Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
File: tU4IRltUXO7x4uEAl3XZG6QStj0.cer (raw, json)
Hash identifier: 5WItws8ug570aP32T5Xm0jBEJic9jzAzSliKNihhX1o=
Subject key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026D9E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Oct 2025 23:50:23 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 45589
IP: 163.8.0.0/16
IP: 2405:bc00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159134 (0x26d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 23:50:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1b:22:cd:6a:7a:08:a4:d1:f2:6b:b3:bc:cc:
17:d1:4d:ad:42:d0:33:86:fd:a1:f2:e0:01:6c:68:
f6:89:57:9a:3f:db:38:83:0f:7f:6b:61:57:6b:0c:
d1:eb:52:13:86:35:76:1e:de:12:90:78:5c:0a:99:
ad:b6:21:99:cf:81:d4:2b:14:12:81:ba:21:04:d3:
8f:5a:66:8a:13:33:cc:a4:11:8b:f3:9e:c7:ce:23:
73:88:57:fe:29:86:11:5f:06:ab:62:a8:2f:58:73:
bd:1a:5a:a0:f9:3f:58:e1:01:de:eb:e0:26:eb:c5:
2c:4c:ba:04:bf:4b:d9:57:b3:fd:bd:aa:d5:56:e2:
13:b0:25:44:68:0b:41:fb:e5:d9:35:7d:2f:ea:30:
e8:63:71:4b:61:a1:dc:1a:b1:72:1c:37:d2:15:62:
ac:61:07:83:49:3f:f1:39:20:a1:1e:79:cf:7f:65:
61:37:91:d4:75:27:fa:9b:1b:47:e6:ff:18:03:5d:
36:97:02:78:d1:de:84:bf:60:53:8e:bf:51:a7:07:
31:4f:44:79:5b:27:f2:69:d5:b8:c9:6a:17:1e:85:
1f:42:54:7d:f6:09:b3:b3:88:cb:90:c9:bf:dc:8d:
6b:17:a0:e7:83:fd:31:88:2d:7c:c1:13:ac:7e:8e:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45589
sbgp-ipAddrBlock: critical
IPv4:
163.8.0.0/16
IPv6:
2405:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
18:44:ae:64:bd:e2:01:2f:06:22:c1:72:6e:ac:a3:70:ed:11:
12:88:fe:a4:89:c9:42:ab:e5:43:a8:87:3f:e8:1d:f7:53:fc:
5e:4f:9c:eb:75:5c:31:86:87:07:d1:ce:58:b6:b9:c7:b4:fd:
99:0e:6c:d8:69:4b:46:29:1c:6c:b3:c8:42:b6:33:95:f8:ea:
55:e0:87:b4:dc:fe:c6:09:25:07:c4:69:7f:07:a5:84:c1:c7:
5b:98:a5:02:e4:06:93:91:00:ee:71:04:2d:7b:1b:c5:6c:fc:
95:f6:b6:37:4b:15:b4:79:48:5a:8c:1d:74:ba:14:81:f8:97:
ee:d6:23:14:b3:04:17:5a:5b:2a:35:f4:bf:d7:40:b0:4c:87:
c1:0a:fb:99:23:9d:7d:03:2d:ca:21:fe:75:09:51:35:5b:58:
8a:1f:2f:62:39:d8:b2:7d:27:88:06:46:e0:3c:e5:fb:8a:fd:
ea:27:54:ba:b1:e6:f8:e9:44:cd:78:d7:08:71:6b:77:72:b1:
a0:ed:f4:53:a9:7d:6d:73:f1:a6:c3:75:8c:5f:06:0a:b5:1b:
18:3a:74:ef:d6:9d:6e:8e:fd:ab:62:10:92:cf:60:4c:87:bb:
27:a0:6f:0c:b1:22:df:da:83:bf:37:7f:11:75:a9:ce:cf:41:
88:2c:47:d8
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgIDAm2eMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAxNzIzNTAyM1oXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEw
MDk3NzVEOTFCQTQxMkI2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD0GyLNanoIpNHya7O8zBfRTa1C0DOG/aHy4AFsaPaJV5o/2ziDD39rYVdrDNHr
UhOGNXYe3hKQeFwKma22IZnPgdQrFBKBuiEE049aZooTM8ykEYvznsfOI3OIV/4p
hhFfBqtiqC9Yc70aWqD5P1jhAd7r4CbrxSxMugS/S9lXs/29qtVW4hOwJURoC0H7
5dk1fS/qMOhjcUthodwasXIcN9IVYqxhB4NJP/E5IKEeec9/ZWE3kdR1J/qbG0fm
/xgDXTaXAnjR3oS/YFOOv1GnBzFPRHlbJ/Jp1bjJahcehR9CVH32CbOziMuQyb/c
jWsXoOeD/TGILXzBE6x+jpd5AgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUtU4IRltU
XO7x4uEAl3XZG6QStj0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcyQjQ2LzA4ODcwMUI4QUJCNDExRjBBQkYyMDk0MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MkI0Ni8wODg3MDFCOEFCQjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0
VVhPN3g0dUVBbDNYWkc2UVN0ajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALIVMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAowgwDQQCAAIw
BwMFACQFvAAwDQYJKoZIhvcNAQELBQADggEBABhErmS94gEvBiLBcm6so3DtERKI
/qSJyUKr5UOohz/oHfdT/F5PnOt1XDGGhwfRzli2uce0/ZkObNhpS0YpHGyzyEK2
M5X46lXgh7Tc/sYJJQfEaX8HpYTBx1uYpQLkBpORAO5xBC17G8Vs/JX2tjdLFbR5
SFqMHXS6FIH4l+7WIxSzBBdaWyo19L/XQLBMh8EK+5kjnX0DLcoh/nUJUTVbWIof
L2I52LJ9J4gGRuA85fuK/eonVLqx5vjpRM141whxa3dysaDt9FOpfW1z8abDdYxf
Bgq1Gxg6dO/WnW6O/atiEJLPYEyHuyegbwyxIt/ag783fxF1qc7PQYgsR9g=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:19 2025 by rpki-client