Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer (raw, json)
Hash identifier: F2qPJo5wBedPEilH0nM4ghUr73au2IosAuX3oPAr0oY=
Subject key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026016
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Aug 2025 21:08:23 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 132857
IP: 43.243.56.0/23
IP: 2407:2b00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 01:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155670 (0x26016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 27 21:08:23 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:07:5a:3d:b1:92:79:21:07:3d:b4:b6:3f:
86:e3:fc:f8:fb:0d:3c:c7:45:52:13:e1:78:56:7c:
ba:02:c0:a3:38:84:4a:7d:78:81:6d:ac:7e:33:96:
39:1e:02:37:ba:a1:08:f3:1c:d5:9e:42:62:cb:8e:
c0:8a:70:10:73:10:73:24:e5:e2:1b:c5:9d:79:61:
8a:7b:f7:93:d4:8c:cd:16:df:5c:09:ca:c0:61:17:
76:57:b5:03:c2:fd:75:f5:b2:28:83:86:02:f2:bc:
f3:62:6f:39:00:89:5a:fe:31:2a:ea:fd:fa:42:f1:
c8:33:0d:c6:35:d5:59:ad:8e:f6:e9:81:7c:26:1b:
fd:0c:d6:0b:c4:5c:cc:a4:72:6b:05:34:a0:5f:47:
ba:9e:bb:0b:eb:61:d8:60:35:96:21:8e:88:47:ad:
5d:a9:7c:62:c4:78:97:d0:17:55:c2:05:4a:20:6a:
b9:c7:aa:d2:83:4d:12:33:f4:56:42:e5:c0:36:d5:
c8:d0:e6:ce:ed:9e:71:99:9e:77:e2:65:e3:48:ee:
a9:99:80:86:14:d5:29:22:2b:d6:49:d0:8f:a7:e9:
92:fb:42:2b:8c:0c:37:0f:19:df:60:c5:99:6a:c6:
c6:1c:c0:65:a5:17:5d:0c:bc:14:f3:5a:5c:e7:5d:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132857
sbgp-ipAddrBlock: critical
IPv4:
43.243.56.0/23
IPv6:
2407:2b00::/32
Signature Algorithm: sha256WithRSAEncryption
7b:5a:a5:23:b9:0c:ea:31:fc:b6:88:0c:25:36:f6:55:34:54:
e1:79:be:ad:c3:dd:d7:2e:3b:57:c7:45:99:27:42:97:ca:f1:
7c:52:50:5f:0e:3f:e0:76:07:dc:41:ac:9c:7f:62:d2:cf:96:
90:ee:6f:f8:6d:72:94:1d:17:07:bc:0d:1d:7f:e7:aa:4c:1e:
ec:ac:2f:cf:8c:62:33:d4:bd:e9:44:fb:2e:93:76:15:83:4d:
c6:13:b2:d6:dc:f4:5f:ed:40:40:35:7b:05:89:ea:fd:cc:37:
fe:24:66:92:ce:55:f5:cb:5e:19:6c:cc:16:bd:2d:d2:6b:9e:
56:4a:28:a5:a6:e3:9b:9f:12:b4:e4:3c:53:2f:8b:38:16:83:
ae:5a:a2:9f:00:0b:c9:bf:de:16:1e:ff:ab:d0:7c:d6:24:e4:
84:f2:a0:da:98:c4:2f:43:71:8f:34:1a:a4:3c:2b:b6:b6:33:
1d:a3:99:93:fe:44:71:d9:ee:13:40:57:b9:22:bd:2d:20:f9:
18:55:27:ed:bb:0c:97:6c:f4:ea:4e:70:2f:34:91:ab:56:0b:
68:d5:36:27:93:1f:ed:2f:c2:10:51:a1:95:dd:e0:28:80:24:
c4:67:90:ce:14:96:07:62:fe:c5:59:09:e3:12:34:97:97:30:
67:ef:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:22 2025 by rpki-client