Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
File: j4RQ6hjtZj3XYxNayPnBormb2W0.cer (raw, json)
Hash identifier: zR13TgPjq+4qwf64XtRiimbp3RtG15BVpgHpZGS0oiE=
Subject key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025DF6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 18 Aug 2025 13:42:02 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.207.28.0/24
IP: 2404:2780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 08:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155126 (0x25df6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 13:42:02 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:f4:21:e9:00:a1:93:ed:87:8e:92:9c:67:
7c:ab:51:b2:58:43:76:6b:df:81:de:24:82:07:cd:
06:9d:ff:06:01:e1:c5:cf:33:92:6a:c1:c2:6c:39:
be:18:27:92:62:57:fc:05:65:3a:9b:42:05:1b:6e:
25:53:49:2c:9f:53:3f:3b:8b:79:94:b9:1b:63:8b:
4d:a0:a1:8b:26:81:3e:35:49:bd:ce:11:b6:a7:03:
17:c2:17:46:cc:fc:7c:d7:39:0d:7e:5d:b2:03:c2:
8e:07:43:6b:98:66:4c:c6:10:4a:19:be:96:16:cc:
25:14:6f:7a:9b:17:16:0c:7f:78:e1:68:cd:3f:94:
a0:4d:17:d5:c6:7e:6c:7b:76:44:34:c8:c1:92:2f:
fb:1d:72:5e:76:4c:67:ac:8d:08:4f:bc:b3:14:8d:
c2:50:1c:7d:6b:18:9c:49:ff:04:31:66:bd:d0:97:
0a:dd:7a:b0:ea:9e:2c:0b:d6:4a:bc:76:70:37:5f:
e4:94:3b:34:ec:9e:63:e0:ed:7d:5d:d5:73:44:68:
24:c7:fb:b2:f9:7d:31:ac:98:d4:63:bb:43:ed:06:
9e:8a:d8:67:37:db:1e:bf:f1:0a:45:b4:2b:eb:6c:
f7:77:56:d8:de:18:02:b9:6f:93:93:83:30:ac:1b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.28.0/24
IPv6:
2404:2780::/32
Signature Algorithm: sha256WithRSAEncryption
44:59:4e:d5:0e:29:18:a2:fb:ee:8e:bf:61:7e:22:d3:4d:be:
26:34:a1:74:f9:c4:04:a1:83:65:6d:ac:82:4e:9d:14:f5:0b:
58:47:a7:31:ed:e8:fb:32:ca:8c:8e:0b:c4:29:4e:4f:36:e3:
7b:28:d2:20:b8:78:c1:75:d1:47:8f:a2:36:b6:63:c8:a3:35:
22:6f:5b:82:40:56:39:6f:47:73:d2:ae:9c:25:81:62:52:31:
c1:9f:37:14:ee:98:93:8c:e4:90:6b:62:91:9e:26:53:58:fe:
95:74:cb:5a:65:d2:b1:aa:a1:17:80:f5:dd:11:5f:41:85:e7:
12:b1:42:c5:28:bb:3e:e1:c9:eb:c9:8a:3a:b4:e1:e7:d6:c1:
0e:b9:bc:08:b6:10:b6:2c:21:0e:70:00:e2:fa:90:53:9c:2e:
4b:f2:a4:28:e9:3e:1c:7c:11:1b:1e:43:59:72:1b:67:b2:5f:
10:02:f4:26:8d:31:7f:da:f0:1d:e1:9f:88:73:6c:ac:7b:9b:
e4:df:de:4a:50:0d:56:66:f7:5a:65:62:40:e3:0c:b3:b6:63:
c5:75:42:13:fb:a8:5e:92:da:4e:04:c6:c5:ae:03:6b:d9:25:
40:df:be:ff:4c:9f:eb:a6:fa:13:19:33:b0:6b:29:53:f1:ec:
92:2a:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:26 2025 by rpki-client