Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
File: I-mD64u3-GulkjUkGhAWDIBSxk4.cer (raw, json)
Hash identifier: aLYv20o1WWoFYWotemYodN8XJW8+utEWkMloCtN7iSI=
Subject key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026F81
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Oct 2025 16:58:57 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 55490
AS: 132061
AS: 132618
IP: 27.55.0.0/16
IP: 49.237.0.0/16
IP: 180.214.192.0/19
IP: 223.24.0.0/16
IP: 2402:2700::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159617 (0x26f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 27 16:58:57 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:e1:a5:e5:9b:1e:ff:4a:e3:3c:4b:64:3f:
f2:40:f6:8e:de:d2:e2:9f:1a:f5:58:ef:37:77:d7:
7c:ac:0a:89:30:69:89:b7:3c:65:55:12:fc:4a:15:
a3:ad:de:8d:57:ba:7b:bd:43:d5:5a:9f:42:d2:7f:
05:de:0d:e3:ed:2e:43:f6:75:ef:3b:a4:bb:bc:40:
f9:a1:d2:48:24:0e:78:eb:44:dd:67:19:2f:4f:ad:
84:28:16:73:70:70:ae:83:e2:c6:0d:33:26:74:3c:
de:20:f2:a2:be:d6:dd:bd:83:75:f7:6c:ef:32:3b:
77:3b:c3:a1:27:fe:73:92:0e:c4:6d:a4:2f:81:be:
7e:2a:78:95:f0:b8:24:63:7c:c3:7c:07:55:9f:18:
eb:79:8f:4c:70:c3:62:d3:09:94:da:01:83:f8:63:
67:ba:23:96:00:2f:af:34:94:56:36:74:96:3c:69:
20:69:8d:c7:2b:68:8b:89:e5:f1:44:5d:b5:d7:2c:
1d:9e:fd:12:f8:4f:42:55:ee:44:92:fc:b7:b8:f7:
f3:6a:92:d6:0c:c6:52:21:80:52:56:80:98:87:62:
86:c4:30:76:b5:31:a5:a4:64:88:36:07:8a:4e:56:
4b:93:09:fd:59:fc:b6:71:f3:2a:6c:c6:b9:df:4c:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55490
132061
132618
sbgp-ipAddrBlock: critical
IPv4:
27.55.0.0/16
49.237.0.0/16
180.214.192.0/19
223.24.0.0/16
IPv6:
2402:2700::/32
Signature Algorithm: sha256WithRSAEncryption
41:13:1e:5f:52:b5:10:81:b8:37:1e:6c:05:fc:86:a6:f6:fe:
60:0b:bd:11:af:60:51:c5:72:42:04:d0:d5:72:d5:83:42:8a:
20:80:51:8c:81:fa:81:6f:82:9a:b9:d9:22:d8:d9:4d:18:2e:
52:3b:c6:4d:5b:15:c8:cc:87:e8:e2:99:ee:73:65:5f:ae:12:
29:68:2d:d2:e0:57:76:10:c3:96:1f:0b:01:38:84:a5:05:00:
b6:bb:89:54:c4:46:b4:cd:18:14:82:61:b3:e8:5d:31:0f:3e:
93:ee:6e:45:a5:22:7a:e2:5b:45:b5:12:34:ee:80:d2:cb:ca:
8e:1c:58:ed:b9:df:b5:81:91:45:b9:6c:0a:e4:18:77:bf:ec:
88:9a:5b:ac:41:7c:78:4b:1b:5d:e4:40:a2:1f:58:b1:fa:3b:
88:7a:c9:d3:2e:96:78:59:46:bd:a6:2f:fa:39:3e:73:27:aa:
3a:f1:c2:dc:76:a1:44:a1:a9:27:7a:fe:98:6a:87:e5:be:56:
95:c5:10:f7:0b:b2:e4:36:26:71:b5:a1:30:d3:59:27:47:cd:
c0:f2:3e:93:89:3f:f5:c9:ae:c7:0b:88:93:57:94:fc:c7:ee:
bf:5a:a8:93:d4:b6:dd:29:63:ad:6b:a1:4d:21:17:58:73:f5:
ac:b2:c7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:59 2025 by rpki-client