Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.cer (raw, json)
Hash identifier: DiiGyVxUy7AaLnxou990kJEjhMzLt+qq18No64mZPwA=
Subject key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026EC1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Oct 2025 15:03:49 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 23729
AS: 132684
IP: 103.100.92.0/22
IP: 118.179.0.0/21
IP: 2401:bac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159425 (0x26ec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 23 15:03:49 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:da:ed:10:e2:68:eb:09:be:be:5c:2c:7a:
43:3b:1b:88:1b:42:37:19:86:4f:da:e2:0a:47:81:
08:35:b3:79:13:37:55:65:46:9b:7f:74:32:86:a8:
5a:65:f7:0a:8c:07:fb:78:67:d4:6b:11:b5:73:8f:
d1:48:d7:69:92:7f:f3:36:c3:f2:b4:8d:e6:33:cf:
33:d3:fa:8e:19:d7:59:9a:f2:9b:5b:75:25:01:5b:
bb:a9:57:02:b2:7c:31:ba:61:ad:ef:ab:f4:b6:7d:
90:09:e2:6c:c6:b3:2a:74:1e:9e:8c:14:cf:bb:fd:
54:51:57:02:e6:9b:79:74:02:cb:0b:54:97:f0:6b:
0d:59:4f:44:97:51:0c:9a:f8:0e:f0:87:52:ac:1a:
31:e3:15:be:09:bb:39:b4:4e:54:35:af:e5:42:aa:
21:26:cf:98:62:ab:ce:5b:9d:c6:27:b6:6e:c0:2e:
04:39:1d:81:06:dd:30:55:78:11:4d:9b:75:21:95:
58:e0:95:41:98:e8:bd:62:76:3b:c0:30:a2:af:b9:
34:94:d9:e2:8d:54:93:1c:76:9b:de:cd:ae:f7:7c:
5e:6d:5a:b0:29:d9:71:27:f8:92:72:a7:4c:c9:b6:
76:61:19:a2:a5:09:17:8b:5e:50:28:3f:da:69:e8:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23729
132684
sbgp-ipAddrBlock: critical
IPv4:
103.100.92.0/22
118.179.0.0/21
IPv6:
2401:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
02:0f:f4:aa:50:fe:98:52:4e:e2:db:01:80:1f:f6:70:b3:ed:
00:37:f8:2d:49:0f:bb:62:a8:3c:7b:69:ce:d9:e0:59:23:5b:
fe:bc:60:5d:58:5d:1e:7c:7d:00:99:05:fb:43:83:dc:9e:d2:
2b:02:41:2e:9e:15:29:e8:63:87:76:fc:d6:bb:d6:a2:b0:c7:
76:01:87:fe:b7:80:cd:50:8b:90:3e:f0:ae:81:31:ab:02:37:
8d:c7:52:56:d5:aa:8c:c7:c7:23:36:4a:5f:39:6b:5a:50:b3:
fd:e9:7d:a2:de:cd:09:6b:63:bf:e1:fd:d9:e4:30:3b:e8:15:
80:bd:68:c5:6d:46:0f:84:b4:ed:b6:91:97:33:7c:42:c7:37:
e9:73:49:14:6f:88:68:bb:07:c0:00:1f:a1:16:57:96:a2:a9:
f4:b3:38:b1:44:e1:6a:d5:57:12:27:8c:cb:3d:52:25:dc:9c:
5f:0d:31:7a:cf:c6:df:1d:03:7b:50:77:a2:4b:d0:72:b4:26:
b9:59:96:d8:c6:d1:22:02:0f:fb:57:6e:a8:6b:ca:6f:17:ca:
c7:5c:0e:c5:7e:a4:b9:6d:ca:63:2a:7a:b2:e6:bb:49:ae:5b:
35:fd:82:b1:31:7c:70:2c:af:8a:04:4a:93:d6:30:8a:de:34:
f4:98:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:13:23 2025 by rpki-client