Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
File: JXqeaRTVinRbDuar5UjNvgIEiNQ.cer (raw, json)
Hash identifier: RqUDebbap1EH9BfRe/RdOpTo9elLUPMFMiH+axBjH7k=
Subject key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02705B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Oct 2025 23:43:11 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 110.44.108.0/22
IP: 2400:b040::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159835 (0x2705b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 29 23:43:11 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:2b:92:c2:19:57:6e:fe:ac:e4:73:14:59:
e9:2a:d2:7f:72:37:82:c3:11:83:4b:6e:88:af:53:
91:eb:aa:c5:88:21:34:65:48:0a:9e:fa:76:74:c8:
8a:0f:f3:e1:c5:fc:0b:d3:2b:c9:0e:26:4e:60:05:
24:4d:2d:ea:88:55:b6:87:7a:18:dd:b4:0a:29:3c:
ea:37:f2:2f:c4:57:f9:cf:69:f7:8c:1f:54:77:e9:
d2:b4:83:92:fa:41:85:ae:6d:4a:d3:6f:63:b5:5a:
5e:e7:ea:0f:97:70:90:34:ca:01:54:0c:13:ce:94:
0a:4b:34:95:64:96:99:6d:88:8d:5e:bc:8e:e6:67:
9e:5f:5f:f6:0e:cf:2d:d4:03:29:16:2e:76:fe:6a:
17:59:af:cd:1b:78:39:dc:7b:ef:35:7c:3c:ce:5b:
eb:60:b1:77:4d:22:b6:90:bb:af:54:c8:1a:0b:7d:
4c:a3:fb:4b:bf:f0:d5:2b:74:9b:1b:4b:8f:b9:f1:
89:ae:f8:76:46:f0:e4:6a:0d:33:79:b0:5e:1e:51:
bc:09:0c:6e:02:03:b6:c3:66:56:ec:ba:ef:bf:34:
29:68:f5:05:43:f0:bd:30:e6:0b:42:27:6a:4a:f5:
2a:70:ef:5f:a5:80:bb:32:fb:b6:de:66:8e:56:ec:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.44.108.0/22
IPv6:
2400:b040::/32
Signature Algorithm: sha256WithRSAEncryption
7b:06:30:5d:0e:4a:00:79:82:7f:c5:29:9f:1b:3e:7a:13:b9:
4e:bb:71:35:b8:2c:73:37:03:3e:3d:34:35:93:ab:24:d6:82:
51:43:04:87:f5:2a:f3:48:6e:a4:19:6c:3f:ad:15:9c:47:15:
75:b5:c2:67:0b:b2:d8:f8:3c:92:b4:d4:2c:f5:01:3f:dd:8e:
fa:81:e1:1f:1b:e4:2f:35:6b:8d:1c:ad:cf:8c:b1:f8:d0:9d:
f7:98:a7:17:e7:e7:c4:7c:35:f1:ee:98:3e:c4:91:95:a2:05:
70:cf:59:6e:1a:a5:e5:68:f3:1b:9c:dd:a1:6f:76:b9:b4:3a:
e6:d7:5b:aa:24:27:fc:41:cb:97:62:cf:36:f9:63:39:6c:2b:
e9:99:18:40:2f:9e:69:4f:79:e6:dc:f4:76:35:8c:0c:ed:07:
d4:c4:f3:68:f8:7f:57:bc:dd:90:1b:c4:9e:45:7a:7a:39:fe:
7c:5b:65:7c:d0:bf:1d:d8:75:e2:2d:a6:f6:27:4f:d7:15:1b:
52:2f:08:9e:df:6e:6e:3d:61:63:bb:de:e6:ef:9b:52:70:00:
aa:7e:f7:c8:d4:42:9a:c1:a0:a2:4c:60:73:d0:75:07:4b:2e:
75:f4:04:e7:b8:a5:2a:a4:9f:08:f3:47:19:d4:56:a2:dc:08:
48:52:ce:d4
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAnBbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAyOTIzNDMxMVoXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZB
QkU1NDhDREJFMDIwNDg4RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7dCuSwhlXbv6s5HMUWekq0n9yN4LDEYNLboivU5HrqsWIITRlSAqe+nZ0yIoP
8+HF/AvTK8kOJk5gBSRNLeqIVbaHehjdtAopPOo38i/EV/nPafeMH1R36dK0g5L6
QYWubUrTb2O1Wl7n6g+XcJA0ygFUDBPOlApLNJVklpltiI1evI7mZ55fX/YOzy3U
AykWLnb+ahdZr80beDnce+81fDzOW+tgsXdNIraQu69UyBoLfUyj+0u/8NUrdJsb
S4+58Ymu+HZG8ORqDTN5sF4eUbwJDG4CA7bDZlbsuu+/NClo9QVD8L0w5gtCJ2pK
9Spw71+lgLsy+7beZo5W7NO5AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUJXqeaRTV
inRbDuar5UjNvgIEiNQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUwMTVELzZDNDc0OTIwNzMxMjExRURCNzBCQ0UzM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJU
VmluUmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJuLGwwDQQCAAIwBwMFACQAsEAwDQYJKoZIhvcNAQELBQADggEB
AHsGMF0OSgB5gn/FKZ8bPnoTuU67cTW4LHM3Az49NDWTqyTWglFDBIf1KvNIbqQZ
bD+tFZxHFXW1wmcLstj4PJK01Cz1AT/djvqB4R8b5C81a40crc+MsfjQnfeYpxfn
58R8NfHumD7EkZWiBXDPWW4apeVo8xuc3aFvdrm0OubXW6okJ/xBy5dizzb5Yzls
K+mZGEAvnmlPeebc9HY1jAztB9TE82j4f1e83ZAbxJ5Feno5/nxbZXzQvx3YdeIt
pvYnT9cVG1IvCJ7fbm49YWO73ubvm1JwAKp+98jUQprBoKJMYHPQdQdLLnX0BOe4
pSqknwjzRxnUVqLcCEhSztQ=
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:16:05 2025 by rpki-client