Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
File: BN7ay9uvpcHBT5KBe5b39QMQCig.cer (raw, json)
Hash identifier: qrn0yM8r9fm2wEmceAiSmrfx5tv6ZDd6ud7cvwD+yYc=
Subject key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026276
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 13:09:19 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 45.124.212.0/22
IP: 103.193.80.0/22
IP: 2402:a980::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 22:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156278 (0x26276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 13:09:19 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:82:8f:0e:be:3d:66:9c:7a:ee:95:25:27:
7f:f3:50:8e:62:5b:33:38:6e:c3:b2:3e:c3:49:62:
ce:e2:f9:03:57:c8:4e:d8:74:04:cc:8d:30:e1:da:
ea:17:4d:cd:56:6b:6f:63:a5:b2:6c:71:36:6d:7f:
c2:4f:f1:26:48:de:34:6e:6d:e3:5a:7b:9d:77:46:
d7:1b:da:37:08:db:4d:44:58:c9:a0:b4:c5:2d:3e:
d6:d4:91:18:d3:f7:cb:86:9c:52:98:ec:64:9f:25:
12:2d:7b:2a:55:7b:5c:84:bd:ff:94:d7:54:ba:7a:
17:16:b3:ff:fe:c5:fe:d6:4a:65:d7:ab:8c:07:74:
b8:f2:f5:4b:51:a8:ce:d3:4b:36:e1:77:22:44:36:
45:94:cd:1f:ff:93:9f:c7:16:46:74:ae:36:c4:34:
a5:0d:69:e5:b9:02:09:81:87:91:28:b1:00:c2:79:
fb:7f:02:b0:e3:e9:39:0b:50:4e:de:70:5e:ba:2f:
ef:92:cc:24:90:25:25:dd:dc:bf:91:e7:05:9d:86:
fe:1d:af:42:61:47:d6:bd:d6:73:83:d6:98:be:7a:
92:bd:db:a8:a4:06:ed:82:3f:29:84:fe:92:4d:98:
d6:43:c7:b8:c8:1b:ec:4c:6c:5c:c5:af:e7:83:b5:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.212.0/22
103.193.80.0/22
IPv6:
2402:a980::/32
Signature Algorithm: sha256WithRSAEncryption
5f:fa:b8:e7:1b:58:46:24:3e:d6:8f:23:46:a5:c8:92:1d:1f:
c1:98:62:c7:e6:bc:47:7b:98:8c:05:78:2a:a6:eb:08:8f:8d:
d1:cd:6a:a6:03:90:1b:9a:c6:6a:70:0e:13:3b:37:ad:8b:10:
a7:19:d2:bc:13:04:db:6f:b6:3f:a1:d2:29:e9:68:46:f0:13:
ab:52:9e:b0:94:70:8a:d1:9a:0a:4e:5a:d4:e6:e0:e1:4b:a7:
d6:92:ab:17:78:55:14:b8:79:de:8b:85:54:97:71:78:7d:04:
3f:8d:ef:ca:e4:92:76:69:24:6d:b4:ce:f3:f5:93:51:16:4c:
40:74:2b:14:7d:ed:ef:92:83:4c:65:c5:6e:59:10:02:ae:58:
9e:45:87:be:97:21:6b:3a:39:82:51:45:8b:55:15:17:cc:46:
80:e5:99:45:49:24:e9:56:eb:a5:7b:39:31:f1:95:f1:e5:b8:
ff:05:6b:1a:d9:33:3a:7b:1b:70:f9:80:49:5f:2b:6a:69:85:
90:11:1d:24:eb:77:5c:fd:7c:da:b1:63:e3:3f:c8:48:7a:0d:
54:11:38:ab:16:30:b2:80:e7:a5:59:77:76:4e:85:70:4c:39:
72:be:0b:67:a8:04:9b:e8:92:69:74:a9:c6:c6:fb:9a:d0:3a:
3f:30:cb:a7
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgIDAmJ2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkwMjEzMDkxOVoXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkREMzYxMTAvBgNVBAUTKDA0REVEQUNCREJBRkE1QzFDMTRGOTI4
MTdCOTZGN0Y1MDMxMDBBMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKMIKPDr49Zpx67pUlJ3/zUI5iWzM4bsOyPsNJYs7i+QNXyE7YdATMjTDh2uoX
Tc1Wa29jpbJscTZtf8JP8SZI3jRubeNae513Rtcb2jcI201EWMmgtMUtPtbUkRjT
98uGnFKY7GSfJRIteypVe1yEvf+U11S6ehcWs//+xf7WSmXXq4wHdLjy9UtRqM7T
SzbhdyJENkWUzR//k5/HFkZ0rjbENKUNaeW5AgmBh5EosQDCeft/ArDj6TkLUE7e
cF66L++SzCSQJSXd3L+R5wWdhv4dr0JhR9a91nOD1pi+epK926ikBu2CPymE/pJN
mNZDx7jIG+xMbFzFr+eDtXZnAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUBN7ay9uv
pcHBT5KBe5b39QMQCigwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJERDM2LzdGNDAyM0YyMjUzMjExRUZCQzkzMjExQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyREQzNi83RjQwMjNGMjI1MzIxMUVGQkM5MzIxMUFDNEY5QUUwMi9CTjdheTl1
dnBjSEJUNUtCZTViMzlRTVFDaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj
MBIEAgABMAwDBAItfNQDBAJnwVAwDQQCAAIwBwMFACQCqYAwDQYJKoZIhvcNAQEL
BQADggEBAF/6uOcbWEYkPtaPI0alyJIdH8GYYsfmvEd7mIwFeCqm6wiPjdHNaqYD
kBuaxmpwDhM7N62LEKcZ0rwTBNtvtj+h0inpaEbwE6tSnrCUcIrRmgpOWtTm4OFL
p9aSqxd4VRS4ed6LhVSXcXh9BD+N78rkknZpJG20zvP1k1EWTEB0KxR97e+Sg0xl
xW5ZEAKuWJ5Fh76XIWs6OYJRRYtVFRfMRoDlmUVJJOlW66V7OTHxlfHluP8FaxrZ
Mzp7G3D5gElfK2pphZARHSTrd1z9fNqxY+M/yEh6DVQROKsWMLKA56VZd3ZOhXBM
OXK+C2eoBJvokml0qcbG+5rQOj8wy6c=
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:56:41 2025 by rpki-client