:
3b:c4:c5:fe:8d:92:98:b8:82:4d:5d:d8:60:33:0a:
29:0a:ed:51:1b:79:b9:31:ec:58:48:33:61:89:0c:
eb:fe:7e:c8:4e:45:74:ba:59:bd:fb:f5:f0:56:ef:
d8:30:e0:c8:7b:4c:ba:70:c0:07:89:b9:d4:45:b6:
0b:46:f5:92:4b:3c:e1:0b:72:97:a5:1d:d9:20:46:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24064
45204
133531
sbgp-ipAddrBlock: critical
IPv4:
103.8.60.0/24
180.149.64.0/18
IPv6:
2001:df3:a340::/48
2401:d600::/32
Signature Algorithm: sha256WithRSAEncryption
68:25:9d:1c:97:cc:2b:65:8d:8b:30:f6:21:59:d7:e4:38:70:
f3:27:a4:82:a8:5e:d5:dc:7b:6e:c7:46:bc:bf:aa:f3:07:30:
bc:83:76:f7:2b:e8:ba:1c:cf:2e:48:de:cb:8a:5b:d3:27:f0:
e3:13:43:14:2a:97:39:3e:2d:ce:70:9e:63:1a:e4:7d:9b:0d:
7c:33:ec:72:9c:38:a1:6c:30:a5:9b:9c:e6:fd:14:e3:ee:18:
e0:14:69:05:1b:3c:89:95:17:e0:7b:79:4e:39:3a:c9:35:05:
98:3f:b0:a9:26:64:f0:d9:91:90:27:fd:e5:f9:53:1b:b8:08:
d1:d7:ef:e2:ba:73:93:26:16:9b:17:45:a8:4e:72:3c:14:2e:
c8:1a:76:fe:c9:7a:75:58:74:a4:9b:9a:3e:e2:82:be:aa:0b:
80:cf:33:09:8d:75:25:7e:7d:2c:c7:1f:a4:6c:e9:bc:9e:3f:
9a:55:38:f5:54:cf:84:19:fd:d1:19:5d:a0:2a:92:32:61:13:
a6:3f:96:80:cc:d1:8e:05:eb:e3:8b:da:d7:f2:3b:02:64:cf:
cb:92:7e:21:13:ad:9c:45:fc:1a:b9:47:f7:17:38:52:65:43:
4a:47:29:fe:94:d1:71:8f:51:e9:5a:bd:00:71:3b:21:a6:5c:
cb:8f:55:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:32:59 2025 by rpki-client