Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer (raw, json)
Hash identifier: IIpB4vT+Hyr0q2rIoe3Jr1P2i/DTrwmZbnnlLOj6fPo=
Subject key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026437
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Sep 2025 12:20:45 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 148990
IP: 103.172.52.0/23
IP: 2001:df7:6280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 18:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156727 (0x26437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 9 12:20:45 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:91:da:1d:4a:9f:81:58:36:5c:c6:71:cc:
0b:d3:68:71:b3:17:19:a0:d2:95:fa:b0:a5:0f:2b:
57:ea:51:e4:44:fc:f0:4c:32:0c:af:9f:2f:70:fe:
ed:13:4a:ea:62:bf:37:3d:85:1a:f3:28:7e:c2:eb:
95:96:c9:4e:78:6a:69:14:03:0b:fd:5b:7c:24:82:
33:9d:23:97:04:5f:41:ad:95:e5:17:3f:5d:d3:0e:
fb:b0:3d:0c:e8:a5:b4:c3:73:62:bc:3e:b9:ac:db:
4e:81:4b:a3:33:ca:db:14:79:5e:fb:fa:c5:19:d4:
f1:a2:11:ec:4a:c0:e3:1f:b0:82:cd:3d:ab:4f:68:
75:e8:fd:35:2a:93:b3:2c:5f:92:56:7f:c0:91:b2:
02:c9:39:59:4b:06:9d:b6:9c:c2:e1:1f:c9:c4:42:
57:01:19:e9:81:bb:1f:95:ff:53:97:2d:6d:da:49:
fc:88:d4:ee:f8:27:91:af:05:d4:3f:ef:8b:aa:84:
21:7d:ac:3a:0a:31:26:18:59:bd:4a:24:35:e4:f8:
51:8e:ed:d1:5e:14:6e:3e:0e:89:fd:b2:8b:ad:94:
bb:4d:1f:45:c5:47:bd:0b:72:5f:47:16:82:bd:91:
17:e6:58:e4:b8:b4:56:a4:f0:5d:fd:77:2b:8b:89:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
148990
sbgp-ipAddrBlock: critical
IPv4:
103.172.52.0/23
IPv6:
2001:df7:6280::/48
Signature Algorithm: sha256WithRSAEncryption
d5:57:fa:80:51:c2:bb:78:61:69:00:fc:97:ca:8a:a5:0f:b5:
75:a2:96:fc:e4:91:a4:29:08:3e:a5:0c:c0:d3:88:00:d8:a5:
f7:d4:d8:76:dd:12:79:7c:98:2f:65:2e:8e:19:78:d1:4c:a0:
cd:de:f6:a8:35:e8:ce:fb:4c:ff:af:a4:23:ef:3a:53:3b:4b:
74:12:13:c8:18:e0:89:9f:f3:1c:18:a2:7a:7e:97:34:63:89:
47:15:88:be:d1:ba:59:a5:58:b2:9d:b3:90:1a:7a:a1:75:2c:
af:21:24:b6:12:ab:57:e9:70:7c:6b:80:99:dc:ab:ed:ca:d9:
72:a9:da:d2:42:a0:42:02:36:ca:da:3d:a2:37:b3:0a:36:42:
94:9e:07:f3:4f:a0:28:88:ee:9b:ae:a4:81:28:f8:46:e5:fb:
a7:c7:fc:02:4d:d0:2d:df:a2:b0:7d:3b:5e:ec:86:9f:6c:6d:
81:f3:47:b7:a5:57:8f:29:cd:d1:66:75:d2:b6:b2:c6:e1:32:
b0:96:bc:18:93:d5:9e:82:59:4a:da:8d:08:d7:bf:2b:af:53:
29:ed:af:e8:21:66:bd:2d:a8:21:05:3e:3a:b2:1e:6a:25:57:
ef:6d:ac:eb:ba:52:69:1e:dd:df:17:5a:f4:bd:99:67:a8:30:
31:08:09:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:16:24 2025 by rpki-client