Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
File: uu94943Hy_m3MScKqxBp9eNDPLs.cer (raw, json)
Hash identifier: FB8BXnkWeRWprkVQ1Yc4hcx7JWhzmXOiHbSq9fvI7Ck=
Subject key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026BF8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Oct 2025 22:25:40 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 133545
IP: 103.75.240.0/22
IP: 116.206.52.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158712 (0x26bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 22:25:40 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:57:2f:99:b2:ec:5b:20:54:38:b4:1e:64:
1a:a0:d3:3e:ba:0a:4b:33:1f:c6:a5:00:15:b9:ac:
66:85:30:4d:fa:4a:da:fb:78:7b:15:05:86:07:7b:
a7:78:2d:17:6e:1a:be:04:74:3c:b2:0a:98:73:63:
a8:03:35:58:bf:39:92:db:d5:55:e3:aa:61:c2:02:
da:c2:d5:ed:5d:f9:97:28:8e:d3:b1:c8:44:7b:67:
23:1e:df:cb:e6:9a:2f:64:05:e8:02:25:d0:a8:63:
51:d9:4f:f2:1d:96:5e:3b:71:a4:94:87:46:fc:51:
8d:6b:31:ad:ab:c6:33:d1:10:5f:6d:90:19:a4:7b:
ae:64:69:df:7f:29:97:3d:9b:ed:80:24:44:bb:1b:
bc:90:fe:49:46:6c:7a:35:93:57:9c:a0:e1:93:83:
8a:bb:f5:80:5e:fd:1a:d3:0a:2c:b9:b5:24:d1:80:
36:e4:bd:a6:c6:00:51:bb:dc:8e:c5:54:91:d0:05:
fd:35:21:43:72:93:9c:1f:70:53:70:66:f4:de:c7:
c6:05:06:df:3e:06:ee:a5:d2:4d:0a:b8:f3:91:21:
fb:d1:dc:63:41:9d:af:88:c4:a7:bb:6a:40:d3:51:
44:fa:b7:95:c6:dc:46:dd:b0:e4:d0:88:1a:7d:08:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133545
sbgp-ipAddrBlock: critical
IPv4:
103.75.240.0/22
116.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:6c:37:57:81:25:11:f3:08:ee:87:ff:e9:3d:1f:c8:dd:75:
fb:85:75:09:52:bf:c8:b0:46:8a:2e:a0:5c:f9:5a:8d:c8:e7:
6f:b9:fc:41:f7:4c:c4:ad:69:45:af:f4:ea:d9:57:7e:5a:3b:
0c:36:32:a0:a3:fa:b4:d9:61:33:97:40:91:a7:6f:ba:38:09:
b4:3e:de:35:86:36:45:b2:b4:66:5a:d6:ee:de:00:fc:5f:5e:
c1:c5:24:1c:4d:d0:41:cf:4b:6a:bf:45:bc:37:11:8b:ed:82:
4f:9c:e9:28:c1:83:17:56:c1:05:b3:b7:53:a6:ff:ad:4b:b1:
72:aa:d9:42:d4:bd:6d:98:f8:4c:a4:f7:4f:e6:af:bd:e7:96:
69:0a:4b:7d:62:24:f2:a2:90:63:f7:8b:34:92:d2:95:b3:bb:
f6:a1:1c:a5:75:07:a7:5a:f8:b7:65:ee:15:2f:00:03:c9:ad:
19:05:88:c5:46:db:05:80:d5:97:b2:b1:6e:1a:d4:06:2b:d3:
9a:b6:25:be:b4:b0:29:a4:ee:60:2c:48:6c:a3:94:a7:88:f7:
3c:7f:ad:aa:7f:63:8c:77:fe:49:95:42:d0:f5:8f:78:6b:e7:
e8:9c:08:c4:3d:4d:a5:f0:d4:3f:ef:51:83:2b:20:37:b2:bf:
fa:ff:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:51 2025 by rpki-client