Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer
File: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer (raw, json)
Hash identifier: ONhm4Lnndaex6LfzUP/kReYM3FTxf2lN/gEJyYy3ECQ=
Subject key identifier: 79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E18
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Oct 2025 02:34:05 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 38911
IP: 203.100.59.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159256 (0x26e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 21 02:34:05 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9136359, serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:65:df:67:ac:4e:48:27:d5:93:96:dc:0b:
81:ea:ae:7e:ff:04:88:46:f9:b1:60:f7:b9:3d:e8:
39:10:4f:b7:6f:f5:57:f6:bf:cd:c4:05:0d:44:e6:
bc:07:64:f9:80:71:7f:26:b9:ab:fe:a6:49:62:28:
8b:9e:e5:29:20:bb:86:42:58:d8:b9:39:05:9a:30:
cd:dd:43:0b:e4:7b:64:25:5d:df:c8:c6:f8:b8:00:
d6:57:fa:c8:b3:a4:b9:b5:cb:89:5f:e2:8a:a4:aa:
5a:59:b3:95:30:07:59:7c:ba:2a:32:f6:9d:a2:b2:
95:9b:bc:58:fb:24:33:0a:93:a1:44:6a:61:11:a7:
b6:bb:fe:79:b0:0c:c9:df:81:1c:02:36:fa:31:70:
06:b7:c5:f0:7c:71:67:49:05:65:8f:0d:dc:e4:6f:
83:3a:be:87:40:6e:d6:70:f9:9c:5a:18:ef:b8:bc:
8c:89:1c:88:b0:49:ca:4e:e6:a5:79:a4:63:40:c9:
da:6a:fe:05:be:e7:ac:69:fd:1a:21:4a:d6:c3:a1:
c3:ec:78:07:11:04:43:06:da:69:11:15:0f:74:f1:
d6:d4:eb:31:1d:3b:76:34:37:cd:71:27:d6:be:d0:
46:b9:5f:d9:c0:30:e2:b1:65:a4:ee:5b:95:ad:20:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38911
sbgp-ipAddrBlock: critical
IPv4:
203.100.59.0/24
Signature Algorithm: sha256WithRSAEncryption
10:17:65:91:f2:8a:77:5f:35:06:c5:54:93:d4:bd:65:bf:3d:
d0:47:42:14:20:79:9c:98:0a:6a:eb:31:54:1c:c5:d2:ce:ba:
20:af:0f:f5:23:34:a3:66:3b:a5:4f:41:9c:0c:21:66:06:43:
5c:17:02:04:8c:42:31:b6:8d:c0:25:f0:52:39:99:7d:7c:88:
d0:c3:ed:5c:b5:08:b0:de:9d:9a:37:50:bf:e6:df:51:63:69:
66:f6:d0:ea:95:08:69:3a:a6:e4:29:c1:61:d3:51:4d:90:f6:
3e:fd:f7:e0:30:b1:6a:74:0a:f3:59:26:5a:de:81:99:48:cb:
74:25:aa:13:f7:00:c1:02:1f:50:89:e6:cb:d3:3c:b3:93:a8:
39:0d:4d:9d:5f:bb:53:e3:83:4e:31:90:01:e6:55:8a:9b:57:
42:00:bb:2f:ab:61:11:e4:a1:d5:55:ef:d1:31:97:11:ce:37:
a2:f5:d9:52:14:31:62:0c:08:44:29:a5:d0:31:57:cb:74:01:
8e:42:38:66:1d:1c:1a:70:e7:fd:94:1b:1a:44:92:74:67:a6:
5c:93:8d:be:aa:8d:49:30:db:1b:4c:19:05:39:98:f7:a6:79:
19:f8:b3:e8:85:24:c5:fe:2f:03:ce:b3:29:b1:64:52:55:00:
47:d5:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:47 2025 by rpki-client