Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
File: SIcH43YxSt1UXMZgreziKYZME-A.cer (raw, json)
Hash identifier: b4HCfMiJ29kWVAfZa9V3gzOXxyMA235aD/0E7bNetxk=
Subject key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026DFF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 17:05:35 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 45530
IP: 45.113.60.0/23
IP: 103.6.182.0/23
IP: 103.23.246.0/24
IP: 103.43.136.0/24
IP: 103.200.108.0/23
IP: 202.94.90.0/23
IP: 203.160.137.0/24
IP: 2001:df0:265::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159231 (0x26dff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 20 17:05:35 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:23:95:81:b1:6a:be:d5:52:7c:11:1f:90:
9a:11:ed:26:20:64:27:b9:e7:77:b4:19:6e:1b:b8:
ec:fa:18:7c:42:c5:e3:31:d6:06:cc:c7:ab:41:0d:
e7:42:26:3a:06:fd:3b:c3:55:c0:a7:6c:7d:15:86:
85:9a:b6:cb:fb:9b:36:ff:8c:ba:a4:59:31:42:6b:
8e:9d:27:72:01:7e:f7:33:10:cf:e4:3d:a7:c7:4c:
60:3a:c0:48:d5:b8:4c:94:69:60:69:6d:0c:15:1f:
1d:16:11:43:a8:7d:98:f0:00:d2:73:e6:2e:d9:57:
4a:47:99:b3:68:01:13:10:d9:6d:a8:16:71:20:ef:
22:f3:b8:2f:4f:1f:b6:17:7f:67:9b:9c:b6:7c:db:
80:eb:4e:3d:f8:7a:5c:56:53:00:f2:60:2e:f9:43:
9f:10:3a:a0:3b:f2:92:9e:e6:d7:bb:ad:4d:85:c9:
ce:07:b0:43:47:52:2a:96:18:89:25:9b:a1:bb:cd:
88:d8:3e:f9:7c:aa:23:72:93:5c:b6:bd:e8:3c:0a:
f1:0b:70:ea:18:e9:18:9c:9e:36:51:df:8f:76:9e:
da:42:d1:7a:11:3d:f5:75:c7:5a:28:bc:a6:b6:81:
60:bb:aa:94:a6:10:71:f9:ef:6c:d6:1d:06:49:be:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45530
sbgp-ipAddrBlock: critical
IPv4:
45.113.60.0/23
103.6.182.0/23
103.23.246.0/24
103.43.136.0/24
103.200.108.0/23
202.94.90.0/23
203.160.137.0/24
IPv6:
2001:df0:265::/48
Signature Algorithm: sha256WithRSAEncryption
22:0c:92:f8:7d:d2:1b:62:f4:c3:46:c1:73:03:62:4f:b6:b3:
b3:c2:29:30:24:be:b0:d3:d1:6c:64:82:88:af:67:77:e3:d8:
cc:45:a1:9a:e5:38:60:51:bd:e9:cb:8c:6b:d9:4e:f2:b4:76:
0e:01:7c:86:c4:2a:e9:7d:83:52:01:e4:b6:c7:d9:67:bb:5f:
ca:fa:82:66:0d:b4:66:47:46:38:14:03:ae:8a:2a:c2:60:9e:
c4:38:8f:16:20:e6:de:e1:7a:e7:bd:c7:63:0a:b3:15:70:92:
fa:b3:6c:b7:bb:95:43:7b:d8:f2:ef:2b:b1:df:03:4c:5d:da:
f0:9b:43:41:ff:97:d8:d1:da:49:7a:ce:f2:f5:d3:d1:33:e4:
b9:0c:30:5e:bb:3e:82:20:2e:6b:04:ad:ba:49:55:cb:6d:f9:
47:6c:18:3c:68:a1:34:c1:ac:ff:3c:19:d4:fb:d1:00:be:4b:
b4:d7:66:cb:73:7b:0f:5f:0a:eb:27:d7:cc:3d:92:85:2b:df:
ac:3f:db:f6:ca:5e:af:23:70:35:99:60:04:76:8e:1d:27:6d:
dd:ef:2f:a1:fb:d9:4e:35:b5:69:26:27:dd:37:fa:49:44:b6:
30:6e:1e:24:45:a2:56:3d:74:6e:bd:54:88:7c:39:22:2e:01:
2c:a0:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:24 2025 by rpki-client