Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer (raw, json)
Hash identifier: /gf0HE3RHmMJq+LeXXZ2/2AdA5HQTtYFoZwkqBdrv7E=
Subject key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0269EC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Oct 2025 22:18:36 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 45.112.60.0/22
IP: 103.74.208.0/22
IP: 202.49.41.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158188 (0x269ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 22:18:36 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:3b:52:56:d8:8d:c6:50:31:4f:30:14:6f:
93:73:7d:a5:ff:64:99:d4:ff:b9:bf:d9:74:f1:9f:
21:c2:de:c2:9f:d4:6b:43:7a:db:95:11:ea:bb:34:
e3:7e:05:cb:83:06:a9:31:45:d0:38:75:68:ca:e4:
39:e6:f7:a3:4c:f1:90:3f:65:8d:03:62:2b:b2:f1:
7b:d2:1d:16:97:0b:85:c4:31:de:8e:83:94:7d:92:
4b:be:a2:e0:39:d4:31:cb:29:1a:00:46:ae:07:e1:
85:52:71:6e:f2:61:3b:fe:77:e6:ae:34:94:7f:02:
06:a9:54:79:9d:26:8d:45:ee:82:2e:2c:d5:9e:f6:
58:48:79:4d:44:54:6a:e4:e1:49:10:ae:0d:6d:5c:
6e:2e:1d:fa:ae:89:99:db:80:1b:2e:66:0e:59:94:
8d:9c:cc:93:1e:cd:62:89:95:ca:af:c4:bb:2a:3b:
e1:de:f5:de:31:26:25:9e:33:e3:cd:c3:3b:a6:da:
cb:48:c6:f0:d0:5a:b4:38:77:30:f6:cc:b0:d7:7e:
c8:99:63:b7:df:2e:9d:c2:2b:75:69:ce:7f:01:96:
e9:ed:91:01:23:b4:4b:f9:c7:79:a2:1e:4b:25:b8:
06:dd:99:57:07:93:79:a4:5c:f0:2b:09:98:06:24:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.60.0/22
103.74.208.0/22
202.49.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:e0:9c:62:fd:18:af:15:d6:4d:55:60:8e:4b:c7:6f:d4:7a:
d9:1e:11:ba:d7:7f:2b:f5:eb:12:02:92:30:21:39:f9:c8:e7:
f8:e3:32:04:5e:35:d5:f3:a3:3c:4b:6c:f4:f5:07:b5:3e:81:
71:b4:db:d9:73:3e:4f:8e:0d:c2:86:de:93:66:30:c6:18:2b:
80:a3:7b:71:2a:b0:a9:57:59:28:71:a2:7b:e0:68:91:89:85:
09:df:28:dc:66:00:79:bd:ed:26:98:df:33:ca:45:04:ad:30:
d0:5b:ba:6f:08:d8:5b:8b:01:77:40:e7:ff:92:cb:dd:cf:d3:
9e:4b:7d:01:4f:95:90:84:45:2f:05:a6:81:dd:41:bc:5c:dc:
b9:e4:c3:fb:2e:0c:59:65:e5:6e:c8:f2:e7:1c:22:d7:d2:db:
4c:65:46:64:34:4f:df:5d:f8:14:b6:2d:cc:be:b1:fc:f7:b5:
a8:99:f2:25:79:99:1e:4f:4f:ba:e8:28:54:34:c7:97:14:7d:
1a:36:c3:55:ca:01:d8:ad:2b:f5:df:51:0a:eb:6c:8f:37:cb:
a4:9b:5d:26:9b:2e:d8:b8:f3:48:13:d9:74:36:40:da:ca:39:
c8:02:97:3b:19:7b:74:38:e3:c3:28:2b:75:44:f2:bc:a3:dc:
81:de:f7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:38:35 2025 by rpki-client