Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
File: WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer (raw, json)
Hash identifier: 92u1UN1z8KONlZWjk1Kg7Bj1AoQvMqDHoP81rdkbOc0=
Subject key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025387
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Jul 2025 05:19:26 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 149857
IP: 103.189.4.0/23
IP: 2400:83e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 09:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152455 (0x25387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 4 05:19:26 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91E3B1D, serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:d0:ba:27:94:b5:76:07:46:54:38:04:7d:
09:bf:91:23:c9:44:ca:d3:b9:aa:0a:49:9c:d3:90:
bc:aa:2c:d3:a1:10:75:07:ab:fc:df:43:6c:00:b6:
29:05:0e:0d:f5:20:cb:ed:f3:99:b2:29:da:d4:9a:
40:1d:aa:76:ea:92:ee:83:7f:da:0d:a3:d2:97:1e:
6f:3f:1d:0b:31:f0:c1:c3:4b:4b:da:b8:12:b3:eb:
6b:9c:ec:ca:e5:8a:a9:72:f0:3a:a1:7a:e9:16:cc:
f5:3b:ca:64:ea:d6:17:93:c9:44:37:1f:63:97:ad:
63:50:ef:35:ca:a7:92:15:a0:08:61:c3:57:ef:3b:
52:fc:ec:bf:03:d3:23:ce:da:be:ea:43:3f:65:bc:
a9:b4:5f:f6:83:64:6d:2e:c7:37:d5:ed:36:20:12:
00:ca:8e:cf:90:56:13:03:44:ec:f4:4a:78:a2:62:
97:7c:ab:cd:d7:9a:52:d2:46:d0:7c:cb:a5:4e:13:
2a:89:e7:be:8a:d3:f5:04:7d:52:49:12:a7:ed:9e:
93:ee:40:c0:c8:1b:da:06:ec:5c:83:7f:b2:27:20:
99:2a:ac:b9:36:4f:f6:6a:26:78:d9:a3:56:30:93:
e6:8e:ad:29:87:de:6e:c0:1d:12:4f:c1:9b:b1:e8:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149857
sbgp-ipAddrBlock: critical
IPv4:
103.189.4.0/23
IPv6:
2400:83e0::/32
Signature Algorithm: sha256WithRSAEncryption
92:43:a0:f0:06:49:86:ec:8a:74:fd:b3:f0:52:5f:10:ca:1d:
95:b3:cb:37:1b:29:f1:bf:b8:8c:df:d6:a6:31:41:a7:8b:c0:
90:97:7c:72:f5:a9:b7:bc:40:07:33:74:a7:2e:0b:c0:66:d4:
2c:79:7f:1b:2c:6d:58:8b:dc:ff:15:f7:5e:5a:03:6a:45:ee:
33:3d:05:fd:ae:61:f3:3a:5f:10:a6:87:36:26:5c:6c:c7:00:
cc:f5:22:01:18:fa:63:ed:03:2b:8f:2a:1c:54:ba:a4:8f:82:
d1:14:1f:27:b4:3b:ac:4f:c6:7c:70:35:62:9a:06:d0:1e:b3:
8f:f0:1e:24:81:86:8d:69:3b:b6:bc:9d:ec:59:51:91:b7:4c:
bc:c8:ea:e8:94:16:ec:92:2f:40:0a:d6:cf:c8:70:4c:e5:4e:
1b:b3:c9:84:5c:d3:fe:ef:ac:03:13:53:c6:57:85:d8:b5:9d:
c6:73:14:1d:45:ae:57:c5:a9:55:ab:6e:68:49:1c:a8:cd:89:
17:9f:3e:5a:f0:be:b6:e9:81:fd:c0:c4:9a:e3:09:3e:b5:47:
7d:b0:02:04:09:cd:f0:ac:14:7b:b7:9f:57:e3:8f:12:b4:a9:
21:db:f6:92:a8:b3:bd:2b:ba:67:00:1f:22:a3:47:cd:a7:1d:
f5:9b:c3:55
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAlOHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcwNDA1MTkyNloXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFB
RTE0RDc1NzVDQzY2NjQ4OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDPtC6J5S1dgdGVDgEfQm/kSPJRMrTuaoKSZzTkLyqLNOhEHUHq/zfQ2wAtikF
Dg31IMvt85myKdrUmkAdqnbqku6Df9oNo9KXHm8/HQsx8MHDS0vauBKz62uc7Mrl
iqly8DqheukWzPU7ymTq1heTyUQ3H2OXrWNQ7zXKp5IVoAhhw1fvO1L87L8D0yPO
2r7qQz9lvKm0X/aDZG0uxzfV7TYgEgDKjs+QVhMDROz0SniiYpd8q83XmlLSRtB8
y6VOEyqJ576K0/UEfVJJEqftnpPuQMDIG9oG7FyDf7InIJkqrLk2T/ZqJnjZo1Yw
k+aOrSmH3m7AHRJPwZux6ExrAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUWpmwJ2cZ
06g3cPquFNdXXMZmSI0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUzQjFEL0JBNjREMDY2RTMzNzExRUM5NzMwRUIzREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFM0IxRC9CQTY0RDA2NkUzMzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJj
WjA2ZzNjUHF1Rk5kWFhNWm1TSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAklhMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ70EMA0EAgAC
MAcDBQAkAIPgMA0GCSqGSIb3DQEBCwUAA4IBAQCSQ6DwBkmG7Ip0/bPwUl8Qyh2V
s8s3Gynxv7iM39amMUGni8CQl3xy9am3vEAHM3SnLgvAZtQseX8bLG1Yi9z/Ffde
WgNqRe4zPQX9rmHzOl8Qpoc2JlxsxwDM9SIBGPpj7QMrjyocVLqkj4LRFB8ntDus
T8Z8cDVimgbQHrOP8B4kgYaNaTu2vJ3sWVGRt0y8yOrolBbski9ACtbPyHBM5U4b
s8mEXNP+76wDE1PGV4XYtZ3GcxQdRa5XxalVq25oSRyozYkXnz5a8L626YH9wMSa
4wk+tUd9sAIECc3wrBR7t59X448StKkh2/aSqLO9K7pnAB8io0fNpx31m8NV
-----END CERTIFICATE-----
Generated at Sun Jul 20 11:45:29 2025 by rpki-client