Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
File: kSlbu3W_quuVMbObNux1Id3jDWM.cer (raw, json)
Hash identifier: 1Z7mQdh2ponaU/fPbd2VbfloP6kKOgzVgmcJUcprE28=
Subject key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026B50
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Oct 2025 13:12:16 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 139601
IP: 103.96.80.0/22
IP: 103.131.130.0/23
IP: 103.141.235.0/24
IP: 103.142.167.0/24
IP: 103.144.51.0/24
IP: 103.199.98.0/23
IP: 2401:3a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158544 (0x26b50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 8 13:12:16 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:e9:5d:17:4a:06:4e:5f:a2:6f:1c:54:8c:
f7:97:d3:66:ab:5a:c1:b4:61:30:32:e0:e0:46:31:
6d:0a:bf:e7:ce:4d:d2:46:bd:b1:95:9d:4f:4c:4d:
47:29:93:be:4c:8e:93:68:10:24:76:16:21:cd:c9:
d3:b6:d1:4f:70:3c:6b:15:fe:98:7c:62:b5:f6:e3:
64:4e:41:3e:5c:5b:f9:db:33:b1:6e:8f:2d:be:e4:
8a:3d:c6:1d:ce:3d:52:1c:de:7e:b8:c4:9a:cc:d4:
ff:48:34:bf:31:c3:26:9c:73:e6:69:cc:22:48:cf:
fc:77:35:e5:a1:d2:77:31:c2:fa:4d:47:98:5e:f5:
d4:4d:20:51:82:b8:a8:95:ee:2c:2b:87:01:79:4e:
81:7b:ab:81:08:31:ae:ab:1e:6d:59:07:62:42:f0:
5e:d1:f2:91:2f:fd:36:77:c9:c4:03:a7:9a:88:56:
8b:4b:05:1d:08:37:50:aa:24:b6:73:97:d5:54:23:
c5:48:b0:08:ff:51:d4:2d:3b:d2:91:2a:56:21:09:
27:65:38:8b:b5:ed:cd:06:21:50:ba:a0:ab:56:b0:
58:84:77:9f:cf:f3:f6:0e:72:86:76:2b:6c:bb:5e:
6f:64:3e:2b:0f:ad:f6:01:e6:e3:14:ae:63:67:c8:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139601
sbgp-ipAddrBlock: critical
IPv4:
103.96.80.0/22
103.131.130.0/23
103.141.235.0/24
103.142.167.0/24
103.144.51.0/24
103.199.98.0/23
IPv6:
2401:3a60::/32
Signature Algorithm: sha256WithRSAEncryption
bb:e3:92:53:99:f5:67:d7:cb:5d:f3:df:ca:0e:2b:72:7f:26:
5a:de:74:a8:55:35:59:9a:57:d6:65:10:a8:db:c3:e1:e3:13:
9c:19:5f:19:b3:64:df:1e:70:34:93:13:e3:22:d7:3e:e2:29:
60:28:1f:7e:29:ce:51:92:d5:19:d4:59:1b:ea:94:54:a6:bf:
f2:cf:e7:e6:48:95:ca:02:97:a1:6c:2d:4b:c1:24:25:e0:1f:
ac:46:e1:e1:38:87:c2:df:16:74:d5:e2:d2:27:80:cf:07:0f:
07:eb:e5:e9:23:20:27:da:4d:29:e0:2a:3e:27:0e:41:78:83:
5c:58:c6:13:69:23:08:f0:ca:5d:6d:84:70:9c:49:38:71:5b:
8f:b0:b7:6b:9e:dc:8a:ea:81:71:53:8a:56:a3:8c:c2:7f:2e:
ff:d3:41:04:a8:1e:d6:9b:b8:cb:58:aa:42:67:59:ce:62:d8:
bd:01:b7:34:c4:86:8a:04:1c:4d:87:e7:0f:3e:a9:b0:37:79:
88:95:54:c3:a4:f1:74:46:cd:33:52:1e:72:ae:f9:a5:53:79:
e3:54:a9:5c:26:02:02:a5:62:f3:9b:80:be:ec:8d:0e:81:3c:
01:4d:46:ce:21:05:10:61:0c:10:4e:6b:ef:be:49:f1:56:4b:
ed:3c:31:dc
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIDAmtQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAwODEzMTIxNloXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5
QjM2RUM3NTIxRERFMzBENjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO2+ldF0oGTl+ibxxUjPeX02arWsG0YTAy4OBGMW0Kv+fOTdJGvbGVnU9MTUcp
k75MjpNoECR2FiHNydO20U9wPGsV/ph8YrX242ROQT5cW/nbM7Fujy2+5Io9xh3O
PVIc3n64xJrM1P9INL8xwyacc+ZpzCJIz/x3NeWh0ncxwvpNR5he9dRNIFGCuKiV
7iwrhwF5ToF7q4EIMa6rHm1ZB2JC8F7R8pEv/TZ3ycQDp5qIVotLBR0IN1CqJLZz
l9VUI8VIsAj/UdQtO9KRKlYhCSdlOIu17c0GIVC6oKtWsFiEd5/P8/YOcoZ2K2y7
Xm9kPisPrfYB5uMUrmNnyJkzAgMBAAGjggM8MIIDODAdBgNVHQ4EFgQUkSlbu3W/
quuVMbObNux1Id3jDWMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFEOUIyLzBBNkYzQjQyOTE1NTExRUVBNEMwRjY2OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExRDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNX
X3F1dVZNYk9iTnV4MUlkM2pEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiFRMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCZ2BQAwQBZ4OC
AwQAZ43rAwQAZ46nAwQAZ5AzAwQBZ8diMA0EAgACMAcDBQAkATpgMA0GCSqGSIb3
DQEBCwUAA4IBAQC745JTmfVn18td89/KDityfyZa3nSoVTVZmlfWZRCo28Ph4xOc
GV8Zs2TfHnA0kxPjItc+4ilgKB9+Kc5RktUZ1Fkb6pRUpr/yz+fmSJXKApehbC1L
wSQl4B+sRuHhOIfC3xZ01eLSJ4DPBw8H6+XpIyAn2k0p4Co+Jw5BeINcWMYTaSMI
8MpdbYRwnEk4cVuPsLdrntyK6oFxU4pWo4zCfy7/00EEqB7Wm7jLWKpCZ1nOYti9
Abc0xIaKBBxNh+cPPqmwN3mIlVTDpPF0Rs0zUh5yrvmlU3njVKlcJgICpWLzm4C+
7I0OgTwBTUbOIQUQYQwQTmvvvknxVkvtPDHc
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:14:18 2025 by rpki-client