Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.cer (raw, json)
Hash identifier: akwGUxZQJi+S0VFpGhKBmHXa2tbv7X2t+H2MNxM+fNM=
Subject key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026506
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Sep 2025 11:00:15 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154184
IP: 202.6.206.0/23
IP: 2402:2660::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 18:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156934 (0x26506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 12 11:00:15 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:5b:1e:aa:44:34:09:17:be:09:b9:73:55:
8a:a6:bb:7a:4b:59:26:0f:5e:ec:46:e9:16:e3:10:
ab:5b:19:fa:4a:16:0c:1d:36:e6:b7:fb:03:82:4e:
f8:c1:aa:a7:13:68:36:b3:65:a2:1d:19:ac:d3:31:
1a:18:33:3c:6e:65:b8:9d:6c:54:a9:12:e0:1a:80:
c7:a6:eb:17:6e:77:db:6e:8d:65:aa:b1:8d:71:a8:
be:95:d8:69:6e:8e:9d:3e:8a:46:a8:85:d5:59:df:
fa:88:a5:41:1e:79:5b:42:1a:4c:b7:0a:27:86:8f:
74:3f:df:75:c0:b0:22:73:ec:b0:1c:c3:5f:81:85:
7f:07:8a:cd:6a:89:bd:25:20:ef:7c:ad:cf:af:c7:
e3:07:c9:be:68:92:74:0e:7b:3f:04:d0:3b:cb:31:
51:48:70:98:15:29:0a:e2:88:0e:f4:9d:b6:f1:58:
6c:ef:3a:ae:f4:95:8f:e5:d9:d6:46:06:32:35:d3:
96:87:35:2a:2f:aa:fe:bf:1b:0f:34:1a:f9:0f:0d:
17:7b:a0:67:b1:64:96:db:eb:8b:65:24:fe:3b:26:
d1:94:5e:0c:6f:c9:6c:c9:bc:e3:32:cd:30:ae:57:
d6:e0:0f:e8:42:e2:33:54:90:b9:a1:a9:1e:56:bb:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154184
sbgp-ipAddrBlock: critical
IPv4:
202.6.206.0/23
IPv6:
2402:2660::/32
Signature Algorithm: sha256WithRSAEncryption
1c:21:02:0f:a1:54:b8:b1:4c:de:e6:d3:92:4e:0b:80:de:54:
5b:08:e0:f6:79:83:ac:16:b2:a9:bc:b7:99:f2:21:1d:ae:83:
9a:d2:78:dc:75:7e:81:0a:98:48:74:22:c4:28:ee:bc:81:8e:
96:83:6c:92:86:52:64:cf:b6:2b:4f:54:aa:f5:25:e0:72:d0:
f1:69:ce:84:36:31:4c:cf:c6:1a:14:b9:0c:52:29:a2:3e:13:
99:f0:7a:e8:31:bc:7a:78:1e:58:fc:0b:31:66:e6:6d:3e:b2:
00:50:4a:f3:f6:9e:2a:d5:78:c3:a8:43:63:06:47:bb:7c:58:
6c:bd:51:3e:d1:ae:d0:6c:66:06:2b:93:89:c1:e7:60:ff:06:
0a:55:52:17:6f:4e:87:21:6e:0e:6f:64:2a:26:62:6f:02:8f:
73:37:ef:87:41:ff:bd:1f:65:64:02:20:a3:2b:9b:66:93:73:
ef:76:97:ec:bf:91:52:0e:cd:8f:2a:99:d0:b0:bc:5f:a8:c6:
90:21:0d:51:5e:0c:cf:64:1f:85:5b:ec:28:4b:f2:e7:7c:98:
73:1c:5d:38:8f:23:c0:d7:81:fb:71:a9:f2:43:f6:4e:f8:d4:
04:58:db:12:cf:06:77:4c:a9:9d:6c:d5:05:7a:cd:b3:ab:ff:
04:65:de:c7
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAmUGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkxMjExMDAxNVoXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTFENTExMTAvBgNVBAUTKERGOTFCNzcwQkMzMUI1MkZDODk0QkRE
ODRBNjc1ODI3NUFBRTUzMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTh1seqkQ0CRe+CblzVYqmu3pLWSYPXuxG6RbjEKtbGfpKFgwdNua3+wOCTvjB
qqcTaDazZaIdGazTMRoYMzxuZbidbFSpEuAagMem6xdud9tujWWqsY1xqL6V2Glu
jp0+ikaohdVZ3/qIpUEeeVtCGky3CieGj3Q/33XAsCJz7LAcw1+BhX8His1qib0l
IO98rc+vx+MHyb5oknQOez8E0DvLMVFIcJgVKQriiA70nbbxWGzvOq70lY/l2dZG
BjI105aHNSovqv6/Gw80GvkPDRd7oGexZJbb64tlJP47JtGUXgxvyWzJvOMyzTCu
V9bgD+hC4jNUkLmhqR5Wuyk7AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU35G3cLwx
tS/IlL3YSmdYJ1quUx0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUxRDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMUQ1MS9BNjgyRTFDNDhGQzcxMUYwOEE5MzU2M0FDNEY5QUUwMi8zNUczY0x3
eHRTX0lsTDNZU21kWUoxcXVVeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlpIMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBygbOMA0EAgAC
MAcDBQAkAiZgMA0GCSqGSIb3DQEBCwUAA4IBAQAcIQIPoVS4sUze5tOSTguA3lRb
COD2eYOsFrKpvLeZ8iEdroOa0njcdX6BCphIdCLEKO68gY6Wg2yShlJkz7YrT1Sq
9SXgctDxac6ENjFMz8YaFLkMUimiPhOZ8HroMbx6eB5Y/AsxZuZtPrIAUErz9p4q
1XjDqENjBke7fFhsvVE+0a7QbGYGK5OJwedg/wYKVVIXb06HIW4Ob2QqJmJvAo9z
N++HQf+9H2VkAiCjK5tmk3Pvdpfsv5FSDs2PKpnQsLxfqMaQIQ1RXgzPZB+FW+wo
S/LnfJhzHF04jyPA14H7canyQ/ZO+NQEWNsSzwZ3TKmdbNUFes2zq/8EZd7H
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:16:19 2025 by rpki-client