Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer
File: v54NeIhwkRvVdMDs1KBcKQoJtf8.cer (raw, json)
Hash identifier: 3IXYbA1/FcAR/Ut9MZl/rV1EXYqF56WzL9BAwi4E5Ls=
Subject key identifier: BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026574
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Sep 2025 08:01:59 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 136799
IP: 103.35.112.0/24
IP: 103.117.104.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 22:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157044 (0x26574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 15 08:01:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91E2391, serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:f3:0e:4f:a0:03:92:f6:f3:39:0c:f7:fb:
19:c9:65:0f:fe:36:b5:46:a3:01:48:d3:05:c7:b6:
35:5e:b3:e1:9e:55:42:4f:03:dc:aa:51:34:0d:f7:
b5:b6:51:4d:78:2b:54:8e:d4:99:e3:e3:f3:0d:46:
9f:f1:68:fc:ed:96:7e:24:54:7d:00:d1:69:ad:8e:
21:1f:40:05:4d:1e:e2:21:1d:39:c1:41:26:6e:0f:
9a:6f:ef:16:07:bc:40:6f:b1:a9:a3:39:45:8c:b1:
fa:b7:91:82:88:66:10:6c:b1:e9:92:b9:bd:be:a1:
22:55:fa:eb:58:76:c6:df:62:a0:4c:9d:03:c1:d0:
26:59:9b:46:6f:56:e4:c0:f1:fd:aa:a7:89:91:10:
b9:94:08:f2:2b:ab:6a:51:68:e5:e6:f6:c2:f9:84:
35:5c:a0:81:fe:e1:b0:fc:6e:3e:d7:5c:16:79:a1:
49:0e:a2:2b:58:bd:a6:de:3b:83:f5:6b:16:64:1f:
8d:bb:0f:cc:24:d3:df:ad:df:96:f9:ea:e3:30:53:
8f:6a:d1:35:3d:a4:41:6a:0f:cd:10:1c:20:9e:42:
b0:95:df:73:75:76:a8:d2:3a:56:39:ab:73:5a:05:
cf:16:c6:f9:97:ac:b8:56:1d:d9:28:3e:8c:f4:f6:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136799
sbgp-ipAddrBlock: critical
IPv4:
103.35.112.0/24
103.117.104.0/23
Signature Algorithm: sha256WithRSAEncryption
19:31:94:07:91:14:08:3e:c5:e9:de:65:da:12:48:68:4a:de:
1b:43:18:52:fc:6b:c7:fc:02:1e:0e:f9:98:70:2d:93:66:e0:
fc:cc:54:4b:41:f3:36:62:d7:c6:7d:f1:75:60:56:5b:10:b2:
a5:40:3e:47:c6:03:d6:81:c6:eb:90:c5:4f:7f:13:00:05:a9:
1f:0d:f4:b6:3c:9c:bc:ca:ba:a7:ba:de:96:75:fe:8c:d7:1e:
44:1e:2e:2b:0f:4e:d7:3e:25:18:e2:9e:7b:9a:94:db:0b:1a:
39:2c:e5:5f:9b:12:fc:52:70:51:e3:e3:dc:e8:7c:b3:e9:6f:
73:cf:4c:58:a4:ff:fe:36:77:8e:63:a4:ac:73:4a:bd:4d:08:
b9:b6:1d:70:aa:32:46:31:4a:4f:3f:a4:8e:4e:2f:96:5f:b1:
d8:2f:bb:4c:d4:66:d5:ec:4e:df:61:74:23:f1:6b:a8:d4:c3:
aa:48:21:e4:79:a1:6f:c1:cd:80:f3:b8:6f:56:71:35:c3:18:
17:48:9e:b0:6f:b1:29:28:43:40:3b:bb:f0:ac:b6:6e:da:62:
91:ab:77:e6:41:aa:e3:09:70:0e:4c:3a:c7:78:8c:7f:a3:b3:
ad:03:d4:04:37:69:1d:09:bf:7c:96:b1:b5:24:13:88:c4:0f:
5e:7e:cf:6c
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAmV0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkxNTA4MDE1OVoXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTIzOTExMTAvBgNVBAUTKEJGOUUwRDc4ODg3MDkxMUJENTc0QzBF
Q0Q0QTA1QzI5MEEwOUI1RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7bvMOT6ADkvbzOQz3+xnJZQ/+NrVGowFI0wXHtjVes+GeVUJPA9yqUTQN97W2
UU14K1SO1Jnj4/MNRp/xaPztln4kVH0A0WmtjiEfQAVNHuIhHTnBQSZuD5pv7xYH
vEBvsamjOUWMsfq3kYKIZhBssemSub2+oSJV+utYdsbfYqBMnQPB0CZZm0ZvVuTA
8f2qp4mRELmUCPIrq2pRaOXm9sL5hDVcoIH+4bD8bj7XXBZ5oUkOoitYvabeO4P1
axZkH427D8wk09+t35b56uMwU49q0TU9pEFqD80QHCCeQrCV33N1dqjSOlY5q3Na
Bc8WxvmXrLhWHdkoPoz09gybAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUv54NeIhw
kRvVdMDs1KBcKQoJtf8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUyMzkxLzYwNzU1MkQ2NDFDRDExRjA5REY2RjM1RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMjM5MS82MDc1NTJENjQxQ0QxMUYwOURGNkYzNUVDNEY5QUUwMi92NTROZUlo
d2tSdlZkTURzMUtCY0tRb0p0ZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhZfMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZyNwAwQBZ3Vo
MA0GCSqGSIb3DQEBCwUAA4IBAQAZMZQHkRQIPsXp3mXaEkhoSt4bQxhS/GvH/AIe
DvmYcC2TZuD8zFRLQfM2YtfGffF1YFZbELKlQD5HxgPWgcbrkMVPfxMABakfDfS2
PJy8yrqnut6Wdf6M1x5EHi4rD07XPiUY4p57mpTbCxo5LOVfmxL8UnBR4+Pc6Hyz
6W9zz0xYpP/+NneOY6Ssc0q9TQi5th1wqjJGMUpPP6SOTi+WX7HYL7tM1GbV7E7f
YXQj8Wuo1MOqSCHkeaFvwc2A87hvVnE1wxgXSJ6wb7EpKENAO7vwrLZu2mKRq3fm
QarjCXAOTDrHeIx/o7OtA9QEN2kdCb98lrG1JBOIxA9efs9s
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:12 2025 by rpki-client