Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
File: IAg9TfqETFcnVYxMdW2yDfgHzYE.cer (raw, json)
Hash identifier: l4RYHQZnUhM/1BYPjnfy4I4b/5Kt8+gsdCkj2ycYMoU=
Subject key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025448
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Jul 2025 15:45:58 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 17887
AS: 45667
AS: 58430
AS: 64045
AS: 132842
AS: 139010
IP: 43.247.56.0/22
IP: 103.11.12.0/22
IP: 103.106.8.0/22
IP: 103.213.204.0/22
IP: 202.60.192.0/20
IP: 203.159.72.0/22
IP: 203.159.96.0/19
IP: 2405:6d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 12:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152648 (0x25448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 8 15:45:58 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:ef:15:a3:c1:d7:41:9b:13:54:85:08:c2:
e8:eb:43:70:7a:ff:c3:d7:95:23:37:1c:9e:69:0c:
60:2f:5a:da:ba:af:ac:30:73:cf:fa:84:db:af:0e:
ca:f7:31:fc:13:a8:d4:aa:ab:84:b9:c4:93:a9:51:
5c:7a:42:41:4b:d5:ae:61:83:7b:8b:31:0c:45:6f:
63:0d:71:09:25:89:0e:cc:cc:78:85:70:69:f9:69:
ec:d9:02:ee:b8:24:b2:f7:51:15:dc:ba:ac:11:05:
45:b2:d2:00:63:9a:36:4d:43:92:c2:6a:7b:47:76:
86:9f:80:f4:9c:84:f3:b6:ce:72:85:76:b9:3a:c6:
73:77:12:fc:b2:dc:91:2c:97:62:ba:8d:ba:1c:ca:
5e:84:ec:d2:a8:95:9c:ff:a3:dd:0e:75:8d:92:7b:
2f:e0:bd:07:8a:02:12:0c:fd:49:3f:c9:4f:a1:c2:
ae:80:e9:98:1f:4b:a0:01:5a:9b:4f:6f:bb:3c:4d:
a3:be:0a:6e:1a:a6:3f:11:29:58:14:15:c6:57:fc:
5d:89:d1:d5:c1:0b:e3:62:d7:a4:38:f1:1d:ec:6a:
4e:2d:97:be:f7:4b:b3:0c:4e:d7:8f:6b:87:26:23:
bf:55:fe:cd:41:0c:aa:62:dc:03:c1:3f:61:59:d1:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17887
45667
58430
64045
132842
139010
sbgp-ipAddrBlock: critical
IPv4:
43.247.56.0/22
103.11.12.0/22
103.106.8.0/22
103.213.204.0/22
202.60.192.0/20
203.159.72.0/22
203.159.96.0/19
IPv6:
2405:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
ce:0b:36:ca:29:28:75:5c:7d:e7:86:1f:f4:78:23:8f:a3:bc:
c9:31:ac:bb:76:19:61:d4:cb:af:48:84:57:f7:3c:ca:a0:e2:
ad:88:61:a5:aa:53:30:04:2f:5e:45:89:36:9b:e7:13:d6:b6:
16:83:6d:cc:a4:17:fc:42:01:56:b0:91:0f:2c:ee:10:32:00:
87:7d:5c:c1:f4:2e:ce:a6:cd:3a:9c:05:44:f8:e5:f2:de:26:
35:7d:3d:47:17:73:02:bb:48:57:fd:dd:3f:e6:0e:12:66:d3:
15:5e:b6:dd:34:07:f3:10:58:d9:03:05:f9:ad:45:a1:bc:08:
2b:80:b3:15:25:e4:04:70:c7:94:5a:c8:6e:b2:88:a4:c2:73:
39:35:c4:29:88:1c:48:13:d1:e5:ae:37:40:f4:71:2e:aa:83:
fe:a8:c0:45:0e:19:2a:3e:56:0c:91:ee:47:a4:52:86:73:e5:
9f:fb:60:86:40:04:4f:b2:51:12:25:83:39:9d:bf:f0:6f:70:
ee:4a:f1:71:90:b9:9d:a9:49:1c:dc:fd:b3:23:5a:54:57:ee:
4c:9f:9f:fd:1b:b4:9f:09:35:d4:f9:d1:1d:2d:99:dc:14:7b:
47:41:91:d6:cf:b6:3d:83:8b:5b:ba:c1:33:b8:a2:c5:66:ad:
07:aa:8b:ff
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIDAlRIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcwODE1NDU1OFoXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0
Qzc1NkRCMjBERjgwN0NEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQzu8Vo8HXQZsTVIUIwujrQ3B6/8PXlSM3HJ5pDGAvWtq6r6wwc8/6hNuvDsr3
MfwTqNSqq4S5xJOpUVx6QkFL1a5hg3uLMQxFb2MNcQkliQ7MzHiFcGn5aezZAu64
JLL3URXcuqwRBUWy0gBjmjZNQ5LCantHdoafgPSchPO2znKFdrk6xnN3Evyy3JEs
l2K6jbocyl6E7NKolZz/o90OdY2Sey/gvQeKAhIM/Uk/yU+hwq6A6ZgfS6ABWptP
b7s8TaO+Cm4apj8RKVgUFcZX/F2J0dXBC+Ni16Q48R3sak4tl773S7MMTtePa4cm
I79V/s1BDKpi3APBP2FZ0S1XAgMBAAGjggNaMIIDVjAdBgNVHQ4EFgQUIAg9TfqE
TFcnVYxMdW2yDfgHzYEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVBRTYwL0YxOTk2NzEyQzdDRjExRTRCMTNCRTEyMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZx
RVRGY25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQgBAf8EIzAh
oB8wHQICRd8CAwCyYwIDAOQ+AgMA+i0CAwIG6gIDAh8CMFIGCCsGAQUFBwEHAQH/
BEMwQTAwBAIAATAqAwQCK/c4AwQCZwsMAwQCZ2oIAwQCZ9XMAwQEyjzAAwQCy59I
AwQFy59gMA0EAgACMAcDBQAkBW0AMA0GCSqGSIb3DQEBCwUAA4IBAQDOCzbKKSh1
XH3nhh/0eCOPo7zJMay7dhlh1MuvSIRX9zzKoOKtiGGlqlMwBC9eRYk2m+cT1rYW
g23MpBf8QgFWsJEPLO4QMgCHfVzB9C7Ops06nAVE+OXy3iY1fT1HF3MCu0hX/d0/
5g4SZtMVXrbdNAfzEFjZAwX5rUWhvAgrgLMVJeQEcMeUWshusoikwnM5NcQpiBxI
E9HlrjdA9HEuqoP+qMBFDhkqPlYMke5HpFKGc+Wf+2CGQARPslESJYM5nb/wb3Du
SvFxkLmdqUkc3P2zI1pUV+5Mn5/9G7SfCTXU+dEdLZncFHtHQZHWz7Y9g4tbusEz
uKLFZq0Hqov/
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:25:58 2025 by rpki-client