Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer
File: I3R4bofEoOw9b6TAt4TkL-4AOm0.cer (raw, json)
Hash identifier: zluxUa/PlX5/HglFOY8itywgfMFuLQVE3aGYDAZMLq4=
Subject key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02656C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Sep 2025 05:35:09 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154228
IP: 144.48.248.0/23
IP: 2001:df6:1e40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 19:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157036 (0x2656c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 15 05:35:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:41:f2:88:36:de:12:8d:02:47:e9:99:23:
09:db:00:c9:d6:d7:ab:0d:58:d4:a1:0e:38:c4:43:
4f:30:dc:c4:17:de:1f:09:74:10:b4:5c:32:eb:03:
6b:7c:52:70:13:a1:9f:a6:a5:f4:98:41:0f:d5:30:
d8:2a:32:ec:5d:d2:5c:da:1a:9c:02:05:1d:5e:79:
3d:ac:b7:c0:e9:56:7d:da:e1:e3:c4:1e:79:6a:99:
6d:8f:41:35:70:47:cc:97:ad:a2:68:fc:79:66:5b:
be:26:e3:e9:10:3c:74:40:d4:e3:14:c4:a8:ad:be:
13:58:9b:a7:66:b0:c5:32:9d:0d:6f:18:a2:60:7a:
b6:bc:82:67:da:55:cc:3c:89:c1:dc:88:6d:1a:19:
ea:08:2a:3c:a4:32:8f:4f:48:e0:39:b8:77:af:54:
fa:88:14:fe:32:48:21:75:1d:fb:a5:e9:5e:91:e2:
ab:ee:41:08:58:b5:55:65:ef:14:37:30:c3:0b:3d:
f0:db:31:74:bb:51:28:82:73:47:75:f9:85:be:46:
8f:96:cb:a7:6a:64:50:e4:08:9f:43:58:53:09:00:
0d:c6:2e:3d:ba:4b:5a:3a:c3:42:a2:4b:50:08:7c:
6c:f5:b9:74:7c:80:1e:2a:f4:cf:13:d4:7b:a8:04:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154228
sbgp-ipAddrBlock: critical
IPv4:
144.48.248.0/23
IPv6:
2001:df6:1e40::/48
Signature Algorithm: sha256WithRSAEncryption
3f:c0:77:51:10:02:7e:7e:c9:ae:56:69:5c:84:c2:e1:bf:10:
72:f3:90:78:a9:18:89:ed:bb:18:1e:7c:87:9f:d0:bb:1c:b9:
d1:f3:73:94:56:69:08:d6:bf:b8:17:2f:5d:c6:a4:f5:05:37:
9b:18:dc:70:0e:65:d5:60:5e:8d:50:dd:e8:c9:32:82:6f:9e:
69:5a:40:7d:15:84:25:9d:b0:44:e7:57:66:bb:5d:5a:52:21:
e0:40:bb:19:2c:20:3e:b9:35:d7:cd:ca:68:e6:04:ae:29:85:
77:20:29:06:44:c8:9c:50:64:ef:1c:f5:4f:24:bb:20:fb:fb:
2b:b8:63:92:fb:26:9d:15:b7:6a:9f:64:b6:ca:35:97:c8:85:
09:bf:70:ce:7c:3e:7f:1f:12:b6:11:69:1a:0d:3c:9f:89:ba:
00:03:a8:ca:26:45:96:c0:e9:6b:b2:dd:d5:ff:cf:1d:a1:de:
90:95:9c:3d:24:f2:63:1d:38:c8:c3:49:c3:db:fc:55:f0:50:
67:9a:d4:64:c5:fe:78:eb:e1:1e:fb:ff:2e:64:3f:5a:b3:ba:
9a:0f:42:d4:2f:64:cb:9e:a2:57:5a:41:92:18:63:98:cf:49:
02:17:57:1a:5a:f5:7b:3c:f8:d9:0f:14:46:05:4c:01:29:79:
2d:a2:ea:99
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAmVsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkxNTA1MzUwOVoXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTc2MTUxMTAvBgNVBAUTKDIzNzQ3ODZFODdDNEEwRUMzRDZGQTRD
MEI3ODRFNDJGRUUwMDNBNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMAUHyiDbeEo0CR+mZIwnbAMnW16sNWNShDjjEQ08w3MQX3h8JdBC0XDLrA2t8
UnAToZ+mpfSYQQ/VMNgqMuxd0lzaGpwCBR1eeT2st8DpVn3a4ePEHnlqmW2PQTVw
R8yXraJo/HlmW74m4+kQPHRA1OMUxKitvhNYm6dmsMUynQ1vGKJgera8gmfaVcw8
icHciG0aGeoIKjykMo9PSOA5uHevVPqIFP4ySCF1Hful6V6R4qvuQQhYtVVl7xQ3
MMMLPfDbMXS7USiCc0d1+YW+Ro+Wy6dqZFDkCJ9DWFMJAA3GLj26S1o6w0KiS1AI
fGz1uXR8gB4q9M8T1HuoBBSNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUI3R4bofE
oOw9b6TAt4TkL+4AOm0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU3NjE1L0JBRjM4RThBOTFGNTExRjBCMzZCMDkzQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NzYxNS9CQUYzOEU4QTkxRjUxMUYwQjM2QjA5M0NDNEY5QUUwMi9JM1I0Ym9m
RW9PdzliNlRBdDRUa0wtNEFPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlp0MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBkDD4MA8EAgAC
MAkDBwAgAQ32HkAwDQYJKoZIhvcNAQELBQADggEBAD/Ad1EQAn5+ya5WaVyEwuG/
EHLzkHipGIntuxgefIef0LscudHzc5RWaQjWv7gXL13GpPUFN5sY3HAOZdVgXo1Q
3ejJMoJvnmlaQH0VhCWdsETnV2a7XVpSIeBAuxksID65NdfNymjmBK4phXcgKQZE
yJxQZO8c9U8kuyD7+yu4Y5L7Jp0Vt2qfZLbKNZfIhQm/cM58Pn8fErYRaRoNPJ+J
ugADqMomRZbA6Wuy3dX/zx2h3pCVnD0k8mMdOMjDScPb/FXwUGea1GTF/njr4R77
/y5kP1qzupoPQtQvZMueoldaQZIYY5jPSQIXVxpa9Xs8+NkPFEYFTAEpeS2i6pk=
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:35:49 2025 by rpki-client