Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
File: XnKqfVsdVjLl0z_scvp0M_Sc4po.cer (raw, json)
Hash identifier: AKUiJRdKFWjrMridFrj4GL7YWaI7aUjmpbZ220rOtRM=
Subject key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025CF3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Aug 2025 20:15:04 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 18220
AS: 24227
AS: 24230
AS: 45870
AS: 147172
AS: 149861
IP: 202.12.69.0/24
IP: 203.0.68.0/22
IP: 203.5.216.0/23
IP: 203.5.220.0 -- 203.5.243.255
IP: 203.6.0.0/17
IP: 203.10.112.0/21
IP: 203.10.128.0 -- 203.11.63.255
IP: 203.27.103.0/24
IP: 2401:6000::/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154867 (0x25cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 12 20:15:04 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:f6:36:07:78:06:34:de:42:8c:34:aa:20:
85:1a:cb:02:67:07:24:d5:3b:7a:db:06:87:c3:da:
c8:5a:12:00:e2:ec:ad:cf:4e:ad:2d:13:d8:13:15:
f7:82:c2:b5:86:ed:31:20:cb:0b:69:0f:03:0d:e4:
bc:28:74:a3:c6:0e:6b:d8:93:fc:c7:25:0d:66:59:
26:52:39:8b:56:3a:89:3c:1b:51:67:c4:55:ad:92:
57:4b:48:56:de:b9:ee:90:03:6a:97:f1:2d:ce:cc:
3c:a5:48:cf:23:3e:e6:5a:e6:66:a0:d4:5d:9c:0a:
50:43:48:9f:2a:84:43:12:f4:96:37:ba:91:87:61:
11:51:d0:62:db:a3:6a:09:11:a3:1b:3c:7d:06:1e:
1d:05:19:4d:07:a8:50:9f:5e:d7:90:32:79:c8:02:
91:7c:c3:b9:7a:93:00:42:5f:87:01:c1:4e:f3:88:
e1:2c:7a:75:54:fc:c0:50:03:a7:ec:74:39:ba:a9:
51:32:a6:3a:15:f7:9f:7a:97:52:ac:bd:27:31:b6:
cc:53:99:a2:3d:a2:f0:b3:fd:59:e0:01:e3:fc:5f:
ce:68:3e:a3:ee:d9:4c:9a:0c:9d:92:f8:aa:d0:a6:
d4:81:86:60:35:0c:9c:2f:e9:b2:e5:af:c0:ad:c5:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18220
24227
24230
45870
147172
149861
sbgp-ipAddrBlock: critical
IPv4:
202.12.69.0/24
203.0.68.0/22
203.5.216.0/23
203.5.220.0-203.5.243.255
203.6.0.0/17
203.10.112.0/21
203.10.128.0-203.11.63.255
203.27.103.0/24
IPv6:
2401:6000::/20
Signature Algorithm: sha256WithRSAEncryption
0e:95:bf:7b:ed:9e:64:3a:0e:4d:7e:7c:bf:55:38:6b:0f:14:
f6:50:40:3e:3f:08:ac:a3:68:51:cf:73:c9:a5:cd:a5:7f:05:
a5:79:be:41:c7:23:38:e5:c2:89:bd:89:fb:12:63:1c:b5:87:
24:04:c6:fe:3f:c0:cc:89:84:52:bc:a7:f6:10:76:7e:8c:27:
77:aa:5f:71:2c:d2:a0:b3:cb:4e:65:80:cb:9e:ea:46:67:5e:
87:3f:a6:1b:3f:7e:0a:28:44:87:53:d6:34:ce:a4:71:a3:79:
b1:b0:eb:03:35:54:c5:60:9e:f6:68:38:23:cd:37:ba:55:66:
f4:db:d6:72:eb:54:a9:63:fa:6f:5b:07:c3:3a:fd:62:a8:5f:
50:3e:42:1c:8b:20:48:6c:ee:1b:e1:4c:4d:1e:84:37:36:0b:
22:9a:b9:6c:47:c9:85:80:02:b7:c2:d4:39:72:f9:55:b5:9e:
56:4d:32:29:81:5a:a5:c8:69:31:4f:c8:69:46:0b:66:cd:a8:
52:be:6f:67:ac:b4:c0:25:0e:39:24:2f:e7:cf:8b:02:9a:12:
2d:aa:46:63:79:da:90:f8:4b:87:15:dc:43:4d:a6:78:6b:37:
7a:d1:31:1b:03:80:6c:b9:f2:93:ee:ba:60:08:8d:0c:9f:f0:
f5:83:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:03 2025 by rpki-client