Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer (raw, json)
Hash identifier: 3v4u52C554WguZKCKAruYj+ej4aD6OEGK5kRsSJ9xUY=
Subject key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026AB9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Oct 2025 16:38:22 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 150128
IP: 103.191.98.0/23
IP: 2001:df0:fc40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 01:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158393 (0x26ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 6 16:38:22 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:f5:52:ca:aa:78:16:e9:65:df:a5:bf:d5:
60:b7:84:ae:3b:1b:5d:32:af:28:ee:dd:3c:fa:84:
28:03:3f:f6:cb:30:69:20:a7:d4:a9:54:21:9c:cd:
85:41:02:dc:da:e5:39:c1:b5:c9:9a:db:5b:99:62:
80:4f:39:7c:92:84:16:d4:5c:9a:d6:ff:f4:0d:ec:
38:2f:ed:5a:e9:01:31:ff:b4:e7:81:2b:6a:18:be:
3b:6e:c2:54:64:1e:e5:95:7c:75:62:6c:2c:ae:ce:
e6:c6:81:a5:16:64:38:fc:f8:b0:5f:52:43:a1:56:
e0:71:c4:17:d1:ef:dd:cf:56:b0:f8:01:a3:7f:d8:
f6:30:ee:6f:59:d0:c7:c2:0f:2d:94:da:34:62:1f:
c9:28:67:a8:90:9f:b0:4b:a2:4c:18:3f:64:4e:98:
a6:bb:5f:47:7c:cc:f8:b9:00:e1:b4:d4:1c:6f:ca:
ae:74:e0:01:f4:46:d8:41:2c:68:5e:64:11:87:d6:
32:a3:a0:e6:05:be:cc:de:aa:1c:90:85:4e:1e:ae:
5e:63:d0:ba:34:33:71:18:cd:fd:25:68:9d:ed:6a:
6f:82:52:df:ca:fd:0a:32:22:f4:b0:70:7a:b7:1c:
74:49:f4:87:ba:85:3c:bd:a2:3f:19:e7:97:e7:fd:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150128
sbgp-ipAddrBlock: critical
IPv4:
103.191.98.0/23
IPv6:
2001:df0:fc40::/48
Signature Algorithm: sha256WithRSAEncryption
c3:e5:d8:93:42:d5:6f:a0:de:50:0f:4b:46:2a:5f:d9:33:85:
62:98:42:ed:1b:38:9b:7f:54:34:e3:36:2f:c8:c4:c4:ef:16:
b7:9f:f8:8e:18:75:f0:48:9b:34:f8:d9:f6:2b:07:ac:f1:cc:
00:68:0a:75:8d:ea:fe:1c:08:ae:b8:ce:d3:8e:0f:be:0d:35:
76:65:59:b0:4b:f6:a9:da:1b:fc:c6:4b:90:7d:08:9a:29:a6:
ca:67:e9:22:1f:47:3c:2a:38:07:1f:6d:28:ee:aa:97:90:9f:
6f:4d:19:2c:80:bd:42:a2:cd:3d:df:56:22:ac:17:3d:36:9f:
49:b1:1a:20:b1:6a:e3:61:ea:6c:d3:f7:62:de:1e:f1:ea:29:
f3:05:99:07:59:4c:71:ef:4d:3a:6d:29:85:29:fc:75:0c:bd:
0f:7f:ab:9a:0b:05:f5:87:56:75:f6:00:5d:93:d4:6b:e4:85:
fd:94:8e:57:02:8f:fc:95:28:0e:dd:37:67:02:a9:4d:9e:13:
ad:37:8e:3a:3c:80:d0:6e:10:46:cd:63:65:00:52:db:c4:de:
3d:10:76:dd:5e:95:f7:7e:96:d3:fa:38:db:4a:65:e6:0c:a4:
60:1d:c2:59:df:f3:b4:5b:a7:84:e1:be:58:9c:3e:b1:f7:5e:
3c:1f:8f:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:29:20 2025 by rpki-client