Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
File: 4Loijq-YEvBn0v87-AaJVpjJOXc.cer (raw, json)
Hash identifier: Av8MglTTZH4MsB1UvpB+bLTz8Q2rTYkY3U8pdwGdmnQ=
Subject key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025611
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Jul 2025 14:42:03 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 38186
AS: 55331
AS: 153339
IP: 27.126.176.0/20
IP: 103.237.72.0/22
IP: 115.126.0.0/17
IP: 116.212.112.0/20
IP: 118.99.0.0/18
IP: 118.102.8.0/21
IP: 119.47.80.0/21
IP: 163.53.216.0/22
IP: 202.59.152.0/21
IP: 2404:ee00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 04:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153105 (0x25611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 14:42:03 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:52:5d:9f:de:4c:f2:58:cf:4b:83:ed:79:
51:b8:c2:a3:1f:45:e9:bc:f6:e1:e3:2d:d5:ff:8f:
be:bf:f0:2b:57:64:8a:8e:44:54:29:e8:59:ea:1f:
6a:3f:b3:96:90:40:83:55:da:1b:7f:90:58:f6:7f:
88:b4:66:5b:1b:cb:60:49:89:8f:d8:c5:f5:1d:5e:
90:a8:92:e7:1a:a2:5d:e8:b0:aa:b9:0a:53:13:01:
d5:3e:a6:0f:69:3f:f4:dd:57:b6:98:d0:c8:36:2e:
ef:c8:fd:66:ad:8f:26:b0:f8:31:1a:e9:bb:ca:cc:
b1:21:ae:8d:ae:ae:b9:66:18:69:46:fe:ab:1d:c2:
40:bb:f8:a5:38:26:a0:25:56:13:6d:bb:71:a6:e8:
ee:68:40:f6:54:08:1a:45:50:b1:99:5d:5a:c6:93:
17:58:c0:af:7a:2b:32:9b:34:41:88:76:25:bf:17:
6d:ee:22:f3:70:97:fd:30:34:db:b9:14:ea:16:bb:
74:f7:28:26:05:5a:bb:60:a4:fb:0a:36:c3:ae:aa:
7f:e7:20:4b:4c:67:ff:39:7b:54:2a:a8:67:f5:e7:
77:58:d9:52:2a:a8:4b:d3:af:9a:67:9f:5d:dc:39:
59:da:e8:2e:ee:74:c3:14:b0:28:e5:0d:f7:51:83:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38186
55331
153339
sbgp-ipAddrBlock: critical
IPv4:
27.126.176.0/20
103.237.72.0/22
115.126.0.0/17
116.212.112.0/20
118.99.0.0/18
118.102.8.0/21
119.47.80.0/21
163.53.216.0/22
202.59.152.0/21
IPv6:
2404:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
87:59:b1:39:25:0d:6b:b0:34:50:b9:b7:26:87:69:f5:5d:72:
3b:82:57:40:19:8d:84:02:19:ee:a3:15:f9:6c:65:dc:8b:4e:
ca:ba:06:a5:94:40:52:b3:de:59:e2:8e:45:12:68:50:c3:31:
5b:09:aa:0a:3f:86:5e:61:a0:dc:ab:ca:61:f6:fa:d9:20:e9:
df:3e:9f:74:3a:a0:29:e4:90:ff:1e:40:ed:9e:34:f2:57:3a:
b9:40:97:fb:2a:ad:36:b4:3c:f5:ed:09:e8:47:d8:23:ca:56:
39:91:a2:f6:68:96:25:56:28:75:96:59:59:b6:d2:0c:fc:25:
5a:59:91:bc:73:f6:7f:d8:e0:37:2d:22:21:f0:bc:df:71:55:
ba:49:9c:b5:ec:b6:e1:ce:86:ed:e9:9f:e7:a5:56:f7:d8:9e:
97:1d:b6:a6:99:7f:e0:09:3f:a2:41:aa:31:df:84:c5:cf:8e:
80:5a:af:5a:c1:5d:07:ae:b2:d8:74:4b:47:22:af:bf:c7:f7:
bf:61:27:ca:c7:e5:4d:b4:4e:14:f3:56:b4:13:5c:b5:4e:85:
17:ae:ef:66:fc:2c:04:cf:19:95:fb:57:ca:9d:45:8b:d4:39:
b0:6f:28:32:1a:00:38:ff:f8:a6:1a:33:55:b3:dc:d4:1f:fd:
e2:a7:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 08:59:14 2025 by rpki-client