Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer (raw, json)
Hash identifier: Ri6OiHh5v+BKd+1flpbAg9aG9Ra1HBkEGH+TrArZ9J4=
Subject key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026B52
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Oct 2025 13:34:59 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 132683
IP: 103.72.84.0/22
IP: 203.3.132.0/24
IP: 203.11.65.0/24
IP: 203.142.218.0/24
IP: 203.161.179.0/24
IP: 2406:c380::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158546 (0x26b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 8 13:34:59 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:a1:d6:28:0c:62:94:76:e9:c0:78:3b:c1:
95:99:98:b1:19:37:f7:92:1b:c4:6d:cc:8b:a0:e9:
42:4a:2b:dc:d2:93:c0:06:15:d6:fd:6c:a8:c3:60:
e7:b0:4e:c7:5f:d7:90:7e:bb:81:6a:ce:f9:4a:ee:
a4:54:5b:93:e4:f2:2a:ae:09:d6:b9:67:87:62:ef:
2f:bc:49:7d:c5:69:7b:87:40:5f:38:1f:e2:8c:65:
53:90:76:ae:cf:d3:0c:7d:95:f7:36:ac:4c:e9:23:
a5:c2:a4:2d:ec:c1:bc:4a:24:5a:7b:44:26:4b:c1:
62:f4:b7:8e:9d:bc:38:ab:0d:2b:e6:8b:b7:c7:55:
74:f0:c2:78:75:37:5a:ea:39:bf:b2:8f:c2:60:1a:
40:6c:f9:73:10:a6:7b:d6:e5:16:70:6a:3a:79:8a:
69:a7:a7:65:e6:15:f4:e5:18:7a:da:49:a1:2a:05:
da:96:74:7b:2e:03:60:7c:90:59:9f:be:71:07:26:
6f:f7:4e:a3:ba:4a:90:9c:42:0e:a7:f2:28:7b:1d:
2b:7a:2e:cc:76:ef:3f:57:97:4f:18:ea:ba:50:a5:
48:24:44:be:0b:b1:02:b2:23:2e:d9:39:40:18:f2:
62:55:a6:33:94:e8:87:d9:2b:3b:e2:58:27:db:fc:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132683
sbgp-ipAddrBlock: critical
IPv4:
103.72.84.0/22
203.3.132.0/24
203.11.65.0/24
203.142.218.0/24
203.161.179.0/24
IPv6:
2406:c380::/32
Signature Algorithm: sha256WithRSAEncryption
7c:9e:37:a0:ce:f8:1e:4c:05:a5:b1:57:c6:52:27:58:bd:38:
24:82:bb:83:6f:4b:68:e2:57:c6:14:5c:91:c8:12:13:58:3d:
a7:fa:3d:8a:79:df:84:a9:63:b6:aa:72:cc:c2:f9:22:d0:b3:
33:ce:63:6b:a7:bf:47:96:2c:01:47:14:de:19:3c:56:8f:7c:
13:89:d8:73:83:a8:28:2c:65:54:74:79:d0:93:eb:28:1a:34:
59:40:82:b7:0f:f8:bc:4a:d2:f0:ff:ee:f8:27:2f:1b:88:5a:
15:e4:b7:27:3d:f4:1d:f5:9a:3b:d0:f8:6b:27:ec:b8:94:dd:
00:88:1f:17:c4:9f:4d:03:e5:66:05:1d:d1:10:fd:71:ba:1a:
0a:f0:3d:34:ef:9c:d1:1e:8f:46:87:25:bc:94:df:bd:c9:cd:
03:48:97:47:a4:e6:b7:c6:99:f3:71:4b:c5:af:c9:d1:f8:9c:
40:72:dc:c3:95:ca:fa:19:ed:f8:9d:1a:2d:e1:1e:ce:c1:e7:
47:cf:d7:c2:2c:c9:80:0a:02:ac:01:f6:96:73:e9:6a:cc:7a:
0e:51:14:83:53:05:ae:62:b3:d6:9f:4d:3a:0f:dc:45:35:7d:
b5:32:4b:86:c0:ad:77:f6:3e:72:cc:74:2d:78:47:96:5a:d4:
04:37:c8:76
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIDAmtSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAwODEzMzQ1OVoXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3
QkYxQkQzRTk5NjI3QTE4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHsqHWKAxilHbpwHg7wZWZmLEZN/eSG8RtzIug6UJKK9zSk8AGFdb9bKjDYOew
Tsdf15B+u4FqzvlK7qRUW5Pk8iquCda5Z4di7y+8SX3FaXuHQF84H+KMZVOQdq7P
0wx9lfc2rEzpI6XCpC3swbxKJFp7RCZLwWL0t46dvDirDSvmi7fHVXTwwnh1N1rq
Ob+yj8JgGkBs+XMQpnvW5RZwajp5immnp2XmFfTlGHraSaEqBdqWdHsuA2B8kFmf
vnEHJm/3TqO6SpCcQg6n8ih7HSt6Lsx27z9Xl08Y6rpQpUgkRL4LsQKyIy7ZOUAY
8mJVpjOU6IfZKzviWCfb/O4xAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUEoOi9Me6
EXBsZuF78b0+mWJ6GBMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI1MEZBL0FBQTBFQkUwMzY4RTExRUFBNzY4RkM3RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyNTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1l
NkVYQnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgZLMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCZ0hUAwQAywOE
AwQAywtBAwQAy47aAwQAy6GzMA0EAgACMAcDBQAkBsOAMA0GCSqGSIb3DQEBCwUA
A4IBAQB8njegzvgeTAWlsVfGUidYvTgkgruDb0to4lfGFFyRyBITWD2n+j2Ked+E
qWO2qnLMwvki0LMzzmNrp79HliwBRxTeGTxWj3wTidhzg6goLGVUdHnQk+soGjRZ
QIK3D/i8StLw/+74Jy8biFoV5LcnPfQd9Zo70PhrJ+y4lN0AiB8XxJ9NA+VmBR3R
EP1xuhoK8D0075zRHo9GhyW8lN+9yc0DSJdHpOa3xpnzcUvFr8nR+JxActzDlcr6
Ge34nRot4R7OwedHz9fCLMmACgKsAfaWc+lqzHoOURSDUwWuYrPWn006D9xFNX21
MkuGwK139j5yzHQteEeWWtQEN8h2
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:47 2025 by rpki-client