Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
File: Cxopcl-6iizdVPJWV-WHR46_u68.cer (raw, json)
Hash identifier: FHBQeDr8eLEJQC7TovwnZxLdpuV8Cd37AGcfLILknG0=
Subject key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026D71
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Oct 2025 11:57:22 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 23664
IP: 103.208.208.0/22
IP: 137.59.244.0/22
IP: 203.91.192.0/19
IP: 2405:8080::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159089 (0x26d71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 11:57:22 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:47:d8:d0:4e:95:ec:ef:cc:6e:17:2d:64:
a8:04:20:4b:38:db:86:9d:4b:2a:12:aa:d4:cb:f0:
e4:04:35:85:45:c2:97:fe:8d:a1:f1:bc:3f:b9:8a:
f6:dd:2b:02:44:d4:19:e4:e8:30:ee:cb:d7:02:61:
f6:8e:49:de:bf:55:5d:e4:55:b6:47:ba:b7:b4:aa:
02:2f:06:0f:79:8e:dd:39:c2:0d:a8:63:24:53:cf:
c0:ef:4e:ba:3d:c3:0e:3d:7c:ab:73:6d:d6:20:f5:
20:d7:df:88:d2:16:f9:d8:d2:ba:fd:9a:c5:47:c8:
d3:05:30:42:f3:4c:5c:db:67:9f:d1:b6:bd:88:cf:
cd:e6:c0:52:2f:e8:16:47:f5:f0:f0:98:b0:b8:ce:
24:d2:43:4c:87:0c:e1:7b:a5:1a:c4:9b:36:c0:cf:
ba:c8:93:46:14:ab:65:12:bb:fc:78:96:e4:5d:2a:
ec:69:6e:12:86:32:66:f3:34:6b:1b:01:1e:56:48:
c4:f4:bc:34:0d:70:cd:11:b5:ae:42:e2:74:4c:6b:
af:67:3f:ca:13:85:79:3f:c9:f8:f9:a5:13:73:2a:
e3:c9:d8:2a:82:58:6f:81:db:0f:fe:04:a0:6c:8e:
ba:22:93:c0:27:a6:76:b3:b6:92:d8:71:54:f9:4a:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23664
sbgp-ipAddrBlock: critical
IPv4:
103.208.208.0/22
137.59.244.0/22
203.91.192.0/19
IPv6:
2405:8080::/32
Signature Algorithm: sha256WithRSAEncryption
09:ec:e0:8f:0d:67:ab:87:e1:54:c9:1f:58:c9:6d:e0:d6:06:
ae:65:af:16:84:8a:48:91:8f:98:8b:d8:71:dc:8d:d5:ea:63:
4f:c1:5a:8a:b3:55:9e:3e:8e:aa:1a:c0:81:93:45:ab:5e:ff:
4b:97:72:f2:7e:6d:ab:63:f6:a6:5f:2f:e7:f1:2a:4e:af:0b:
06:a9:7c:84:69:23:9d:12:48:62:27:e2:d1:b1:6f:04:07:95:
80:ad:80:c2:49:a2:f2:a6:dd:a4:d8:0f:f4:92:b6:b2:7c:6e:
be:0f:a4:70:f3:79:71:ea:45:d8:dc:27:5d:a0:44:45:d5:d5:
1e:c9:d4:0d:36:15:6a:26:66:a0:f8:be:f9:c3:31:bd:1e:56:
0d:7c:56:fd:56:b5:88:2c:d2:05:4b:0b:a3:49:33:31:8b:a0:
c8:bf:fa:c1:0a:ef:e7:84:27:db:47:df:d8:7b:d1:0d:cf:34:
65:62:72:b5:68:85:76:30:89:2a:6a:c6:ff:4e:15:82:61:49:
a2:b8:07:1f:b0:64:fd:1b:d7:5d:1d:4a:bf:64:a6:8d:14:ca:
c1:1e:3f:92:f5:05:b8:ce:4e:25:8e:41:11:7c:ca:ac:e5:69:
65:bc:36:f0:91:0e:57:b5:11:90:e8:02:bb:1e:d1:e9:18:7a:
53:f7:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:19 2025 by rpki-client