Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
File: Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer (raw, json)
Hash identifier: iV4cIotDuQgzAdc89m0Ve4zg+RlPB7D1ekQIUKtld9U=
Subject key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025F42
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 Aug 2025 01:21:22 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 7470
AS: 17468
AS: 17552
AS: 17556
AS: 18197
AS: 23717
AS: 23891
AS: 24042
AS: 24067
AS: 24128
AS: 37977
AS: 38002
AS: 38081 -- 38082
AS: 38543
AS: 38554
AS: 38599
AS: 45200
AS: 45805 -- 45807
AS: 55476
AS: 55498
AS: 55538
AS: 55549
AS: 55554
AS: 55646
AS: 55790
AS: 55844
AS: 55867 -- 55868
AS: 58544
AS: 58692
AS: 58806
AS: 131162
AS: 132009
AS: 132013
AS: 132063
AS: 132545
AS: 132605
AS: 133063
AS: 133167
AS: 133376
AS: 133529
AS: 133761
AS: 133791
AS: 133907
AS: 133956
AS: 134095
AS: 134438
AS: 134682
AS: 136182
AS: 136579
AS: 139295
AS: 140689
AS: 151337
AS: 151808
AS: 151825
AS: 152130
AS: 153659
AS: 153730
IP: 27.123.16.0/22
IP: 27.145.0.0/16
IP: 58.8.0.0/14
IP: 58.97.0.0/17
IP: 61.90.0.0/15
IP: 103.3.176.0/22
IP: 110.168.0.0/14
IP: 113.21.240.0/21
IP: 114.109.0.0/16
IP: 115.87.0.0/16
IP: 116.206.112.0/22
IP: 119.46.0.0/16
IP: 119.76.0.0/16
IP: 122.144.24.0/21
IP: 124.120.0.0 -- 124.122.255.255
IP: 171.96.0.0/13
IP: 182.17.0.0/16
IP: 202.71.112.0/20
IP: 202.93.48.0/20
IP: 202.133.128.0/18
IP: 202.176.64.0 -- 202.176.191.255
IP: 203.118.64.0/18
IP: 203.144.128.0/17
IP: 203.153.128.0/20
IP: 210.86.128.0 -- 210.86.223.255
IP: 210.213.0.0/18
IP: 2001:fb0::/31
IP: 2405:4000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155458 (0x25f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 25 01:21:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:05:65:b8:0b:29:02:55:db:25:62:a8:4a:
3f:18:a7:cc:c7:59:7b:bc:c7:13:20:f5:43:fe:7c:
dc:70:5c:e8:ef:22:ef:46:e1:80:24:af:b7:c5:a3:
fd:b6:40:d9:40:e1:3a:02:da:d6:06:e8:2d:d4:01:
1b:eb:9a:27:c3:1e:a2:bf:b8:66:4e:c3:43:29:93:
61:ab:62:b4:6d:f5:07:fe:66:97:4c:9d:f8:1c:a0:
6a:d2:a9:f6:2c:56:75:0c:62:ea:3e:61:48:24:27:
07:ed:73:0d:89:6e:1a:41:c6:fd:02:b5:eb:4c:ec:
9f:53:9f:5d:03:9b:de:59:81:aa:07:6b:69:b4:d1:
bf:48:d4:64:ef:bc:e1:a3:fc:1b:0a:75:12:b6:d5:
55:14:c5:f9:4c:bd:59:21:43:9f:ab:c7:ec:aa:bb:
3b:60:6f:b5:8f:20:5b:4e:c0:aa:de:62:f1:4e:ec:
43:f4:f5:d1:a6:81:6b:11:5c:88:26:94:10:98:df:
63:7c:30:6b:04:52:f7:13:cd:4e:f7:7c:b7:7e:8e:
c8:c9:32:9e:09:ef:f4:54:99:5e:2d:73:74:d1:31:
35:0c:17:8b:72:a0:5a:b1:a4:02:49:cb:28:04:00:
4e:8c:cd:40:59:c2:af:c3:fb:19:92:9f:ca:20:55:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7470
17468
17552
17556
18197
23717
23891
24042
24067
24128
37977
38002
38081-38082
38543
38554
38599
45200
45805-45807
55476
55498
55538
55549
55554
55646
55790
55844
55867-55868
58544
58692
58806
131162
132009
132013
132063
132545
132605
133063
133167
133376
133529
133761
133791
133907
133956
134095
134438
134682
136182
136579
139295
140689
151337
151808
151825
152130
153659
153730
sbgp-ipAddrBlock: critical
IPv4:
27.123.16.0/22
27.145.0.0/16
58.8.0.0/14
58.97.0.0/17
61.90.0.0/15
103.3.176.0/22
110.168.0.0/14
113.21.240.0/21
114.109.0.0/16
115.87.0.0/16
116.206.112.0/22
119.46.0.0/16
119.76.0.0/16
122.144.24.0/21
124.120.0.0-124.122.255.255
171.96.0.0/13
182.17.0.0/16
202.71.112.0/20
202.93.48.0/20
202.133.128.0/18
202.176.64.0-202.176.191.255
203.118.64.0/18
203.144.128.0/17
203.153.128.0/20
210.86.128.0-210.86.223.255
210.213.0.0/18
IPv6:
2001:fb0::/31
2405:4000::/32
Signature Algorithm: sha256WithRSAEncryption
14:61:d1:4d:a1:40:9c:ec:0e:ed:53:2e:64:1a:a1:5c:14:de:
73:c6:e4:3e:7d:e7:61:69:7d:b0:79:2e:b4:b6:17:97:71:10:
c4:9d:0e:ae:fc:1a:d9:43:30:52:9b:ba:07:7a:0f:32:85:84:
5f:a7:22:be:33:bc:e4:72:7c:b2:c3:91:ed:4b:4c:a0:23:e1:
b4:27:d7:a6:1e:9e:e2:f1:96:76:0f:a5:9c:25:c0:97:bf:5f:
9e:89:66:23:a7:0a:01:5c:fd:99:a2:bb:16:20:de:18:20:72:
09:3e:98:cb:5f:70:72:74:a5:62:c6:8e:38:f8:f0:6c:64:70:
57:71:3b:a6:0e:27:9c:39:a9:2b:11:87:31:f2:78:46:26:ec:
d1:b8:02:28:47:2d:25:20:26:0b:29:d1:3d:ae:29:f8:36:4a:
af:39:f6:fe:8e:8b:0e:e8:b6:c5:f1:9e:95:07:63:0a:74:59:
79:2d:fe:8b:09:c9:cd:33:87:33:a6:0f:e2:5d:f6:b5:64:68:
25:21:1b:bb:50:3a:09:5d:6d:51:9e:4d:8d:2d:0c:71:4c:e1:
66:ea:09:aa:e8:9b:c5:7a:a9:eb:59:98:d0:18:78:97:29:35:
e0:5f:8e:fb:78:cf:51:c2:a8:9f:96:1f:e1:86:23:c7:7e:b9:
f8:7b:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:03 2025 by rpki-client