Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cn1G1OfHecpnYSxgtGVS68IZkPs.cer
File: cn1G1OfHecpnYSxgtGVS68IZkPs.cer (raw, json)
Hash identifier: sE1TqgC4xiSnwE/t7p4kpuo4FDNRhslSTpzhyNoY7qk=
Subject key identifier: 72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0264F5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 Sep 2025 22:15:46 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 132146
IP: 27.123.228.0/22
IP: 103.71.12.0/22
IP: 2001:df3:d200::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 21:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156917 (0x264f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 11 22:15:46 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91D4D97, serialNumber=727D46D4E7C779CA67612C60B46552EBC21990FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:91:43:6f:7f:91:6f:fa:58:2b:63:8b:36:
fe:60:b5:21:cc:34:0c:42:aa:44:d2:a8:af:d7:2c:
a6:34:da:fd:8c:6e:a7:15:65:fc:8c:33:61:f6:86:
5d:3b:0b:3f:d8:6d:8c:49:60:b0:de:a6:c9:00:21:
3e:ce:a9:ac:58:97:13:9e:86:20:89:77:31:a0:fc:
58:aa:56:93:10:a5:51:e0:d8:ca:7c:2e:64:01:da:
7c:87:54:1e:a6:b4:94:8a:a9:26:6d:42:f2:79:61:
4b:62:ae:14:65:0f:38:78:34:72:05:63:e6:9e:1a:
0d:57:75:e5:04:9c:f0:70:a3:08:b8:01:5a:7f:20:
b1:42:68:a4:50:b9:0c:85:e1:d7:2b:e8:9f:ab:8c:
fb:83:04:a3:c3:c0:d8:a8:c8:1b:13:52:6f:ff:6f:
5e:9b:f4:50:45:ce:c0:d4:7a:05:a0:22:d0:16:26:
98:4d:d9:48:0e:5c:8a:05:99:86:24:76:53:9b:59:
71:f2:c4:1a:df:8b:f3:26:d7:8e:17:c4:99:e8:a9:
1b:e1:8b:3b:dd:fe:c9:2e:25:ef:f5:a7:00:b3:a3:
24:12:fe:99:6b:75:0e:92:87:77:7f:be:c5:43:71:
91:2a:b2:e7:a3:5b:b8:05:cc:3e:bc:ab:a5:12:58:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132146
sbgp-ipAddrBlock: critical
IPv4:
27.123.228.0/22
103.71.12.0/22
IPv6:
2001:df3:d200::/48
Signature Algorithm: sha256WithRSAEncryption
53:1f:b6:68:47:55:67:c8:14:cf:54:21:bc:1a:df:76:31:a2:
5a:88:95:d2:ff:1e:c8:43:93:96:10:b3:15:ef:d3:ce:d4:d1:
f7:05:bf:d5:ae:59:1a:ec:77:70:1c:0a:86:27:c7:38:68:b1:
c7:da:9c:ca:0f:29:8e:d0:c9:bf:e1:67:ba:d7:f2:da:1d:67:
06:b0:91:bb:2d:a0:5e:7d:16:1d:cb:eb:99:0e:90:64:5c:0a:
1f:6b:3d:f5:9a:88:83:ca:79:f8:2d:0c:61:46:91:fa:ee:40:
da:10:fa:34:1c:d5:aa:dc:aa:d5:a7:6c:70:c8:9e:f5:29:0a:
4a:c4:c8:ff:d2:14:65:3e:07:1a:f7:b2:8b:d6:f3:fa:c7:88:
d2:1b:c4:b8:28:be:e5:5d:40:18:74:76:8f:48:49:ba:76:91:
93:fd:09:64:ac:d2:22:70:f2:59:77:fa:1c:52:21:13:5e:d3:
26:52:34:b3:9e:ef:ff:2f:2a:5e:79:0a:89:22:d7:5f:87:6a:
3b:44:10:5e:2a:a9:66:54:31:74:3a:14:56:aa:4f:82:93:03:
74:ea:a8:62:f0:58:0f:d6:f0:cb:c0:7a:56:78:dd:b5:18:a3:
db:cb:77:6f:3c:53:3b:32:0f:68:dc:0b:f0:65:1b:32:ab:b4:
13:cf:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:49:50 2025 by rpki-client