Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
File: RzKsKGdyTfzuirIikX9q8r0Ojz8.cer (raw, json)
Hash identifier: Dv0P6ySxQ/FFoA8NxvTqBzVlnf6jjCk1Psiye9M5w/4=
Subject key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02670A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 Sep 2025 07:51:49 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154259
IP: 43.240.52.0/23
IP: 2402:2da0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157450 (0x2670a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 23 07:51:49 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:e9:59:af:0d:ce:e7:d6:2f:7c:d7:1d:52:
df:d6:bf:ff:9f:27:b5:14:03:51:d8:ab:c0:9f:08:
a1:7e:76:2d:5c:46:ee:59:a7:e5:f1:b4:9f:2e:e1:
71:d8:3a:b0:3e:cb:5c:a4:d4:63:d4:6d:ac:c2:90:
2d:d9:53:1b:b8:a7:95:11:95:4f:3a:73:89:1c:99:
b9:e3:e6:99:11:52:72:5b:05:41:fa:56:fb:0d:0d:
3d:c0:0d:e8:02:1f:3d:3c:d0:8c:ef:69:89:5e:29:
19:52:d5:ba:6b:d1:bb:4d:85:9b:48:6e:fb:bc:88:
c8:b4:86:2e:87:5d:b8:1b:9b:36:6a:8e:ea:73:0b:
3c:32:97:5b:dd:0d:6a:c4:d7:a8:37:1d:49:41:3a:
0b:a9:3e:54:e1:e1:ec:73:fa:45:63:99:0f:66:d8:
31:ea:0b:53:2c:f5:d1:54:f0:ed:2f:0a:6c:55:f5:
61:69:8d:cc:ed:60:cf:9f:76:2b:9b:16:3a:3c:f4:
eb:d1:d5:de:9b:bd:6a:e8:87:15:a6:d2:e3:76:8e:
88:19:9b:b3:2b:af:0a:25:64:a3:96:4f:6e:d7:a1:
c9:06:fe:42:93:34:7c:9c:2e:ac:10:6d:f4:87:95:
1a:78:b3:7f:49:cb:d9:2e:88:1b:62:e4:5b:54:c7:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154259
sbgp-ipAddrBlock: critical
IPv4:
43.240.52.0/23
IPv6:
2402:2da0::/32
Signature Algorithm: sha256WithRSAEncryption
af:8f:80:fd:d5:4f:e7:91:27:ba:a5:fc:10:52:8d:6f:95:6d:
21:ff:a3:1c:23:fe:dd:37:80:d8:a4:68:4f:f5:ec:a2:ee:2f:
b7:ca:62:08:4e:87:63:73:4f:ff:ab:40:36:98:a8:0d:ee:a8:
0f:32:db:1c:b5:92:1e:ed:ae:fe:94:b5:6d:24:e8:4b:54:ef:
73:5f:5c:af:28:27:bb:59:fa:95:21:2a:aa:af:e5:e1:0a:cc:
a2:0b:7c:54:61:e7:1a:02:50:66:61:3e:2c:4f:c7:6e:93:7a:
5b:be:13:fa:f4:f5:36:b3:c8:19:e0:26:fd:62:42:50:88:d1:
5f:bc:84:63:93:73:40:81:1a:64:64:cf:e8:66:cc:3a:e3:40:
af:94:77:84:57:a4:16:b8:f8:da:35:d9:4c:e4:da:07:47:c4:
d0:76:20:70:32:9b:85:f9:76:c2:f3:4b:5a:f9:a1:12:5e:53:
07:b2:e5:e1:de:a5:64:a2:ba:28:44:88:df:35:8f:ec:08:40:
2a:ca:51:c4:9b:22:25:61:7f:14:04:28:da:18:72:aa:8f:fa:
55:87:b3:ef:f0:b3:83:2b:8c:3c:12:c5:5d:3a:d0:af:2b:20:
f0:83:b1:3d:a6:5d:31:16:b2:28:a0:2c:18:76:f1:b3:67:5b:
69:56:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:42 2025 by rpki-client