Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
File: pih1evOkgoa9_fg6tOZOJNguDGs.cer (raw, json)
Hash identifier: dJ0VlTNRNS9bgjk3gp4hEYRGwGTJE3XEV2CYm8Gusms=
Subject key identifier: A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02673E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 Sep 2025 10:35:16 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 23726
AS: 132921
IP: 103.74.224.0/24
IP: 103.149.148.0/24
IP: 2001:ded:8000::/48
IP: 2001:df6:6f80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157502 (0x2673e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 24 10:35:16 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91C4FBE, serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:bd:7e:cd:cf:32:8d:d1:9c:22:42:52:52:
37:1e:28:6f:fd:2b:24:0c:77:44:04:9b:43:fb:c9:
65:d5:92:2e:31:b9:76:c8:37:fa:81:bc:3f:b7:6c:
ba:70:0b:d5:9f:9e:97:51:82:76:35:cf:3d:0e:0f:
a7:ad:e6:55:64:8d:cb:58:90:a0:74:8d:4b:26:80:
69:be:3f:f8:b2:5d:61:d1:ac:11:ee:84:99:8b:53:
5e:f6:68:d1:77:d4:4b:a2:64:1d:00:8f:be:03:1a:
50:09:f0:fb:89:b8:3f:fb:51:37:0e:03:f0:76:39:
3e:30:6c:c1:0f:1a:05:df:d9:b4:71:4f:7b:9c:8a:
9b:e7:5d:a7:8c:6a:4e:92:f8:7c:c5:4e:06:db:d8:
83:68:45:88:49:70:c3:bd:75:03:01:db:b3:3e:51:
ae:cc:7e:ee:d8:56:24:38:6c:90:0f:29:b4:b8:62:
c1:5f:30:b2:56:ef:e7:2b:5a:71:f4:39:02:d3:e0:
37:8e:37:3a:bd:c5:59:40:68:57:c7:27:43:45:69:
7c:5b:8b:fa:21:f9:0f:40:75:aa:2f:7f:76:14:3a:
4c:49:a3:6d:18:79:47:79:14:c4:09:d5:a2:05:d9:
6a:50:2b:2f:15:7d:77:b5:23:d6:aa:ef:09:c8:28:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23726
132921
sbgp-ipAddrBlock: critical
IPv4:
103.74.224.0/24
103.149.148.0/24
IPv6:
2001:ded:8000::/48
2001:df6:6f80::/48
Signature Algorithm: sha256WithRSAEncryption
1e:c5:89:95:e0:be:0d:08:7d:75:94:18:b4:37:fb:54:ff:be:
f8:95:c6:c7:23:9d:0b:2e:4b:39:6d:a2:a8:12:4f:60:2c:04:
c7:2b:9a:2f:70:2f:0f:ee:b8:20:66:38:4e:a1:db:48:0a:71:
a2:2e:97:34:db:39:eb:2f:72:34:91:b9:42:1a:cb:b4:15:29:
08:46:49:52:c2:b5:6a:3b:1f:88:95:ab:79:76:09:0b:39:03:
f8:a7:8b:71:b3:92:de:4d:9a:6f:19:4a:74:8f:6e:72:83:67:
d2:6b:71:dd:0f:c4:d3:86:96:60:0b:3c:03:ea:1d:0a:df:2f:
89:20:91:85:19:4a:f5:84:ce:ba:e9:29:84:c2:95:1b:71:d2:
58:69:c0:89:dd:34:c7:65:2b:88:7a:e1:ad:9f:e1:01:cf:b2:
1d:43:53:f3:29:35:cf:3e:e0:89:06:a2:77:65:c6:78:ee:45:
12:5d:f1:89:f6:e6:1c:6f:77:9e:65:ad:a8:9a:57:5a:a6:1b:
d4:35:6d:74:9f:7c:68:48:81:f2:0c:6d:b7:ea:f0:2f:d6:b5:
f8:f5:8b:12:e9:ac:18:74:9c:24:74:b0:c4:a5:a8:b5:61:60:
51:55:bb:a8:35:fe:af:b9:85:20:27:9b:fb:0f:21:0d:e7:63:
7e:48:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:20 2025 by rpki-client