Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
File: EyzK6sEE4qNEW2M3YQVNyNcQehM.cer (raw, json)
Hash identifier: VLAu9raAA+H6rFRneXL18N3K3/6aSCwRwb/JRlGFcgQ=
Subject key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026BA7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Oct 2025 15:37:14 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 147053
IP: 103.173.172.0/23
IP: 2001:df7:a180::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158631 (0x26ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 9 15:37:14 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91670F6, serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:0e:86:e6:d2:ac:52:dd:cb:04:3c:07:02:
23:f3:79:ce:59:c4:72:12:2c:6d:2a:07:5d:19:5e:
c4:47:f8:66:35:19:39:7d:ef:11:5f:36:7c:56:04:
10:22:49:bf:d0:46:ae:49:87:42:20:c2:6c:40:57:
11:e3:7f:09:62:76:fe:12:d9:06:92:46:4a:91:bd:
ae:31:ee:65:4f:26:86:ef:ea:10:f7:52:5e:20:2a:
7f:1c:93:27:6d:ff:94:95:7d:0e:7a:7e:f9:ce:1e:
34:41:42:fe:0e:2d:df:7a:eb:73:63:b9:70:fd:6b:
e4:6a:af:1e:ae:50:d4:65:2e:fe:dc:5c:99:40:51:
80:d4:7e:7e:55:66:e9:55:d7:12:0f:f0:91:78:08:
f8:b4:2d:73:9d:ec:7a:d7:9d:3d:ac:19:3b:81:f0:
f0:d0:00:c5:76:0f:78:ac:88:82:c7:5f:13:fa:e2:
c7:a3:a0:05:d0:3e:22:1e:e9:48:df:23:4a:bb:57:
f9:cd:f8:a0:49:c5:69:d6:58:5e:84:3e:68:6e:1e:
f9:c3:60:76:5e:12:f8:7c:ac:94:b2:e3:a9:3e:4f:
41:9f:ba:23:00:9e:c3:65:ba:7a:65:4b:4c:d2:6a:
6e:52:48:7d:2f:6a:52:f8:a0:a4:24:1e:29:56:8e:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147053
sbgp-ipAddrBlock: critical
IPv4:
103.173.172.0/23
IPv6:
2001:df7:a180::/48
Signature Algorithm: sha256WithRSAEncryption
9c:68:27:7b:7c:d7:5d:ff:d4:68:18:80:42:29:7a:eb:65:de:
20:40:67:88:f1:37:06:7d:e8:27:7e:c8:4f:00:c1:59:43:e0:
01:6a:db:62:70:b3:4c:4b:0a:1c:fb:a2:06:49:e7:c4:e2:3e:
02:03:01:c7:b9:31:c7:12:7e:bb:28:73:52:1c:88:fe:c7:38:
95:09:f3:9c:ff:d2:cf:af:57:e3:bf:97:95:1c:5c:48:7a:d5:
51:b7:09:ed:d7:0a:ba:36:e9:d4:18:2f:16:19:cb:7c:4a:8d:
3e:5f:3a:81:54:03:dc:a4:ab:49:b8:bd:af:36:e9:80:66:8a:
b5:f1:90:04:97:60:60:81:e0:7d:60:25:77:84:dd:6f:0b:2d:
a7:4f:ba:ff:0d:4c:ed:0a:eb:2a:01:22:d9:c8:a1:37:f2:ad:
e9:81:03:1e:5e:f5:6c:b9:6b:0f:5d:d1:c8:f3:a8:5f:31:5f:
98:d6:63:0e:39:f5:ef:de:a1:a3:cc:12:2c:e9:95:a2:ae:16:
9a:38:b7:93:65:b7:40:5a:e5:a4:8e:18:62:56:82:59:92:66:
98:e5:72:31:b6:00:7a:65:7f:2a:9b:d2:3f:cc:11:b2:24:e9:
4e:67:53:a5:1c:a8:1b:6b:52:98:48:3a:d3:d2:40:25:9c:d2:
67:81:fd:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:32:56 2025 by rpki-client