Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.cer (raw, json)
Hash identifier: P6KcNoRViJkIuM+SRudQqG5a8Hx1P1NdZhlq9t0XsjM=
Subject key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0261C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Sep 2025 13:59:39 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 135387
AS: 141742
IP: 43.246.216.0/22
IP: 103.5.44.0/22
IP: 103.35.204.0/22
IP: 103.249.160.0/22
IP: 2406:2f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 16:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156096 (0x261c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 13:59:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:23:4e:fd:92:39:b2:8c:c1:4e:78:d3:f2:
d1:8f:ae:4f:cc:29:e5:a0:86:79:25:91:f4:d2:4e:
35:ca:08:38:b7:5d:71:62:a3:1c:99:be:8a:ec:37:
7d:29:cf:3f:a8:dd:10:35:66:30:84:00:85:8e:63:
0e:4b:ba:4a:00:c2:3f:45:2e:08:da:c1:d9:3a:71:
c6:80:4f:e0:4d:a7:8c:89:fd:96:4d:de:2f:ff:b2:
76:78:de:06:39:e3:c1:f5:c0:79:f8:93:2e:ec:71:
b6:b1:c4:1b:c6:5c:34:e5:bd:7d:23:1f:64:ad:a4:
db:70:52:52:bc:46:fc:81:f0:03:f6:94:9a:4f:c3:
17:9d:30:65:c5:e9:b3:9c:db:9d:e3:ae:ca:6c:81:
fc:e3:68:ae:d5:ad:4d:6f:80:7f:23:f0:fd:ba:83:
c9:e8:ab:85:b9:8e:14:c5:1c:32:cc:64:8d:d7:54:
7a:04:dc:3e:9a:57:76:ce:b8:14:bd:76:ed:8c:ee:
53:c1:79:51:b4:f0:fb:22:d0:4c:ab:74:89:a8:c7:
4d:48:78:01:97:ba:e9:04:bf:f1:c8:61:f6:bd:38:
f0:d6:4d:56:c7:46:49:d6:02:cd:4c:25:c9:cf:68:
d6:85:c7:c3:66:29:81:b8:99:77:37:7a:22:92:f7:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135387
141742
sbgp-ipAddrBlock: critical
IPv4:
43.246.216.0/22
103.5.44.0/22
103.35.204.0/22
103.249.160.0/22
IPv6:
2406:2f40::/32
Signature Algorithm: sha256WithRSAEncryption
79:66:20:67:bd:f0:5f:b1:5f:bb:4a:5b:a3:16:d3:7f:bc:ce:
57:b1:00:7e:cc:37:5a:bf:85:14:0c:49:a2:ab:5c:7b:e8:c9:
7a:0c:83:65:4c:9e:a1:b6:a7:d5:4f:6d:03:d4:64:e4:4d:36:
cd:e8:7b:4f:56:f3:e5:ca:b6:de:c4:c8:99:bc:45:0e:7a:5f:
43:2b:e2:8a:07:f7:10:8d:95:34:34:96:dd:84:70:77:e9:02:
1b:ae:3e:a8:17:c9:74:7f:2c:f8:4c:fb:81:3e:96:a0:cc:b8:
42:97:f4:ae:32:da:e9:2f:da:1c:54:a6:3c:b4:d8:cd:87:67:
84:77:4c:ff:c2:9f:a6:f1:bc:2d:6c:50:d8:e6:bd:19:0a:a4:
90:5c:7f:9b:89:48:cc:46:99:a5:8d:eb:fd:62:5a:e3:b0:2f:
bf:3c:af:83:55:30:dc:d2:1f:df:26:f4:73:c5:3e:9f:bf:71:
5f:fb:5e:4e:20:bf:5b:7c:b8:cc:78:24:bc:85:17:4b:2d:83:
1d:67:19:8b:39:a6:bc:8f:4f:3d:ea:5c:14:0f:95:b4:bb:cd:
e5:67:10:09:fd:4e:4c:79:01:12:75:13:98:c2:0d:f7:96:3e:
40:06:2b:af:96:99:b9:72:92:85:05:19:16:ab:76:f4:6c:3b:
ac:52:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:21:37 2025 by rpki-client