Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
File: 2CVmixrBt_OBXwe82lfnSMSWSpo.cer (raw, json)
Hash identifier: eWLVHjF8yCJFM2wy+SGX75negIf4mchMveFaoOaSA3I=
Subject key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0260A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Aug 2025 07:39:38 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 132905
IP: 103.37.48.0/22
IP: 2001:df4:ba00::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Sep 2025 00:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155817 (0x260a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 07:39:38 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:36:2f:d6:ce:6c:e0:2c:c7:7e:15:75:74:
2e:bd:c7:b7:2e:64:94:73:58:5e:b3:e9:9b:f6:8b:
a5:a9:a4:94:ab:55:95:c0:2c:0d:75:4a:2f:a0:f9:
be:51:6c:cf:cd:f6:7e:71:25:13:09:7e:1f:8d:37:
6d:77:29:2a:39:c3:a1:2b:97:48:aa:d9:d5:4e:e9:
78:68:c0:17:7f:75:22:c1:b2:31:75:26:5f:a9:09:
77:db:b8:4f:3e:bf:2b:5a:dc:23:13:42:aa:13:47:
d3:d5:54:73:b0:3f:6e:cf:8d:7c:bd:4d:3f:58:5e:
b8:5d:b3:9c:76:66:18:58:b7:2d:ca:94:0e:3e:e6:
6a:63:0d:22:50:48:72:97:ab:cc:2b:87:fc:8e:f9:
24:cc:f5:6e:0c:ef:87:fd:0f:f3:6c:17:c3:26:6d:
e9:ce:f7:df:6b:7b:2f:45:5b:ee:10:a7:b6:a2:8a:
4c:a0:29:a9:12:4a:9d:af:57:94:89:8e:79:44:08:
08:fa:f8:6e:ed:94:f5:59:ce:db:63:30:02:74:38:
4e:48:de:9e:8d:76:8b:a7:5a:43:5a:c4:b8:ad:a3:
5a:b8:36:ff:eb:66:bf:7f:4e:bb:6b:93:3b:cb:eb:
14:31:6e:98:ca:5f:45:d0:72:64:69:6f:07:b8:34:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132905
sbgp-ipAddrBlock: critical
IPv4:
103.37.48.0/22
IPv6:
2001:df4:ba00::/47
Signature Algorithm: sha256WithRSAEncryption
86:cd:1a:6c:57:5b:63:52:cf:b3:3d:75:41:45:2a:7c:1e:d2:
bb:da:fa:98:ec:f8:e1:b3:a1:5f:aa:1f:86:9d:9c:35:9c:b2:
35:8b:0c:52:08:a6:7b:25:d9:e6:af:4e:df:b2:b4:74:3e:fd:
bc:f6:bc:b7:9e:01:6b:82:10:68:f0:ff:e5:0f:7e:89:57:44:
21:11:c8:49:ff:0d:8f:ef:2e:06:3c:cc:67:6e:df:c8:71:c3:
c0:47:27:6c:99:1b:ab:01:95:0c:27:4b:e0:e1:f8:0d:9a:20:
01:ad:2f:96:e0:8f:3d:5c:83:fe:60:ec:77:06:3a:23:73:54:
36:ad:65:74:f1:d6:55:77:11:e8:fd:97:77:50:c0:d0:aa:e8:
c6:53:26:bb:81:85:58:bb:b5:c8:d6:3e:0e:b3:d1:97:37:10:
19:90:e1:b9:dd:6a:d8:21:10:80:b8:13:2a:b6:cb:70:a6:2b:
f3:65:5f:e6:e3:68:1d:eb:c5:01:24:a4:63:81:b7:48:52:94:
82:51:4c:e9:e2:2b:06:23:61:76:f8:52:c7:f7:8c:38:f3:19:
f7:79:07:a8:e3:bc:12:f7:d1:25:27:c8:df:cd:51:2e:c6:e3:
5a:97:8b:65:7a:8a:4b:eb:86:60:21:a9:2a:a8:0a:33:ba:12:
a6:0a:c0:d7
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAmCpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgyOTA3MzkzOFoXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzU2QzMxMTAvBgNVBAUTKEQ4MjU2NjhCMUFDMUI3RjM4MTVGMDdC
Q0RBNTdFNzQ4QzQ5NjRBOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCQDYv1s5s4CzHfhV1dC69x7cuZJRzWF6z6Zv2i6WppJSrVZXALA11Si+g+b5R
bM/N9n5xJRMJfh+NN213KSo5w6Erl0iq2dVO6XhowBd/dSLBsjF1Jl+pCXfbuE8+
vyta3CMTQqoTR9PVVHOwP27PjXy9TT9YXrhds5x2ZhhYty3KlA4+5mpjDSJQSHKX
q8wrh/yO+STM9W4M74f9D/NsF8MmbenO999rey9FW+4Qp7aiikygKakSSp2vV5SJ
jnlECAj6+G7tlPVZzttjMAJ0OE5I3p6NdounWkNaxLito1q4Nv/rZr9/TrtrkzvL
6xQxbpjKX0XQcmRpbwe4NCDNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU2CVmixrB
t/OBXwe82lfnSMSWSpowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc1NkMzLzVCRjUxOTJBRTA2NzExRUZCQzNEMTcxQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3NTZDMy81QkY1MTkyQUUwNjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhy
QnRfT0JYd2U4MmxmblNNU1dTcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgcpMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZyUwMA8EAgAC
MAkDBwEgAQ30ugAwDQYJKoZIhvcNAQELBQADggEBAIbNGmxXW2NSz7M9dUFFKnwe
0rva+pjs+OGzoV+qH4adnDWcsjWLDFIIpnsl2eavTt+ytHQ+/bz2vLeeAWuCEGjw
/+UPfolXRCERyEn/DY/vLgY8zGdu38hxw8BHJ2yZG6sBlQwnS+Dh+A2aIAGtL5bg
jz1cg/5g7HcGOiNzVDatZXTx1lV3Eej9l3dQwNCq6MZTJruBhVi7tcjWPg6z0Zc3
EBmQ4bndatghEIC4Eyq2y3CmK/NlX+bjaB3rxQEkpGOBt0hSlIJRTOniKwYjYXb4
Usf3jDjzGfd5B6jjvBL30SUnyN/NUS7G41qXi2V6ikvrhmAhqSqoCjO6EqYKwNc=
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:26:06 2025 by rpki-client