Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
File: p6JnToSEYDkgd5o1LFWATlU2UBQ.cer (raw, json)
Hash identifier: E+osRx9OZAqXP7gkxMk/Q7E7H3ovPXFVtR+VIkBuTzg=
Subject key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02662F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Sep 2025 17:31:39 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 58983
IP: 45.119.160.0/22
IP: 103.240.176.0/22
IP: 2400:5880::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157231 (0x2662f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 18 17:31:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:15:c7:da:6c:7c:b9:83:bf:c0:9b:ae:f9:
7b:4b:81:71:42:19:f4:c2:be:7a:1d:f8:c9:17:4a:
eb:6d:eb:4a:d5:ad:98:0d:0b:24:d4:6a:e0:c9:19:
e7:0d:4a:fc:15:8c:56:e7:19:d8:f7:e0:a0:ec:c9:
28:50:97:bb:95:9f:3d:04:d4:26:03:f6:05:1c:9c:
59:de:52:b0:03:6a:2d:55:da:75:6c:ac:47:74:49:
bc:b6:0c:f2:aa:98:b3:1a:57:ee:2c:84:05:0f:fe:
9b:b6:74:a4:f9:90:35:18:22:aa:fb:f6:99:15:6f:
d3:68:14:79:47:8a:da:46:5f:e8:ff:6c:f2:e0:2d:
a0:06:5f:bd:b9:dc:41:d0:97:b9:bf:f1:b2:3f:3f:
82:d8:ec:e4:91:03:55:09:0f:25:7a:5d:62:8c:c4:
46:4e:c7:f5:bf:eb:94:68:47:a9:1a:c5:2f:07:08:
00:54:21:7f:6a:e0:ba:8a:35:a8:41:00:f5:65:ff:
f6:5e:96:0b:c7:ee:51:9b:cb:c6:29:ec:f0:33:ae:
77:65:91:43:65:2e:84:57:36:86:8e:bd:6a:53:f1:
26:71:61:b0:40:dd:0c:8e:05:cc:1e:16:ad:e5:10:
36:8e:49:12:36:18:22:c6:39:26:00:0a:51:eb:6f:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58983
sbgp-ipAddrBlock: critical
IPv4:
45.119.160.0/22
103.240.176.0/22
IPv6:
2400:5880::/32
Signature Algorithm: sha256WithRSAEncryption
0e:e7:b1:7c:a6:3a:61:3a:de:19:b6:ef:7d:d3:10:d7:26:92:
ab:3c:21:0c:b0:47:24:3b:25:21:59:0f:9f:c9:3c:39:ec:48:
1f:c3:ed:c1:be:47:dd:4b:7a:24:ea:c2:cd:37:73:1e:35:4c:
ec:09:3e:4e:9c:d4:6b:6a:c3:1b:0f:95:e6:43:5b:3f:82:3a:
14:88:7b:6d:8f:49:45:12:ec:bd:fd:c6:04:02:bf:32:35:d7:
84:d8:f7:7e:5e:ef:a4:99:e1:29:82:3f:fa:c0:ce:04:f4:e3:
9b:e3:6d:c0:84:7c:62:fd:f6:2b:a8:d9:a8:c9:d2:a0:d1:68:
b1:bc:0c:f4:2e:74:a1:1d:4a:dc:51:3f:1a:66:a0:09:45:66:
1a:6a:73:a2:00:67:4a:24:72:df:40:ef:38:26:eb:b1:3c:01:
20:b7:85:85:dd:a4:9e:41:bf:c4:51:f9:c5:32:a7:fe:ef:64:
b6:0b:3f:f1:e7:4e:d6:9c:14:4b:89:68:72:5e:1b:70:68:92:
45:3b:b5:0d:35:56:de:1e:77:06:f3:d1:5a:06:5a:1a:e3:d4:
16:cd:7d:4f:98:fd:89:59:99:75:72:5e:c1:17:ba:d2:97:ee:
f8:7f:79:99:9d:d6:52:c4:e2:d9:33:8b:4d:bf:66:f3:c4:3b:
f5:4b:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:14:12 2025 by rpki-client