
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer (raw, json)
Hash identifier: 3Ms6TMk5js1fmlaCD71l97la4kfi+HDQ5CbWJXoK3Po=
Subject key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025E8B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Aug 2025 12:41:12 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 55769
IP: 45.250.236.0/22
IP: 103.242.56.0/22
IP: 144.48.136.0/22
IP: 144.48.228.0/22
IP: 157.119.96.0/22
IP: 202.53.144.0/22
IP: 2405:e280::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155275 (0x25e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 20 12:41:12 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:5a:2e:3c:73:50:c3:e6:76:5a:5d:93:4d:
b1:a5:ba:ec:f9:dd:4e:73:56:a1:e5:49:3c:d5:b1:
d2:1f:9d:b0:21:40:24:d8:11:6f:e1:2c:a2:79:b0:
e0:2d:a6:a7:75:97:31:90:d9:85:7b:ba:37:1b:19:
de:bc:f7:3f:41:9b:14:da:3e:d4:ee:3f:1a:96:27:
95:79:14:ce:f3:a5:b5:fa:26:7d:62:fe:85:fa:9f:
2d:30:be:fc:2a:82:f3:2a:6b:f4:4b:e0:ac:2d:5b:
6d:87:c0:16:14:a1:3b:90:14:4d:c1:f6:fb:77:f8:
27:a4:5c:b1:da:12:3a:cf:5b:37:07:0c:ee:72:8c:
3e:38:96:7c:b4:20:1f:6e:4c:03:70:18:63:70:be:
3f:e0:db:04:ef:60:68:d2:4a:36:6b:16:cd:3c:3c:
5d:8d:ab:65:e7:49:7a:ab:f6:1e:9f:6a:66:8e:dc:
6f:b7:a6:e1:c4:96:51:a7:26:d9:dd:91:a0:1f:03:
03:64:7f:c7:3a:e4:0f:e5:98:48:c7:8b:e6:32:da:
33:d4:5c:39:88:8c:76:87:17:1d:00:98:ae:e9:4c:
b9:33:53:de:2c:45:6b:93:95:f5:ba:64:8f:f4:d4:
21:bf:66:e1:1d:dd:8a:3f:9b:f2:ff:71:8c:23:2c:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55769
sbgp-ipAddrBlock: critical
IPv4:
45.250.236.0/22
103.242.56.0/22
144.48.136.0/22
144.48.228.0/22
157.119.96.0/22
202.53.144.0/22
IPv6:
2405:e280::/32
Signature Algorithm: sha256WithRSAEncryption
53:13:95:ab:fa:0d:7e:15:c2:04:42:e3:2d:4c:13:18:1a:e7:
1e:64:3f:90:3a:1e:6d:bc:97:ce:5a:6c:82:3c:4d:37:78:59:
db:07:56:1c:fd:d8:65:93:a9:1c:ca:b4:77:44:5c:11:91:2c:
8d:f1:0c:97:c6:5a:28:fa:ca:6b:ed:e7:f6:0f:e2:7f:48:39:
0d:08:e1:a4:59:8b:83:cf:00:c0:0f:81:de:df:dd:e8:47:47:
c0:2d:d6:97:c1:ea:59:ae:f5:40:ed:47:cc:7c:12:20:2e:df:
36:1d:7e:e3:42:7e:34:54:4e:15:e3:52:76:5f:2c:8e:64:92:
e6:a9:82:34:58:20:7a:37:a8:e9:bd:f0:76:45:5f:eb:16:60:
aa:36:65:43:05:9e:5d:c4:d1:ce:f0:05:9a:23:2e:8e:50:43:
fa:f7:a0:f6:55:a1:fd:2e:8a:ca:30:9e:5c:a9:44:39:cf:7f:
44:e1:b0:9f:c5:fa:d5:12:db:f6:22:33:3f:64:ae:3a:2f:2e:
5b:6a:f4:94:08:9b:ef:9a:b4:3d:c3:cf:56:81:2d:d3:e5:51:
2d:b4:21:f8:35:b6:58:0e:5e:2f:6a:ff:61:f3:25:6a:e6:bb:
ae:ea:b7:c8:98:b4:a1:9b:1c:be:53:87:17:c7:53:57:1b:e1:
6f:2a:9d:0d
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIDAl6LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgyMDEyNDExMloXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0
NTEwODExMDQwNjg3NUZFQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3mFouPHNQw+Z2Wl2TTbGluuz53U5zVqHlSTzVsdIfnbAhQCTYEW/hLKJ5sOAt
pqd1lzGQ2YV7ujcbGd689z9BmxTaPtTuPxqWJ5V5FM7zpbX6Jn1i/oX6ny0wvvwq
gvMqa/RL4KwtW22HwBYUoTuQFE3B9vt3+CekXLHaEjrPWzcHDO5yjD44lny0IB9u
TANwGGNwvj/g2wTvYGjSSjZrFs08PF2Nq2XnSXqr9h6famaO3G+3puHEllGnJtnd
kaAfAwNkf8c65A/lmEjHi+Yy2jPUXDmIjHaHFx0AmK7pTLkzU94sRWuTlfW6ZI/0
1CG/ZuEd3Yo/m/L/cYwjLHcZAgMBAAGjggM8MIIDODAdBgNVHQ4EFgQUgDGIbn5g
nk9KNGpFEIEQQGh1/sgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFEQThDL0YzMTY0QzIwRDEwNjExRUNCMTI4RjQxM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExREE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41
Z25rOUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANnZMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLfrsAwQCZ/I4
AwQCkDCIAwQCkDDkAwQCnXdgAwQCyjWQMA0EAgACMAcDBQAkBeKAMA0GCSqGSIb3
DQEBCwUAA4IBAQBTE5Wr+g1+FcIEQuMtTBMYGuceZD+QOh5tvJfOWmyCPE03eFnb
B1Yc/dhlk6kcyrR3RFwRkSyN8QyXxloo+spr7ef2D+J/SDkNCOGkWYuDzwDAD4He
393oR0fALdaXwepZrvVA7UfMfBIgLt82HX7jQn40VE4V41J2XyyOZJLmqYI0WCB6
N6jpvfB2RV/rFmCqNmVDBZ5dxNHO8AWaIy6OUEP696D2VaH9LorKMJ5cqUQ5z39E
4bCfxfrVEtv2IjM/ZK46Ly5bavSUCJvvmrQ9w89WgS3T5VEttCH4NbZYDl4vav9h
8yVq5ruu6rfImLShmxy+U4cXx1NXG+FvKp0N
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:08 2025 by rpki-client