Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
File: cClGBbAXy3lsrYhC9e-6P0SHB_U.cer (raw, json)
Hash identifier: nxwhKhhnNabfw6wiljfsPxkNoy8WdIv/4jP5UJHP5Vs=
Subject key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025504
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Jul 2025 22:50:23 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 142290
AS: 148971
IP: 103.167.134.0/23
IP: 2001:df6:b780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Jul 2025 00:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152836 (0x25504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 10 22:50:23 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:c4:6a:13:1c:93:b0:34:94:44:82:6f:44:
93:1c:87:60:2e:37:14:d6:05:c8:bd:e9:df:23:83:
70:3a:15:49:69:e7:26:c8:ab:f4:a3:82:58:46:9d:
33:de:7a:c5:8a:3c:7e:5b:eb:42:ad:ba:6c:57:8b:
6e:a5:d8:f1:e1:a8:13:ce:fb:4c:a5:99:8c:ae:b4:
c5:d1:20:16:ff:75:2e:c6:ba:11:39:07:7a:6f:c9:
90:65:a6:e2:5a:ef:fb:1b:70:2d:fd:15:69:a1:1b:
7b:73:69:8d:c6:b3:69:fd:2b:1f:f1:70:0f:88:d6:
ae:77:aa:2f:58:5b:0a:7f:68:ef:14:c4:2d:7e:78:
68:af:6e:15:73:65:c4:e9:b3:b8:e7:5e:91:da:5b:
48:68:db:04:69:c7:fe:63:f2:04:0c:56:c5:b1:33:
1b:92:01:63:4b:84:98:76:c5:dd:1b:3f:38:e5:3f:
19:30:fe:bd:a8:fd:bc:6f:de:2c:db:5a:db:9d:4e:
c1:68:5f:72:ac:dd:8b:47:6d:27:67:c6:60:a7:07:
73:20:5c:e8:1f:fa:88:b2:06:ca:33:94:c2:33:5c:
48:5d:ac:cf:40:dc:6d:de:d8:d6:c0:60:85:1a:1a:
d6:4b:ad:ba:48:a5:3b:d5:d1:32:c8:20:41:51:ff:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142290
148971
sbgp-ipAddrBlock: critical
IPv4:
103.167.134.0/23
IPv6:
2001:df6:b780::/48
Signature Algorithm: sha256WithRSAEncryption
10:f0:38:85:d8:b5:7b:91:7e:85:7d:cb:57:dd:6f:c2:ec:eb:
12:21:0b:8c:3a:1c:49:d1:f8:a7:17:53:27:e9:40:f4:b9:e9:
71:e6:fd:a3:a0:6b:be:ab:5a:11:d5:b7:a9:72:f8:58:1b:a8:
4b:c6:3c:40:76:17:62:f5:d5:cb:fd:d6:fb:61:6a:60:4a:5a:
d8:9a:45:b1:a6:ec:63:38:9b:2d:ed:bf:7e:75:e3:b4:0f:c0:
22:11:c7:c3:f4:75:1d:e6:2e:e3:a4:16:ba:c4:bb:93:db:a1:
ee:35:43:86:50:97:e5:39:50:34:ad:27:bd:77:00:be:39:ca:
f7:f0:78:96:f0:ea:3d:62:7c:66:e2:2b:32:4d:06:b9:e4:6c:
8c:16:b0:15:fb:20:08:c3:74:d3:48:b3:ec:98:8e:44:4b:9b:
3c:7a:28:51:b2:60:c9:ef:27:87:f6:41:17:44:78:d2:21:a5:
88:ae:50:f2:18:37:62:6b:03:f9:d0:e2:16:a0:e7:94:59:42:
d7:f4:dd:75:d8:a8:a5:38:85:26:9d:35:1c:7f:5d:8b:61:50:
5f:9b:33:c3:9c:3b:8b:ce:a6:20:9f:f0:a0:ee:ca:a3:a8:cb:
dc:45:f0:d3:fa:03:30:3f:df:9e:32:16:b9:a0:87:93:fa:81:
f1:5b:34:c3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDAlUEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcxMDIyNTAyM1oXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTFDMTYxMTAvBgNVBAUTKDcwMjk0NjA1QjAxN0NCNzk2Q0FEODg0
MkY1RUZCQTNGNDQ4NzA3RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEhsRqExyTsDSURIJvRJMch2AuNxTWBci96d8jg3A6FUlp5ybIq/SjglhGnTPe
esWKPH5b60KtumxXi26l2PHhqBPO+0ylmYyutMXRIBb/dS7GuhE5B3pvyZBlpuJa
7/sbcC39FWmhG3tzaY3Gs2n9Kx/xcA+I1q53qi9YWwp/aO8UxC1+eGivbhVzZcTp
s7jnXpHaW0ho2wRpx/5j8gQMVsWxMxuSAWNLhJh2xd0bPzjlPxkw/r2o/bxv3izb
WtudTsFoX3Ks3YtHbSdnxmCnB3MgXOgf+oiyBsozlMIzXEhdrM9A3G3e2NbAYIUa
GtZLrbpIpTvV0TLIIEFR/9MFAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUcClGBbAX
y3lsrYhC9e+6P0SHB/UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUxQzE2LzhGMEM2QjAwQkU2MTExRUJBRUYzNUE2MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMUMxNi84RjBDNkIwMEJFNjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJB
WHkzbHNyWWhDOWUtNlAwU0hCX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAivSAgMCReswMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFnp4Yw
DwQCAAIwCQMHACABDfa3gDANBgkqhkiG9w0BAQsFAAOCAQEAEPA4hdi1e5F+hX3L
V91vwuzrEiELjDocSdH4pxdTJ+lA9Lnpceb9o6BrvqtaEdW3qXL4WBuoS8Y8QHYX
YvXVy/3W+2FqYEpa2JpFsabsYzibLe2/fnXjtA/AIhHHw/R1HeYu46QWusS7k9uh
7jVDhlCX5TlQNK0nvXcAvjnK9/B4lvDqPWJ8ZuIrMk0GueRsjBawFfsgCMN000iz
7JiOREubPHooUbJgye8nh/ZBF0R40iGliK5Q8hg3YmsD+dDiFqDnlFlC1/Tdddio
pTiFJp01HH9di2FQX5szw5w7i86mIJ/woO7Ko6jL3EXw0/oDMD/fnjIWuaCHk/qB
8Vs0ww==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:37:38 2025 by rpki-client