Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
File: OS824KRQBTw9xm0uOJThDKcz3aY.cer (raw, json)
Hash identifier: voy7CP921FgrXhfKrgQR8wVJhgnHQYCxKcz9xP8nF6g=
Subject key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0260E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Aug 2025 20:44:46 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 103.68.192.0/22
IP: 121.54.188.0/22
IP: 2403:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 08:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155875 (0x260e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 20:44:46 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:f2:a0:0e:f1:96:bf:9a:62:b6:df:c6:36:
a8:4e:b7:30:e3:f5:44:18:76:f2:41:4a:f5:8e:5a:
09:33:b9:00:96:1e:cf:c0:18:a6:1b:d6:49:b1:98:
bc:b1:e2:d8:49:17:ed:6c:2b:2d:d0:19:1b:45:10:
34:6e:78:a8:9e:9d:c0:b9:cb:77:d8:b0:09:c2:6c:
ec:a8:16:43:23:31:94:83:31:bc:d0:cd:c9:5c:4b:
be:6d:70:38:89:8f:14:24:56:b2:b3:32:d0:66:bc:
4f:d3:d0:2e:bf:c1:80:21:5d:44:9b:8d:57:e8:d1:
fd:bd:69:36:44:a8:65:ad:13:32:0b:b3:fa:88:fd:
d1:c4:95:ac:e6:e6:96:07:a8:67:ae:fc:3e:4f:5f:
b2:9c:4d:20:e6:3d:d5:99:e0:c8:05:bb:26:07:a5:
4b:8e:8f:53:92:e9:90:ab:f8:f6:b1:f8:40:ab:c9:
c8:1d:d6:2c:2a:24:2e:af:90:c0:ac:ed:3e:72:32:
5b:63:05:91:6c:64:81:b7:28:af:53:61:74:47:68:
3e:73:79:35:b5:c6:22:88:85:3b:d8:10:ee:54:9f:
1e:bd:94:7a:94:a7:f6:74:d6:a0:a4:9b:7d:16:cf:
86:dc:dd:ef:04:2d:b4:85:6d:7f:c5:33:41:84:78:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.192.0/22
121.54.188.0/22
IPv6:
2403:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
18:45:cb:71:15:4b:01:af:0f:98:a9:6c:28:3b:5d:23:86:b1:
49:34:94:81:22:f9:ab:0c:ee:5d:90:e4:c9:6d:e0:99:7a:03:
76:64:92:c8:f1:ed:d7:9b:c0:b6:ab:20:6d:0e:95:82:2c:4b:
25:eb:e1:cc:f6:fa:a5:2a:00:4a:d8:24:36:7f:cb:13:dc:95:
64:34:44:a4:86:9d:bd:04:05:dc:42:a2:d0:a4:4e:83:34:6f:
dc:36:b3:06:ba:d4:ec:8c:a7:b0:1a:39:80:fd:be:14:bf:90:
c7:43:00:2b:f1:20:a2:56:b6:4d:c4:cb:89:9e:02:0e:bc:77:
d3:57:fd:c3:66:aa:4d:7c:9a:69:1b:e2:aa:af:c4:38:e3:c2:
a1:9d:92:3d:fd:4f:07:01:80:07:4d:84:5f:8b:5b:13:bd:5d:
f6:42:c7:85:12:ab:61:3e:3b:af:9e:bd:b2:57:75:03:cd:38:
66:48:37:a7:4f:4e:2f:11:ee:67:df:3c:67:13:1e:f5:ca:19:
f5:b5:fa:a1:85:e1:31:15:40:ed:29:47:63:21:45:9f:2d:1a:
ef:02:dc:73:a6:50:ac:8d:08:d6:54:73:6d:6e:48:bb:bc:fa:
cc:90:0b:7f:d4:84:ed:cb:c7:52:f1:13:3d:6c:59:8c:15:37:
18:45:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:07:57 2025 by rpki-client