Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer (raw, json)
Hash identifier: PdPvX0U1Q/JHpo2b/p6dLTnRheGB5vJWgUcYEDL8nEM=
Subject key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024FE6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Jun 2025 09:01:14 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 9498
AS: 10239
AS: 23870
AS: 24560
AS: 45514
AS: 45609
IP: 27.123.64.0/18
IP: 58.84.56.0/23
IP: 59.144.0.0/15
IP: 61.95.128.0/17
IP: 61.246.0.0/16
IP: 61.247.224.0/19
IP: 101.2.0.0/17
IP: 103.7.108.0/22
IP: 103.16.104.0/22
IP: 103.56.85.0/24
IP: 103.110.38.0/24
IP: 103.116.28.0/22
IP: 103.210.40.0/22
IP: 103.239.233.0/24
IP: 103.251.28.0/22
IP: 122.160.0.0 -- 122.187.255.255
IP: 125.16.0.0/13
IP: 150.129.140.0/22
IP: 171.48.0.0/12
IP: 171.76.0.0/14
IP: 180.178.0.0/19
IP: 180.211.80.0/22
IP: 182.64.0.0/12
IP: 182.95.0.0/16
IP: 202.56.192.0/18
IP: 202.71.16.0/21
IP: 203.101.0.0/17
IP: 203.132.128.0/19
IP: 203.145.128.0/18
IP: 2404:a800::/32
IP: 2407:b900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151526 (0x24fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 24 09:01:14 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:21:47:ac:2c:95:e8:a1:d2:f2:5a:6e:86:
80:f2:28:c7:d5:3b:16:f5:1e:d5:97:0e:0a:cb:ee:
0a:1d:c3:4a:b0:37:7f:ed:7f:a6:5b:b8:22:26:fe:
d5:5e:de:93:11:46:d0:4e:b9:c2:51:4d:e2:4e:62:
08:85:78:ef:77:b6:70:dc:a6:7d:77:21:7e:52:db:
3f:4f:45:83:4a:c6:43:12:2e:e6:3d:92:1e:eb:89:
49:d4:ad:07:62:e4:44:f3:81:63:57:53:46:68:5c:
70:c9:fe:1d:77:30:41:aa:5e:a5:e4:02:99:07:7f:
3b:d0:ab:63:ea:b2:1b:4d:be:8f:a9:04:49:88:49:
fc:76:e8:4d:bf:73:9d:57:82:a8:79:2c:b5:70:4f:
49:7a:ff:4f:f9:e1:a3:ed:29:0e:59:88:c1:86:ad:
3f:d2:0d:43:29:f2:f5:55:05:74:dd:57:94:41:68:
44:0d:08:db:00:6e:46:4b:21:3c:9d:eb:6c:73:0e:
57:a4:da:e6:bc:bd:3f:57:3d:99:da:c6:03:ff:6b:
41:0d:f6:06:69:39:f2:cc:21:bc:2e:2c:c6:5f:f5:
d1:f8:f4:22:b2:25:17:ad:e7:76:a1:ea:10:21:59:
7a:42:9b:bd:ed:91:bc:63:fd:a4:a4:14:d1:31:89:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9498
10239
23870
24560
45514
45609
sbgp-ipAddrBlock: critical
IPv4:
27.123.64.0/18
58.84.56.0/23
59.144.0.0/15
61.95.128.0/17
61.246.0.0/16
61.247.224.0/19
101.2.0.0/17
103.7.108.0/22
103.16.104.0/22
103.56.85.0/24
103.110.38.0/24
103.116.28.0/22
103.210.40.0/22
103.239.233.0/24
103.251.28.0/22
122.160.0.0-122.187.255.255
125.16.0.0/13
150.129.140.0/22
171.48.0.0/12
171.76.0.0/14
180.178.0.0/19
180.211.80.0/22
182.64.0.0/12
182.95.0.0/16
202.56.192.0/18
202.71.16.0/21
203.101.0.0/17
203.132.128.0/19
203.145.128.0/18
IPv6:
2404:a800::/32
2407:b900::/32
Signature Algorithm: sha256WithRSAEncryption
d1:5e:61:16:21:95:93:f5:9f:a5:61:a5:d1:c2:c1:d4:51:c6:
50:7e:98:fd:38:2f:41:82:b9:a1:f8:4e:e1:87:ed:ca:46:3c:
c1:3b:3d:bb:40:d3:72:1f:70:b1:1f:e0:fd:df:f7:68:55:f5:
8b:1c:fe:b1:27:07:a8:30:48:d5:8a:29:38:85:fa:24:96:11:
dc:58:2a:58:5b:fd:2a:e9:81:04:2c:0f:bb:d6:ea:2d:e2:ff:
7e:84:8a:af:ad:ed:18:24:50:69:81:09:82:9c:13:86:b0:0c:
39:bc:c5:08:ee:4a:2a:91:62:29:7d:a3:a3:14:40:96:9f:c9:
d3:45:09:97:d1:c4:d3:2b:33:30:e0:cc:1a:6f:4b:c5:43:aa:
bf:c0:6f:33:b1:e8:f7:d8:67:95:fc:f0:6c:87:85:b4:80:24:
a4:3f:2a:8d:10:b5:db:eb:31:05:d2:44:52:76:56:6f:49:76:
6b:32:5f:0e:08:3a:0b:84:f6:8e:f4:6d:24:a6:8e:7d:28:ef:
df:56:ec:d5:cc:32:3c:ee:16:50:a9:99:01:c5:55:3b:48:16:
8a:0b:7a:71:4b:05:27:dc:55:bb:92:a5:d4:19:2e:22:cf:44:
3d:58:2d:7c:1b:b5:92:47:38:5b:64:5a:7b:8e:c6:1b:8f:92:
a6:15:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:09:48 2025 by rpki-client