Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer
File: GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer (raw, json)
Hash identifier: LhAeXMzJui/kzF5LSR6IyD+2asZrHXm/2bkhmiX6aI8=
Subject key identifier: 19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0261EF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Sep 2025 20:27:30 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 132014
IP: 103.69.234.0/23
IP: 2001:df3:6600::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156143 (0x261ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 20:27:30 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9160827, serialNumber=1933F62B910631D0494CACC47CB167C581045006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:a0:a3:ae:58:6e:51:6b:7b:c0:f3:7d:3b:
3d:db:b3:ac:8a:ed:b1:b0:2e:03:52:2c:43:d3:5f:
43:18:22:5c:b9:11:97:b5:fc:54:97:60:01:49:66:
a1:fd:f3:db:78:50:36:a6:d3:22:98:e3:65:4f:a8:
2b:57:63:fc:6e:79:c1:c9:ea:3c:f5:3d:49:36:d6:
27:29:9d:01:a1:a1:f9:d1:dc:8c:a9:c0:a9:f4:bc:
fe:2d:47:74:5f:6b:7f:4b:37:1f:fd:ea:47:f0:01:
17:b3:65:21:ef:bc:65:6a:fc:f1:e5:72:ca:6e:5f:
e0:5a:92:4b:5d:e1:db:f3:f4:e1:17:65:15:44:5f:
1a:e9:e6:60:7e:f0:47:49:3c:0c:5e:0d:48:37:6f:
bb:64:e3:e5:09:68:9b:3a:5e:7a:2d:a6:ee:0d:5e:
83:18:f3:c7:58:76:d3:30:62:e9:bd:39:38:0e:bd:
51:78:3d:ca:24:bd:28:da:68:22:5e:6f:7a:8d:54:
6a:db:f1:51:18:d3:30:50:19:ef:97:bb:92:a4:38:
ee:fa:07:5d:d8:e3:b2:ac:09:4c:16:fc:d9:29:25:
79:07:93:f2:f5:66:08:f5:94:af:b9:b4:a7:e2:71:
db:65:39:09:20:95:31:39:bc:0b:30:d4:ab:76:ca:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132014
sbgp-ipAddrBlock: critical
IPv4:
103.69.234.0/23
IPv6:
2001:df3:6600::/48
Signature Algorithm: sha256WithRSAEncryption
11:82:c1:c4:61:5c:57:d4:39:dd:66:a0:b5:ee:04:f4:30:5e:
9c:95:6c:28:14:a1:e0:20:84:c5:ec:14:03:94:11:9f:67:bf:
76:92:a4:6f:2b:39:3c:ae:34:e1:8a:f3:01:8a:af:6c:69:84:
de:4f:92:e3:72:8e:6b:fa:8b:d9:f3:6c:88:58:1e:4b:ce:7e:
09:7b:9d:3c:34:b3:25:28:34:d8:a2:10:25:a8:54:5b:de:7f:
2e:aa:03:32:12:9a:ab:0c:e8:52:66:59:36:81:ef:0f:14:2f:
6a:1c:28:99:cd:7d:d6:9d:c7:7b:9d:76:87:58:5d:4b:f7:e9:
1b:7b:c4:1f:b6:65:2a:c1:8f:dd:47:05:1d:9b:b6:35:d5:6b:
70:b6:aa:cb:9d:cd:83:fb:c5:47:80:e3:64:ec:37:30:c5:69:
c9:4b:d8:30:17:13:25:29:44:22:c8:c4:2a:df:9c:0a:97:5c:
28:4d:a9:1e:6a:b9:d8:d4:af:fe:52:3f:5c:3d:93:0b:f2:56:
2b:fb:da:5e:9c:a0:11:35:b6:96:f1:2a:4d:fc:90:d0:83:69:
f0:7f:95:c2:e5:a4:50:59:0e:c2:c9:78:de:a1:f6:ca:34:0e:
76:b2:8c:f7:27:8d:5e:cf:ce:3e:26:9f:10:93:42:88:77:ac:
72:8e:ad:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:14:26 2025 by rpki-client