Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer
File: c9kAkk5wFUjm4yA4gPbAlypMKRo.cer (raw, json)
Hash identifier: XoH7iz6/z9j7dxPGYY8q/8Zjng7AWQCgf3ORr6WdUwg=
Subject key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026FDF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Oct 2025 20:27:48 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 58411
IP: 43.252.148.0/22
IP: 103.242.140.0/22
IP: 2401:1380::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 16:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159711 (0x26fdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 20:27:48 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:e9:63:e6:aa:63:95:7e:99:d3:15:5c:19:
1d:12:59:4e:d0:74:0b:2b:cc:b0:ef:ee:21:48:de:
64:ff:8b:62:1d:38:15:1a:3c:64:f8:1e:42:06:18:
e7:96:9d:85:5e:1f:de:ea:f6:3a:7f:c5:00:ad:e4:
4b:0e:15:82:22:cf:a5:74:fe:3c:25:44:62:87:19:
5d:97:e2:8d:ab:91:00:e7:a7:28:79:88:8a:f7:f0:
ea:70:92:6a:99:b8:41:29:d5:25:80:5c:24:22:33:
1f:48:5e:92:4c:60:f6:24:88:d6:de:49:2c:8f:24:
9e:d7:5b:a0:f6:47:49:1c:c4:a2:d5:da:da:a3:95:
59:17:3a:4e:c2:94:c4:61:81:d9:49:cc:95:55:31:
6b:2b:53:23:64:fb:40:1e:a5:ec:2f:b9:e2:0c:0a:
de:d8:35:2f:0e:51:59:c5:bb:c6:c9:0c:30:58:bd:
fe:a7:8a:85:54:10:d6:6a:73:4c:90:35:fb:5c:40:
8c:3e:0e:8c:85:d4:27:9e:6b:2b:95:a7:cb:0e:e9:
9b:ca:af:e1:06:8d:5d:de:48:db:fc:6f:c5:e7:1d:
35:67:b0:33:87:79:d9:2d:15:9a:b4:bd:61:91:8b:
59:cf:65:19:25:9f:70:ab:31:f8:00:69:9b:cc:e4:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58411
sbgp-ipAddrBlock: critical
IPv4:
43.252.148.0/22
103.242.140.0/22
IPv6:
2401:1380::/32
Signature Algorithm: sha256WithRSAEncryption
3a:e2:4f:5a:83:15:a8:2b:55:f2:a6:44:45:ee:59:7c:3e:ea:
82:25:32:c9:70:be:d3:51:4f:26:3f:5f:62:b8:e6:19:3f:f6:
e0:a0:93:1c:d7:86:1a:4a:1d:9b:79:d3:2a:35:d1:c5:dc:39:
2e:65:40:a5:8e:b7:1e:18:85:2b:c0:9c:72:8b:14:9e:da:18:
f4:c7:0d:93:2f:72:51:98:24:49:dc:88:25:2e:45:9e:6c:1e:
75:0f:e3:13:14:24:27:95:4d:83:28:ab:fc:d1:34:08:65:49:
b2:6f:c8:53:36:32:b7:0a:96:e4:4e:ac:f8:77:60:67:de:0a:
ce:8d:47:3d:83:4b:4a:f7:21:db:69:9b:bd:07:3f:ab:5c:65:
18:9f:f2:84:3b:c0:db:64:f3:78:37:cb:c5:40:d2:fb:13:0c:
70:21:e8:5f:6a:55:60:c6:0b:9a:f1:6f:2f:74:b2:29:9c:6c:
52:d2:d8:80:c5:9e:98:1d:fb:14:f4:01:e7:e9:93:d4:fb:30:
e0:6a:b6:bf:3d:fc:21:1b:69:8c:b0:6e:94:cf:63:56:15:30:
15:fa:3e:15:f4:24:a3:5d:0e:5b:d1:b1:9f:16:38:86:e8:7c:
9c:e4:c9:65:d4:ec:84:b5:7e:5c:3e:c3:a3:c8:d7:d4:82:13:
d3:4e:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 17:52:31 2025 by rpki-client