Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer
File: CIaR8feL2c7-2A021lDWd2emvbA.cer (raw, json)
Hash identifier: I236y9uBs41xCZ/gJvaVX4QvwMqWOq0jfWHkiTOJ+Sk=
Subject key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025E17
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 18 Aug 2025 16:59:19 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 131188
IP: 103.1.12.0/22
IP: 111.91.236.0/22
IP: 2403:4900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155159 (0x25e17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 16:59:19 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A917DA4A, serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:90:dc:67:ef:44:ef:f3:85:72:b8:c7:ef:
ce:f0:97:ae:6f:75:4e:bb:19:e6:6b:cc:7d:80:a8:
37:6f:fe:57:0a:97:c5:2c:ab:f8:24:d1:ad:71:3d:
12:51:79:0a:8e:6a:d0:1f:bd:4f:11:38:fa:79:79:
1d:ca:d1:eb:78:24:8e:89:23:ef:37:0f:6d:50:49:
ff:7c:ea:1e:95:1b:86:6d:b2:ee:5a:95:70:fd:44:
40:2d:9d:4d:e1:ba:0a:33:94:a8:40:6b:6b:3a:c2:
6c:2f:58:d8:98:b9:05:f7:94:a8:63:94:9e:35:92:
52:f4:ff:48:2c:e5:17:19:b3:cc:cd:15:60:a5:6b:
c8:05:31:2e:6d:d1:0e:17:a4:4f:4c:f3:07:f4:27:
6a:be:2e:56:18:dc:61:9d:3f:57:f2:3a:12:8d:52:
68:d7:e9:94:e7:d4:76:aa:e9:e2:83:6f:37:16:b2:
88:3d:76:3c:b6:28:34:7f:9e:cc:7f:24:d8:ee:a1:
27:ea:15:65:00:b2:0c:24:b8:da:f9:4a:05:d6:7d:
3d:7b:7d:f4:72:d1:5f:21:d0:ab:65:cd:42:6b:3d:
fb:45:d7:80:52:a3:e3:bc:11:b1:a4:f7:4e:ab:97:
e4:a7:0e:ce:2d:10:ee:a5:24:b4:91:84:ae:2c:ce:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131188
sbgp-ipAddrBlock: critical
IPv4:
103.1.12.0/22
111.91.236.0/22
IPv6:
2403:4900::/32
Signature Algorithm: sha256WithRSAEncryption
1b:cc:26:5b:3b:94:8b:88:88:81:1a:23:f8:34:69:f4:11:4c:
e7:d4:f2:f3:6d:3e:53:92:43:aa:f7:43:2f:39:10:89:c9:ba:
39:db:64:f8:4f:8d:71:c5:51:86:12:7c:bc:a7:6a:e9:2b:c4:
a9:9c:cd:5c:a7:a0:a7:6f:b1:52:75:1c:6d:25:52:98:e7:a3:
92:db:38:cf:0e:2e:ca:c3:46:f7:11:ac:24:5b:f4:35:4e:99:
cd:8a:c5:57:98:02:e2:29:a4:82:08:c2:7a:f9:5f:e6:7b:3c:
77:f2:9a:13:59:21:aa:39:27:c0:26:8d:84:9b:4e:22:b7:2c:
b6:20:27:58:24:e2:61:16:14:4f:d0:41:76:5a:e1:de:a5:2e:
e1:e3:e8:51:af:b7:cf:ac:90:b0:ce:c3:ac:f6:a0:0d:dd:91:
26:45:dc:82:6e:d3:16:e6:9f:7e:81:f9:d1:63:2a:40:b9:3f:
53:fe:f3:d7:d9:2b:05:5c:ee:a0:f0:5f:f8:92:d6:8d:da:bd:
b0:fd:21:0a:c0:c9:e7:42:a7:1b:b2:0c:0d:1c:4b:64:bc:3d:
d3:dd:99:d6:51:7a:17:24:f0:fd:38:59:1f:ec:f6:2f:1e:89:
7b:55:c1:87:60:73:bc:dd:33:f2:8d:f2:4e:6c:d0:9c:bf:10:
33:42:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:13:32 2025 by rpki-client