Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
File: J1fRH3t4Z0h7jocB1yrGGtMnng4.cer (raw, json)
Hash identifier: n2rnOPwYJyl/RfYeYU7eouH1M9QggeIEJa5DlAZMO3c=
Subject key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025EFD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Aug 2025 15:49:58 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 133142
IP: 103.101.215.0/24
IP: 2001:df6:f000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 08:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155389 (0x25efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 22 15:49:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:37:a6:5e:16:4a:93:b6:b9:a2:63:69:dd:
4a:c3:3c:a3:fd:52:9e:a4:08:41:49:25:d5:e5:1b:
eb:46:bd:9d:04:bb:ad:25:42:c7:54:ed:91:68:11:
bd:65:b3:88:2b:a2:9f:40:16:09:c6:7e:a2:cd:a9:
a5:25:89:b5:36:4d:e0:43:d9:48:56:2c:48:e8:28:
35:0a:e7:01:21:e1:0c:e0:f7:aa:75:22:2f:5b:e0:
39:08:95:2b:35:55:09:4a:42:32:74:47:0f:b8:e0:
14:79:00:87:b8:f4:54:35:26:7f:a4:93:20:b6:8f:
33:6e:67:4b:13:b6:d4:4c:cb:6b:0c:56:bd:34:12:
95:ba:0a:3e:d9:df:f9:56:3b:dd:7c:4a:b2:f0:a4:
0b:92:af:8b:34:26:73:c4:1e:cc:7b:d8:e6:bc:8f:
d1:3c:d2:e5:dc:bf:3e:e3:a0:fb:6c:50:8e:79:a3:
dc:42:2b:df:00:f5:ca:3f:90:e1:c8:11:12:29:11:
3c:74:b2:5a:45:72:b3:74:1c:07:76:db:6a:e4:cf:
a8:3e:f8:87:92:6b:1c:fc:a3:fb:e9:98:64:a7:17:
bf:13:3d:79:93:f7:ca:72:56:e3:1a:7b:35:8a:ec:
92:a2:b2:52:b2:ef:70:a2:c3:a7:ce:8c:cc:dd:e7:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133142
sbgp-ipAddrBlock: critical
IPv4:
103.101.215.0/24
IPv6:
2001:df6:f000::/48
Signature Algorithm: sha256WithRSAEncryption
c4:85:c9:a2:a6:98:15:b9:6b:cf:2a:de:59:b1:6e:3e:26:eb:
16:55:10:b7:89:d6:24:5b:4b:c7:70:9a:13:23:b1:38:77:30:
fc:bd:70:b7:29:ac:39:b7:36:c7:b9:0a:2d:42:20:39:b3:74:
09:e5:c8:18:26:25:d2:24:55:8e:11:c1:a9:4c:bd:74:eb:48:
94:95:f7:a2:d0:f0:d1:f8:ff:5c:bb:db:35:e9:d8:ed:6f:2e:
2e:1d:a8:47:a2:70:b5:52:64:ad:26:e9:fb:42:5a:b0:c9:b2:
59:94:3a:e9:a6:76:bd:49:3e:8a:61:d9:f4:3c:10:34:8f:ef:
40:f2:73:12:91:0b:c0:a1:2d:26:1b:ce:c2:59:e1:a9:48:b2:
da:d9:9d:a5:92:16:d3:3d:36:5e:d8:fa:00:f6:69:92:fe:af:
f7:e0:91:3f:d5:86:7d:4b:62:b5:8c:0a:5e:83:0a:c2:8b:74:
9f:50:61:a8:0d:f5:21:ec:9c:2e:b4:4e:09:4f:5a:a7:8a:a4:
48:4d:f2:c3:a7:8f:b0:d2:a6:93:f0:b3:af:31:1e:17:f5:3b:
49:f5:a0:c5:05:85:14:2f:ab:bc:60:1c:e7:61:0c:96:1f:b4:
bb:0a:a8:8c:8e:ae:71:70:42:5d:b2:eb:fa:6f:00:4f:8d:91:
d6:b1:5c:e5
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAl79MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgyMjE1NDk1OFoXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjc1N0YxMTAvBgNVBAUTKDI3NTdEMTFGN0I3ODY3NDg3QjhFODcw
MUQ3MkFDNjFBRDMyNzlFMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJTzemXhZKk7a5omNp3UrDPKP9Up6kCEFJJdXlG+tGvZ0Eu60lQsdU7ZFoEb1l
s4grop9AFgnGfqLNqaUlibU2TeBD2UhWLEjoKDUK5wEh4Qzg96p1Ii9b4DkIlSs1
VQlKQjJ0Rw+44BR5AIe49FQ1Jn+kkyC2jzNuZ0sTttRMy2sMVr00EpW6Cj7Z3/lW
O918SrLwpAuSr4s0JnPEHsx72Oa8j9E80uXcvz7joPtsUI55o9xCK98A9co/kOHI
ERIpETx0slpFcrN0HAd222rkz6g++IeSaxz8o/vpmGSnF78TPXmT98pyVuMaezWK
7JKislKy73Ciw6fOjMzd52gpAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJ1fRH3t4
Z0h7jocB1yrGGtMnng4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY3NTdGL0E0Q0NEQzYyN0Y2RjExRjBCNjNFNEUzQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNzU3Ri9BNENDREM2MjdGNkYxMUYwQjYzRTRFM0JDNEY5QUUwMi9KMWZSSDN0
NFowaDdqb2NCMXlyR0d0TW5uZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAggWMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ2XXMA8EAgAC
MAkDBwAgAQ328AAwDQYJKoZIhvcNAQELBQADggEBAMSFyaKmmBW5a88q3lmxbj4m
6xZVELeJ1iRbS8dwmhMjsTh3MPy9cLcprDm3Nse5Ci1CIDmzdAnlyBgmJdIkVY4R
walMvXTrSJSV96LQ8NH4/1y72zXp2O1vLi4dqEeicLVSZK0m6ftCWrDJslmUOumm
dr1JPoph2fQ8EDSP70DycxKRC8ChLSYbzsJZ4alIstrZnaWSFtM9Nl7Y+gD2aZL+
r/fgkT/Vhn1LYrWMCl6DCsKLdJ9QYagN9SHsnC60TglPWqeKpEhN8sOnj7DSppPw
s68xHhf1O0n1oMUFhRQvq7xgHOdhDJYftLsKqIyOrnFwQl2y6/pvAE+NkdaxXOU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:38 2025 by rpki-client