Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
File: 1AwbOf4FNm7Ysj4IgLaet198kOI.cer (raw, json)
Hash identifier: vPfsUcU/NbaMkeGw0XGWA9AjMdSWFCOQotAsfJhqDN4=
Subject key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E4A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Oct 2025 16:28:12 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 138198
IP: 103.122.28.0/22
IP: 2403:87c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159306 (0x26e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 21 16:28:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9171A26, serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:48:e0:30:80:00:f9:d7:93:f7:5c:0e:aa:
62:3b:86:ac:93:9d:c8:ee:ad:b5:ca:7d:f2:a7:74:
09:fe:a2:b4:29:63:4b:6f:58:58:f7:88:f4:d5:26:
be:63:92:d7:d1:34:b6:0b:d9:8d:ae:9a:72:a5:63:
fa:7c:75:68:60:9d:1f:75:03:11:af:24:29:f9:75:
50:2c:8e:62:c1:75:49:1d:06:b9:07:e1:1d:75:df:
d4:b3:0b:c9:94:ad:a8:42:32:05:5f:a0:93:00:d9:
bf:c0:ee:4e:2e:4e:7b:30:32:b4:48:30:f2:d6:7f:
0f:61:24:3b:c5:c6:07:38:c4:fd:8b:fb:dd:99:49:
7d:9c:02:62:5a:e7:61:64:97:a6:7c:22:17:09:d1:
5e:df:bb:9d:c2:e6:78:1a:ea:1a:97:c5:41:45:d6:
d6:e1:c8:d9:cd:40:4e:36:60:20:95:71:69:34:27:
f6:b2:03:45:af:62:f2:f5:7b:94:1e:0f:cb:91:aa:
90:0d:27:1e:3f:15:7f:7f:4e:74:7a:c9:05:e3:8a:
af:95:f4:61:26:1e:63:2d:f3:01:b3:69:77:a1:d8:
36:92:09:f8:47:0e:3a:bf:3b:e8:8b:17:30:03:69:
43:48:b4:ab:84:bf:95:e8:e5:c2:76:23:49:84:d7:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138198
sbgp-ipAddrBlock: critical
IPv4:
103.122.28.0/22
IPv6:
2403:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
22:5f:ab:6e:d6:5b:5a:2e:7c:9a:85:73:d0:a8:80:00:74:3d:
68:31:f5:1a:6f:0c:3e:3e:71:cf:34:f0:3a:47:ee:db:07:fe:
ed:4f:cd:54:d6:22:02:8e:12:d4:77:19:ce:32:d7:9b:e1:05:
5a:e1:0d:a4:a5:c6:94:60:1d:69:6c:92:f9:c8:75:62:12:08:
0d:75:c7:de:24:6d:fc:83:9a:ba:e9:dc:d0:95:e8:55:6a:01:
c4:80:12:0f:89:94:97:94:38:04:36:06:99:05:f7:40:ee:9a:
be:a8:a2:0e:11:fc:f9:a5:fa:b5:41:86:72:0a:d7:e3:b3:22:
4d:f7:0a:64:c8:ad:de:aa:e5:3a:95:15:65:aa:f9:18:be:4c:
35:70:99:90:89:b3:ab:5d:87:b0:29:e6:30:df:63:e9:24:34:
53:29:4b:fe:8c:7a:58:e4:0b:79:d7:de:78:38:15:4f:9e:64:
a4:ad:72:1a:3a:2c:81:cc:8c:ed:00:9b:e6:39:64:97:c5:ea:
d9:1b:f5:c0:45:df:71:20:7c:bd:a0:d5:c8:9c:26:af:c2:e2:
1a:36:27:89:ca:c4:41:0c:f7:91:6f:2d:de:62:7b:0b:08:a6:
e0:f0:e3:26:68:67:aa:63:73:24:86:57:f4:c7:6d:f6:a3:fe:
ba:17:5b:89
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAm5KMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAyMTE2MjgxMloXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzFBMjYxMTAvBgNVBAUTKEQ0MEMxQjM5RkUwNTM2NkVEOEIyM0Uw
ODgwQjY5RUI3NUY3QzkwRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEdEjgMIAA+deT91wOqmI7hqyTncjurbXKffKndAn+orQpY0tvWFj3iPTVJr5j
ktfRNLYL2Y2umnKlY/p8dWhgnR91AxGvJCn5dVAsjmLBdUkdBrkH4R1139SzC8mU
rahCMgVfoJMA2b/A7k4uTnswMrRIMPLWfw9hJDvFxgc4xP2L+92ZSX2cAmJa52Fk
l6Z8IhcJ0V7fu53C5nga6hqXxUFF1tbhyNnNQE42YCCVcWk0J/ayA0WvYvL1e5Qe
D8uRqpANJx4/FX9/TnR6yQXjiq+V9GEmHmMt8wGzaXeh2DaSCfhHDjq/O+iLFzAD
aUNItKuEv5Xo5cJ2I0mE1+59AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU1AwbOf4F
Nm7Ysj4IgLaet198kOIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcxQTI2L0JFNTMxMkEyNDVDMTExRUE4RDBCREQzNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MUEyNi9CRTUzMTJBMjQ1QzExMUVBOEQwQkREMzRDNEY5QUUwMi8xQXdiT2Y0
Rk5tN1lzajRJZ0xhZXQxOThrT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhvWMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3ocMA0EAgAC
MAcDBQAkA4fAMA0GCSqGSIb3DQEBCwUAA4IBAQAiX6tu1ltaLnyahXPQqIAAdD1o
MfUabww+PnHPNPA6R+7bB/7tT81U1iICjhLUdxnOMteb4QVa4Q2kpcaUYB1pbJL5
yHViEggNdcfeJG38g5q66dzQlehVagHEgBIPiZSXlDgENgaZBfdA7pq+qKIOEfz5
pfq1QYZyCtfjsyJN9wpkyK3equU6lRVlqvkYvkw1cJmQibOrXYewKeYw32PpJDRT
KUv+jHpY5At51954OBVPnmSkrXIaOiyBzIztAJvmOWSXxerZG/XARd9xIHy9oNXI
nCavwuIaNieJysRBDPeRby3eYnsLCKbg8OMmaGeqY3Mkhlf0x232o/66F1uJ
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:18:17 2025 by rpki-client