Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
File: SIcH43YxSt1UXMZgreziKYZME-A.cer (raw, json)
Hash identifier: GMswKIRdCrM/qrkUbQzbTUpisjYshbJv7sp6PvRFMWo=
Subject key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025E88
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Aug 2025 11:49:59 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 45530
IP: 45.113.60.0/23
IP: 103.6.182.0/23
IP: 103.23.246.0/24
IP: 103.43.136.0/24
IP: 103.200.108.0/23
IP: 202.94.90.0/23
IP: 203.160.137.0/24
IP: 2001:df0:265::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155272 (0x25e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 20 11:49:59 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:23:95:81:b1:6a:be:d5:52:7c:11:1f:90:
9a:11:ed:26:20:64:27:b9:e7:77:b4:19:6e:1b:b8:
ec:fa:18:7c:42:c5:e3:31:d6:06:cc:c7:ab:41:0d:
e7:42:26:3a:06:fd:3b:c3:55:c0:a7:6c:7d:15:86:
85:9a:b6:cb:fb:9b:36:ff:8c:ba:a4:59:31:42:6b:
8e:9d:27:72:01:7e:f7:33:10:cf:e4:3d:a7:c7:4c:
60:3a:c0:48:d5:b8:4c:94:69:60:69:6d:0c:15:1f:
1d:16:11:43:a8:7d:98:f0:00:d2:73:e6:2e:d9:57:
4a:47:99:b3:68:01:13:10:d9:6d:a8:16:71:20:ef:
22:f3:b8:2f:4f:1f:b6:17:7f:67:9b:9c:b6:7c:db:
80:eb:4e:3d:f8:7a:5c:56:53:00:f2:60:2e:f9:43:
9f:10:3a:a0:3b:f2:92:9e:e6:d7:bb:ad:4d:85:c9:
ce:07:b0:43:47:52:2a:96:18:89:25:9b:a1:bb:cd:
88:d8:3e:f9:7c:aa:23:72:93:5c:b6:bd:e8:3c:0a:
f1:0b:70:ea:18:e9:18:9c:9e:36:51:df:8f:76:9e:
da:42:d1:7a:11:3d:f5:75:c7:5a:28:bc:a6:b6:81:
60:bb:aa:94:a6:10:71:f9:ef:6c:d6:1d:06:49:be:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45530
sbgp-ipAddrBlock: critical
IPv4:
45.113.60.0/23
103.6.182.0/23
103.23.246.0/24
103.43.136.0/24
103.200.108.0/23
202.94.90.0/23
203.160.137.0/24
IPv6:
2001:df0:265::/48
Signature Algorithm: sha256WithRSAEncryption
bf:ef:ee:e4:83:f0:4d:9e:b8:0b:7e:f4:75:57:75:9f:6c:8a:
45:8d:c5:12:03:e0:dd:d0:a5:45:f3:b2:59:74:3e:44:d9:7c:
0c:4a:aa:6a:5d:e8:f0:9e:93:0c:24:92:f3:98:33:53:2a:83:
d8:df:57:5a:6d:3d:e6:1c:b1:ae:40:8d:f3:d3:85:7a:ea:a2:
09:2f:66:f9:31:1d:cc:79:85:3f:2b:88:27:14:1f:57:92:ff:
12:34:c0:d6:bb:ba:d9:30:1b:29:cb:13:62:97:f6:47:f9:80:
04:8c:c7:71:87:53:f5:4a:28:ec:86:fb:51:cb:ec:be:a5:e8:
26:7b:cc:5f:f1:64:c7:19:34:4d:3e:14:1e:35:d3:5f:1d:51:
05:b9:1a:7a:de:98:d9:c2:d0:4e:a9:54:6a:e3:7a:9f:ba:95:
40:9b:84:c8:30:ac:91:7c:3a:f7:e9:06:c6:22:19:f4:b0:21:
df:43:a1:92:ee:46:62:02:73:13:66:02:14:bb:05:9f:b4:f0:
12:76:4d:4d:5e:29:3f:c4:7c:8d:ff:ce:a7:21:2e:e0:28:4f:
3e:c2:8a:ec:fc:94:74:5d:a5:c3:b4:b7:f9:24:65:a4:63:c9:
65:4f:88:a4:53:dc:92:2f:da:e0:c4:c9:96:73:0c:af:58:3f:
06:43:28:aa
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIDAl6IMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgyMDExNDk1OVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTNCN0ExMTAvBgNVBAUTKDQ4ODcwN0UzNzYzMTRBREQ1NDVDQzY2
MEFERUNFMjI5ODY0QzEzRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCQSOVgbFqvtVSfBEfkJoR7SYgZCe553e0GW4buOz6GHxCxeMx1gbMx6tBDedC
JjoG/TvDVcCnbH0VhoWatsv7mzb/jLqkWTFCa46dJ3IBfvczEM/kPafHTGA6wEjV
uEyUaWBpbQwVHx0WEUOofZjwANJz5i7ZV0pHmbNoARMQ2W2oFnEg7yLzuC9PH7YX
f2ebnLZ824DrTj34elxWUwDyYC75Q58QOqA78pKe5te7rU2Fyc4HsENHUiqWGIkl
m6G7zYjYPvl8qiNyk1y2veg8CvELcOoY6RicnjZR3492ntpC0XoRPfV1x1oovKa2
gWC7qpSmEHH572zWHQZJvkdLAgMBAAGjggNEMIIDQDAdBgNVHQ4EFgQUSIcH43Yx
St1UXMZgreziKYZME+AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzQjdBL0M5OEQ1NUZBN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5M0I3QS9DOThENTVGQTdEQkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9TSWNINDNZ
eFN0MVVYTVpncmV6aUtZWk1FLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALHaMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQBLXE8AwQBZwa2
AwQAZxf2AwQAZyuIAwQBZ8hsAwQByl5aAwQAy6CJMA8EAgACMAkDBwAgAQ3wAmUw
DQYJKoZIhvcNAQELBQADggEBAL/v7uSD8E2euAt+9HVXdZ9sikWNxRID4N3QpUXz
sll0PkTZfAxKqmpd6PCekwwkkvOYM1Mqg9jfV1ptPeYcsa5AjfPThXrqogkvZvkx
Hcx5hT8riCcUH1eS/xI0wNa7utkwGynLE2KX9kf5gASMx3GHU/VKKOyG+1HL7L6l
6CZ7zF/xZMcZNE0+FB41018dUQW5GnremNnC0E6pVGrjep+6lUCbhMgwrJF8Ovfp
BsYiGfSwId9DoZLuRmICcxNmAhS7BZ+08BJ2TU1eKT/EfI3/zqchLuAoTz7Ciuz8
lHRdpcO0t/kkZaRjyWVPiKRT3JIv2uDEyZZzDK9YPwZDKKo=
-----END CERTIFICATE-----
Generated at Fri Aug 22 14:22:39 2025 by rpki-client