Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer (raw, json)
Hash identifier: 3YroB91gDb04bvy3ZzbKvsCVR5tINY9W5eBjPbcPv4E=
Subject key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02602F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 28 Aug 2025 02:27:06 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 45237
IP: 202.170.64.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155695 (0x2602f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 28 02:27:06 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:59:a6:b9:f3:bd:2f:0f:be:00:64:5d:d2:
69:4a:21:63:68:d8:4f:b2:38:61:f1:f5:ed:17:de:
8e:f7:55:ef:d3:9c:c6:29:7c:a1:59:59:0b:cb:24:
dc:a3:53:3d:e7:31:13:e6:38:47:6f:33:c0:ca:97:
63:20:51:7f:2c:63:93:d5:b2:e3:4f:c1:36:7e:dd:
41:e8:f2:5d:e2:1b:0e:96:ae:b2:8f:ee:a9:43:d6:
19:3f:8e:dc:9c:30:47:31:37:e0:76:a4:52:eb:74:
ff:17:3c:10:ba:fb:11:58:68:a6:40:64:89:14:74:
2a:c4:08:66:3d:9d:ef:a3:9e:00:66:ca:21:0a:6f:
74:6b:26:64:f5:ef:7a:47:79:1c:89:0c:b7:43:a0:
2a:c3:d4:b5:a9:c7:88:ab:1f:a0:2f:21:02:72:61:
7f:16:f5:aa:2b:05:d1:f0:04:a7:2d:b8:84:92:1f:
f2:6b:57:c5:59:8e:ab:f2:50:62:6a:5f:71:2f:0c:
52:f2:78:5a:58:2a:ed:c8:aa:39:21:b4:fb:1d:b2:
c7:91:92:30:46:06:9e:bb:39:33:59:86:d2:f8:ed:
cb:56:33:89:b8:38:1b:fb:6c:fd:d6:4c:a2:c5:de:
81:7d:dd:2d:63:02:33:0b:fe:62:98:3b:a2:2a:d8:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45237
sbgp-ipAddrBlock: critical
IPv4:
202.170.64.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:b3:ed:13:34:fd:96:9c:3e:25:14:f6:3b:b1:16:bf:0c:d1:
9e:fa:2b:0d:4c:01:41:9e:50:df:59:7a:e4:78:78:b9:c7:cc:
3e:44:31:43:71:22:34:b3:a3:76:2b:43:a3:d1:b5:77:44:c9:
d0:7f:9b:a5:0b:b4:42:99:57:5b:0f:88:e3:a3:3b:26:12:08:
2f:80:cb:83:dd:52:0f:38:71:ee:0f:05:b6:e9:8f:9c:b1:e6:
b8:3e:cb:b3:52:9e:84:d1:32:6b:4b:2e:c5:29:08:f8:f2:a4:
d3:f1:c1:61:01:9f:ba:6e:6f:b0:48:7d:21:17:ad:5c:a6:b5:
03:4f:e4:ed:99:7d:aa:11:c3:65:99:71:82:4e:3d:95:13:d4:
a9:0e:87:9e:ec:08:57:25:fd:a7:09:06:33:9f:45:a5:a1:33:
a9:7d:b7:90:5a:e1:0c:20:4d:d4:3f:33:39:7b:14:43:40:cc:
fe:f9:f8:8e:6f:71:5d:f1:6f:3d:47:42:3a:c1:ff:3b:35:b3:
87:0e:9a:c8:f2:5d:2b:b7:a9:5e:18:cc:39:8f:68:a6:81:74:
3a:58:fd:43:ae:2d:86:b6:92:e9:b7:d3:bb:c8:26:2d:a0:6e:
09:68:3b:85:df:76:c9:91:d5:b4:cb:b9:99:03:03:bb:36:7f:
f1:7c:aa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:21 2025 by rpki-client