Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
File: XS3RVLXc4h-3hsUm297xsEWSirg.cer (raw, json)
Hash identifier: OQzZXvjWnUoz87dAzDmM+BD/22awEiIWIxP4IQEer0M=
Subject key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0269EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Oct 2025 23:47:23 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 7707
AS: 9299
AS: 17796
AS: 24458
AS: 45664
AS: 131180
AS: 132508
AS: 132803
AS: 133754
AS: 134140
AS: 134154
AS: 134779
AS: 135499
AS: 135592
AS: 136227
AS: 137202
AS: 137417
AS: 137459
AS: 138036
AS: 138445
AS: 139040
AS: 139350
AS: 139639
AS: 139710
AS: 139867
AS: 141238
AS: 142648
AS: 147044
AS: 149519
AS: 152891
IP: 27.110.128.0/17
IP: 45.125.248.0/22
IP: 49.144.0.0/13
IP: 58.69.0.0/16
IP: 58.71.0.0/17
IP: 103.10.178.0/23
IP: 103.233.36.0/22
IP: 112.200.0.0 -- 112.211.255.255
IP: 115.146.160.0 -- 115.147.255.255
IP: 119.92.0.0/14
IP: 122.2.0.0/15
IP: 122.52.0.0/14
IP: 124.83.0.0/17
IP: 124.104.0.0/14
IP: 124.217.0.0/17
IP: 180.192.0.0/14
IP: 202.86.200.0/21
IP: 202.138.128.0/18
IP: 203.213.192.0/19
IP: 210.1.64.0/19
IP: 210.5.64.0/18
IP: 210.14.0.0/19
IP: 210.185.176.0/20
IP: 210.213.64.0 -- 210.213.255.255
IP: 2001:4450::/29
IP: 2400:f200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Oct 2025 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158190 (0x269ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 23:47:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:06:82:a6:89:2b:9f:d5:85:90:d5:61:c5:
ce:bc:c2:a8:fe:7c:d2:6b:74:24:4f:6a:af:cd:a2:
f1:9f:5b:f5:bb:fb:77:c0:64:57:51:76:86:6f:2e:
c8:4c:79:5d:f6:99:a7:a9:52:e3:6b:ea:54:a3:af:
15:7d:36:d7:f6:b7:55:6f:57:e3:eb:9e:4f:3b:76:
be:70:04:f0:8e:a9:5d:e4:75:d1:88:e5:9b:df:76:
e2:17:67:68:c7:43:f1:0a:a2:e1:dc:0e:0e:92:77:
51:70:3d:30:88:c3:5a:a7:26:71:db:58:f8:cd:25:
72:0d:02:6c:22:23:5b:b5:91:6e:47:7b:5b:f7:2e:
f7:d6:58:d1:c4:e7:21:b7:a4:2d:77:9c:81:33:b2:
ea:ec:df:fa:c2:ec:5e:65:15:0d:1f:01:3e:a8:c6:
ad:af:8f:82:e8:49:26:36:50:ef:e0:f0:cc:c2:3a:
ed:ef:9a:af:19:06:c2:4f:bd:54:a8:15:54:ab:d2:
57:b9:e1:a5:8d:f4:b5:0a:e4:0e:c5:07:8c:e8:d7:
1c:0a:55:96:aa:5e:aa:dc:77:44:3d:4e:8f:3d:f3:
af:b3:ca:a4:bc:26:2b:95:25:d2:e4:d8:c4:12:28:
33:63:a5:64:9e:25:1a:1b:62:04:98:3d:9d:64:54:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7707
9299
17796
24458
45664
131180
132508
132803
133754
134140
134154
134779
135499
135592
136227
137202
137417
137459
138036
138445
139040
139350
139639
139710
139867
141238
142648
147044
149519
152891
sbgp-ipAddrBlock: critical
IPv4:
27.110.128.0/17
45.125.248.0/22
49.144.0.0/13
58.69.0.0/16
58.71.0.0/17
103.10.178.0/23
103.233.36.0/22
112.200.0.0-112.211.255.255
115.146.160.0-115.147.255.255
119.92.0.0/14
122.2.0.0/15
122.52.0.0/14
124.83.0.0/17
124.104.0.0/14
124.217.0.0/17
180.192.0.0/14
202.86.200.0/21
202.138.128.0/18
203.213.192.0/19
210.1.64.0/19
210.5.64.0/18
210.14.0.0/19
210.185.176.0/20
210.213.64.0-210.213.255.255
IPv6:
2001:4450::/29
2400:f200::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ac:7d:c5:45:14:45:4f:45:ad:ce:ab:e5:85:b2:dc:f4:a6:
ec:4c:98:5f:8f:64:ef:b8:3b:b9:cb:0f:7b:4b:da:5f:01:35:
14:d0:5c:20:30:ce:d9:1c:dd:8d:50:66:95:bf:23:b7:ee:1d:
f6:5f:45:c7:10:c4:92:94:f6:4d:29:ff:5d:ce:2a:66:df:19:
a6:39:79:e2:2c:ec:42:20:35:02:51:8b:aa:d2:6e:1d:4c:b0:
e1:50:36:8b:29:ca:b9:78:b6:20:cf:30:5e:24:70:87:35:c3:
2d:2f:7b:8f:69:51:ba:a5:18:61:6e:3a:a8:34:53:60:11:fd:
96:31:00:58:ba:a9:e2:c3:6b:4d:0f:64:03:0f:62:eb:e3:86:
8f:e4:18:c0:97:14:e8:6a:db:e9:5b:2f:34:a6:1c:cb:09:60:
2e:04:46:bc:e7:9f:35:b7:14:e6:c6:8c:ed:52:97:f6:81:5f:
a1:bf:d6:09:87:53:d5:3f:82:81:82:aa:40:65:a3:7b:57:1c:
47:8f:5f:e8:6e:3e:0a:b5:5f:6a:16:ba:91:01:30:97:b2:d0:
d0:7e:1f:82:1d:7c:da:da:2e:bd:bb:28:97:ca:ae:0a:0d:24:
24:93:12:69:b6:5a:19:a7:19:7e:1a:f1:d9:1b:f9:1b:53:14:
e4:5a:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 16:13:43 2025 by rpki-client