Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
File: H2wzTrxkYqJkUoZ6u1-E72itwCw.cer (raw, json)
Hash identifier: 9po64OOX/TGej8eoSBwdeAEZUgJSJGDVyDF5MGWW6LQ=
Subject key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0261C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Sep 2025 15:23:24 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 55707
AS: 56129
IP: 103.1.108.0/22
IP: 103.23.104.0/22
IP: 163.47.252.0/22
IP: 203.31.114.0/23
IP: 223.25.112.0/21
IP: 2406:8a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156105 (0x261c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 15:23:24 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:d5:e6:6d:f5:3b:df:6d:09:c1:79:a3:0a:
77:50:f0:2d:4c:c8:7c:cf:8f:51:a0:6f:92:72:c0:
bb:c1:7f:32:60:8a:3f:d5:1c:c7:56:d2:eb:52:cc:
24:6a:73:09:aa:b8:98:79:23:be:96:4e:41:7c:de:
71:d9:c3:00:39:b3:ac:af:ca:39:52:dd:12:18:6b:
a0:00:b8:af:a4:b2:e3:8d:73:23:20:11:ce:61:96:
09:fa:88:57:5b:7f:51:87:8e:a0:ba:d6:16:85:36:
a4:38:15:8b:ae:3b:41:75:76:9a:69:6b:05:c8:e5:
69:fe:2d:97:6c:6f:34:b4:b4:8d:bc:08:cd:06:67:
1f:5f:09:1d:40:ce:7e:0b:6f:4d:87:13:8c:0d:c4:
63:e0:3d:f0:21:a5:06:6d:87:0d:13:74:10:d9:23:
40:a8:66:34:3b:5d:74:4a:0c:f2:e7:ac:7c:0f:00:
83:e0:89:ec:1b:a7:57:d7:60:b7:cd:b8:c5:59:0a:
b0:a6:bc:8c:c8:db:d0:f3:87:c3:c4:19:09:1e:c6:
8f:b6:c0:0a:98:b7:0f:28:7a:f0:85:ef:7e:c7:51:
03:3d:bf:b1:04:7c:20:87:b0:7c:7e:14:24:b7:ee:
4b:f9:e2:65:d2:75:7a:3a:2a:84:2e:05:96:d7:c4:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55707
56129
sbgp-ipAddrBlock: critical
IPv4:
103.1.108.0/22
103.23.104.0/22
163.47.252.0/22
203.31.114.0/23
223.25.112.0/21
IPv6:
2406:8a00::/32
Signature Algorithm: sha256WithRSAEncryption
ad:08:db:27:3c:ef:41:bd:11:9d:2e:38:2e:92:89:83:84:76:
66:2d:fa:f4:a9:97:2a:4e:e4:16:26:b6:60:ce:c2:1e:9c:d8:
0f:98:61:de:44:d4:6f:34:67:ec:a5:aa:a3:88:92:79:de:bd:
4a:ee:6b:28:0d:94:dd:d2:41:d5:c3:74:0a:2b:32:3d:1f:0e:
19:82:99:d1:a4:da:a8:bc:c3:71:db:44:36:01:51:47:4b:5f:
a2:5b:b2:58:99:1d:95:46:ed:b8:10:b5:ee:1f:0b:28:83:15:
89:6b:a2:b6:e3:b9:1a:7a:18:da:02:ac:f9:d4:c3:12:92:70:
69:8a:be:e5:ab:5d:21:14:bf:38:43:9b:8d:40:aa:44:0f:0a:
5a:e5:19:d7:d6:00:9a:d5:e4:61:54:fd:57:bd:9e:10:34:d0:
32:e9:ad:e1:56:31:b7:02:48:3c:33:f2:fd:59:c7:f4:7e:2d:
ff:7d:42:fa:38:b0:a7:50:03:7d:94:54:74:c1:09:a7:2c:29:
e7:92:eb:3f:cd:45:5f:ac:bf:55:1b:63:35:51:1d:8f:12:0c:
11:4c:5c:89:a0:f7:23:c4:9e:0f:19:fe:5d:ac:ad:6b:61:7f:
cc:28:fa:5e:84:d6:37:ca:b0:4c:ac:a5:8d:9d:c1:7b:66:15:
e0:b4:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:25 2025 by rpki-client