Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer
File: gSWwbgdMKML4IQXEMQAEnt9uAPg.cer (raw, json)
Hash identifier: I1SC8gljw9biUW8N6jLShYcm2F531C/Cf9ve0B+CPBg=
Subject key identifier: 81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0266B7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Sep 2025 04:22:23 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154258
IP: 45.115.40.0/23
IP: 2402:2d60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157367 (0x266b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 22 04:22:23 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A917960F, serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:cd:47:e0:3b:9e:c9:1f:5d:9d:09:f5:ec:
16:fd:ec:b4:bc:01:b5:52:61:d7:05:d1:f1:08:c3:
5f:82:11:61:67:83:3e:40:59:4d:04:fc:7c:fd:4d:
3d:75:3f:c4:2f:48:06:2f:29:b3:dc:23:e1:d8:1e:
78:dd:8e:37:bc:24:38:26:ab:4d:5f:dc:13:d5:f0:
e7:49:f9:14:33:c2:c2:77:63:cf:1e:ef:a7:f6:57:
29:cf:44:69:55:7c:ef:c7:08:88:82:17:ef:81:06:
fe:7d:47:5d:34:54:30:a5:5d:c2:f0:09:c1:4f:34:
93:28:e7:6d:30:5a:cd:87:04:8c:b4:19:b6:3c:81:
c5:6c:8d:ec:ba:e9:3f:ec:d4:48:64:67:4d:01:3d:
cc:32:92:15:2f:c4:dc:fa:3a:0d:04:4f:51:8f:66:
79:40:bd:12:16:37:f6:2f:0d:00:e5:83:c4:84:0e:
24:2d:f1:05:55:66:87:63:64:2c:4f:f3:e5:7a:13:
02:f3:93:a8:ca:36:43:82:2f:a7:c5:ec:68:c2:79:
f3:ab:b8:c5:3f:e7:2d:6d:0b:7e:89:87:b5:69:99:
10:2e:78:4e:01:52:95:d1:d6:27:09:0d:cd:cc:e5:
27:0e:91:ba:8d:3b:42:12:74:89:8c:a2:a5:73:f8:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154258
sbgp-ipAddrBlock: critical
IPv4:
45.115.40.0/23
IPv6:
2402:2d60::/32
Signature Algorithm: sha256WithRSAEncryption
ab:83:88:6c:93:81:6e:9f:4c:aa:f5:10:eb:99:64:79:99:c8:
96:d3:c7:36:d4:01:d7:b0:d7:f1:25:4a:17:21:33:59:95:c1:
63:d9:98:c4:bb:5c:4a:27:bb:c4:f0:f2:40:1d:66:c9:9b:59:
d1:7b:04:f4:18:e9:14:a9:3c:21:7d:34:6b:ed:e0:3e:50:c8:
80:c9:24:ea:5a:a5:c2:7b:19:bb:3d:a4:81:0e:27:86:85:0f:
f7:1f:c6:fc:0c:05:cf:1f:29:8d:d3:59:c9:8f:c1:fd:df:a7:
59:ce:a6:9b:1f:e6:68:a3:ad:8f:4c:08:06:82:c1:cd:37:3a:
da:2a:84:f2:e7:0b:35:b5:da:0f:5e:aa:bb:fd:20:20:f4:fc:
77:8b:ac:48:07:ef:ab:ec:eb:b4:71:89:5b:cb:51:20:2d:09:
83:60:24:8f:90:28:74:c6:ae:95:c2:23:cb:73:3e:69:fc:04:
5f:c2:01:3e:c4:77:0b:6f:fd:b3:68:29:bc:c4:af:ef:6c:ff:
a0:fc:6a:5d:2a:ca:5d:09:37:39:3a:82:63:ce:92:0b:40:77:
a8:58:2f:84:62:47:5c:bf:f2:51:ad:30:2a:78:f4:e6:b3:e1:
47:8e:d4:7c:17:72:f4:05:97:ed:de:39:85:45:df:66:13:f9:
98:17:f7:bc
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAma3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkyMjA0MjIyM1oXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzk2MEYxMTAvBgNVBAUTKDgxMjVCMDZFMDc0QzI4QzJGODIxMDVD
NDMxMDAwNDlFREY2RTAwRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfV81H4DueyR9dnQn17Bb97LS8AbVSYdcF0fEIw1+CEWFngz5AWU0E/Hz9TT11
P8QvSAYvKbPcI+HYHnjdjje8JDgmq01f3BPV8OdJ+RQzwsJ3Y88e76f2VynPRGlV
fO/HCIiCF++BBv59R100VDClXcLwCcFPNJMo520wWs2HBIy0GbY8gcVsjey66T/s
1EhkZ00BPcwykhUvxNz6Og0ET1GPZnlAvRIWN/YvDQDlg8SEDiQt8QVVZodjZCxP
8+V6EwLzk6jKNkOCL6fF7GjCefOruMU/5y1tC36Jh7VpmRAueE4BUpXR1icJDc3M
5ScOkbqNO0ISdImMoqVz+JEvAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUgSWwbgdM
KML4IQXEMQAEnt9uAPgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc5NjBGL0JBMzVFMEE4OTc2QjExRjBBRUU3QTU4NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3OTYwRi9CQTM1RTBBODk3NkIxMUYwQUVFN0E1ODRDNEY5QUUwMi9nU1d3Ymdk
TUtNTDRJUVhFTVFBRW50OXVBUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlqSMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLXMoMA0EAgAC
MAcDBQAkAi1gMA0GCSqGSIb3DQEBCwUAA4IBAQCrg4hsk4Fun0yq9RDrmWR5mciW
08c21AHXsNfxJUoXITNZlcFj2ZjEu1xKJ7vE8PJAHWbJm1nRewT0GOkUqTwhfTRr
7eA+UMiAySTqWqXCexm7PaSBDieGhQ/3H8b8DAXPHymN01nJj8H936dZzqabH+Zo
o62PTAgGgsHNNzraKoTy5ws1tdoPXqq7/SAg9Px3i6xIB++r7Ou0cYlby1EgLQmD
YCSPkCh0xq6VwiPLcz5p/ARfwgE+xHcLb/2zaCm8xK/vbP+g/GpdKspdCTc5OoJj
zpILQHeoWC+EYkdcv/JRrTAqePTms+FHjtR8F3L0BZft3jmFRd9mE/mYF/e8
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:05 2025 by rpki-client