Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer
File: 1AI0WEr2BZHzfdP7on68uFzHZWo.cer (raw, json)
Hash identifier: gXKMzhDPi3hwvMB69TkmLkmFOF9+OWy6IQMLanNsPvs=
Subject key identifier: D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02720D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Nov 2025 15:05:21 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 17890
IP: 210.7.48.0/21
IP: 2402:3900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160269 (0x2720d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 15:05:21 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91E27F3, serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:a3:76:31:fc:b3:f3:2f:5e:05:8a:ba:66:
f1:fe:2d:46:e0:f0:63:95:90:e5:27:99:6b:3d:e3:
69:18:82:c8:74:61:a5:2e:3d:8e:f7:d9:9c:1f:25:
b9:f4:c5:42:f0:84:56:02:5d:b0:d0:bb:ca:bc:c3:
2a:0d:a0:c4:79:33:c1:f6:16:74:5f:bd:cf:59:44:
b8:cb:91:e6:e6:49:6a:d7:98:83:77:35:1a:ce:26:
2d:d7:44:e4:4e:a8:d3:20:d6:8d:99:9c:90:01:9e:
b5:6f:8e:0b:e3:46:52:92:42:ea:c3:a1:1c:c3:ed:
d5:ae:bc:49:df:7a:1d:d7:d6:aa:02:b4:71:2b:ba:
3e:22:dd:ce:43:5c:dc:b6:9d:31:28:3f:7b:86:a0:
6d:9f:45:63:25:55:e5:5e:27:0d:bf:ab:15:b6:ea:
f1:11:ae:2e:85:1c:5d:c4:dd:01:a3:c2:b4:b2:9b:
0f:b0:1c:3a:18:91:4a:63:67:88:07:f2:4e:36:00:
fb:6c:c6:c8:1f:f2:e2:70:73:4c:96:d6:6c:3b:ea:
5a:20:06:da:b2:ae:35:b3:82:e1:51:12:67:18:85:
ba:81:77:a4:2b:7a:2a:90:79:18:ea:96:2b:25:3e:
ca:63:69:b2:ae:a0:f5:57:3a:be:b8:ec:23:e6:68:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17890
sbgp-ipAddrBlock: critical
IPv4:
210.7.48.0/21
IPv6:
2402:3900::/32
Signature Algorithm: sha256WithRSAEncryption
82:2f:1d:5e:76:4a:84:91:3a:04:37:05:8b:af:97:29:9d:ec:
a4:94:c8:ff:da:03:06:58:a8:3b:4b:43:7c:c7:50:c1:6a:4a:
b3:c2:d3:63:79:1d:89:1a:80:16:6d:38:ae:8e:4c:dc:b6:f5:
86:67:8e:1c:c2:91:86:68:f6:9b:45:46:5f:d0:65:77:0f:4b:
b2:d7:30:01:78:da:e2:e4:b3:55:8b:a9:21:3b:84:ab:cc:8f:
4c:9a:a8:a8:c6:d3:2f:ae:d6:d9:4d:3a:cd:a5:2a:05:b9:28:
2c:77:f4:ae:65:33:44:27:3d:46:aa:43:e3:6d:46:ab:97:a5:
78:95:a7:87:6b:b8:06:b6:8e:dc:1d:a5:6e:da:ee:50:2a:b3:
12:85:94:5c:07:a2:77:3a:18:48:42:0f:53:ec:1b:55:bc:0d:
68:2a:5d:cc:9e:0d:aa:29:22:2e:ec:be:75:87:bb:67:9b:07:
14:e2:1d:9d:35:48:35:a8:bb:04:80:bb:21:78:c1:d5:e4:43:
fd:54:7b:eb:c7:82:ae:c7:f8:90:a2:7e:e9:b8:8f:6b:ba:3e:
90:b5:ad:df:e0:74:a0:dd:a6:c6:dc:5a:78:c2:ce:fa:23:11:
a2:da:c0:45:d7:9b:62:02:68:24:d8:f0:64:69:9a:db:66:1a:
a4:74:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:13:48 2025 by rpki-client