Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
File: b814Gaj5P69A0OOH8htG6E3p1ws.cer (raw, json)
Hash identifier: Xu9coWBwDz7xecZ0K4OJF39LrmsRfsGzbLfzN1VjYXo=
Subject key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0264E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 Sep 2025 19:30:51 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 103.190.124.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156899 (0x264e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 11 19:30:51 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:7d:02:b2:15:b0:e3:67:21:32:5c:35:79:
d4:4f:51:30:12:28:94:23:cb:94:75:49:ff:7f:ff:
57:a7:9c:83:12:58:db:93:40:8f:e4:c6:75:67:3e:
bc:7a:2c:83:d9:60:9a:5a:91:1d:88:8d:f0:1b:b8:
eb:b1:a5:ab:2d:4c:dc:3d:38:32:8f:05:d3:11:e8:
09:a9:ea:3a:2e:72:5e:63:cb:09:76:f2:44:4a:cf:
2c:dc:d2:e6:8e:32:c7:66:dc:72:22:42:db:b3:53:
b4:24:02:e5:9d:a6:ff:69:c2:82:98:1c:cf:f6:df:
4c:95:5c:fc:82:c1:53:f2:cf:a2:79:32:aa:5c:02:
cf:b9:96:4b:fe:05:63:36:8c:0e:8a:16:af:2d:b7:
c0:93:08:fe:3e:2c:c8:e5:d0:30:31:a3:d0:0b:f7:
ff:b9:d0:7e:a3:59:0c:ea:b8:00:aa:bf:2e:da:28:
3c:01:c8:ab:02:5b:a7:e8:3c:1b:02:4d:5c:9e:fa:
88:1e:78:24:58:68:50:c7:9e:43:0f:87:4f:77:85:
58:1f:c3:ef:5a:b4:ef:f6:ac:4f:f8:5d:c4:af:4c:
06:f1:b0:82:bf:ae:2f:24:61:21:18:e7:01:95:a7:
ee:23:a4:0b:16:c8:f8:27:d5:f2:52:0b:f3:f4:84:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.124.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:9d:85:cd:a5:38:85:98:be:11:96:42:44:df:75:0b:aa:ce:
f3:8f:9f:01:54:74:d7:84:01:5b:9f:ac:65:b1:b6:d8:a6:99:
03:10:ab:57:f2:1e:e8:66:92:07:71:ba:ad:e5:85:0f:7b:1c:
83:0e:71:0e:66:28:67:ac:e0:a1:e7:9b:34:ac:e0:b2:29:e6:
87:d8:79:34:2f:d7:79:76:4c:fe:f3:ef:1e:a6:a3:c4:43:2d:
a7:1d:6b:f4:d5:21:f3:5d:d6:73:d0:a6:b5:fd:17:00:23:92:
f3:34:ba:d5:52:11:4c:1e:84:70:c0:84:e0:31:9f:03:fc:75:
23:3a:ff:2f:ba:65:98:3e:ce:3e:c8:4b:e4:2d:a1:92:8a:ef:
85:a6:71:6e:38:05:24:b6:12:2a:e8:6f:53:24:27:1e:56:62:
a9:62:05:b6:da:25:b1:5c:0c:dc:a3:b1:e7:0d:5e:18:d9:46:
07:8f:00:26:7e:30:3f:43:ca:63:58:6b:99:02:4b:d9:39:28:
f6:d7:e9:4b:cf:85:27:eb:e7:0a:8f:76:a5:9d:d9:d8:12:5e:
46:f7:17:72:3c:b1:c6:65:38:3b:8c:05:94:13:e5:98:d1:19:
5d:40:85:c4:58:3b:17:8d:fa:47:bc:c7:21:89:ff:72:dc:d0:
20:25:4d:c6
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAmTjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkxMTE5MzA1MVoXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4
N0YyMUI0NkU4NERFOUQ3MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAYH0CshWw42chMlw1edRPUTASKJQjy5R1Sf9//1ennIMSWNuTQI/kxnVnPrx6
LIPZYJpakR2IjfAbuOuxpastTNw9ODKPBdMR6Amp6joucl5jywl28kRKzyzc0uaO
Msdm3HIiQtuzU7QkAuWdpv9pwoKYHM/230yVXPyCwVPyz6J5MqpcAs+5lkv+BWM2
jA6KFq8tt8CTCP4+LMjl0DAxo9AL9/+50H6jWQzquACqvy7aKDwByKsCW6foPBsC
TVye+ogeeCRYaFDHnkMPh093hVgfw+9atO/2rE/4XcSvTAbxsIK/ri8kYSEY5wGV
p+4jpAsWyPgn1fJSC/P0hG0RAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUb814Gaj5
P69A0OOH8htG6E3p1wswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIwMkEyL0VGRDIxNTg0NzdFQjExRUU5M0I2OEIzQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCMDJBMi9FRkQyMTU4NDc3RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2Fq
NVA2OUEwT09IOGh0RzZFM3Axd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAFnvnwwDQYJKoZIhvcNAQELBQADggEBANWdhc2lOIWYvhGWQkTf
dQuqzvOPnwFUdNeEAVufrGWxttimmQMQq1fyHuhmkgdxuq3lhQ97HIMOcQ5mKGes
4KHnmzSs4LIp5ofYeTQv13l2TP7z7x6mo8RDLacda/TVIfNd1nPQprX9FwAjkvM0
utVSEUwehHDAhOAxnwP8dSM6/y+6ZZg+zj7IS+QtoZKK74WmcW44BSS2Eirob1Mk
Jx5WYqliBbbaJbFcDNyjsecNXhjZRgePACZ+MD9DymNYa5kCS9k5KPbX6UvPhSfr
5wqPdqWd2dgSXkb3F3I8scZlODuMBZQT5ZjRGV1AhcRYOxeN+ke8xyGJ/3Lc0CAl
TcY=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:55 2025 by rpki-client