Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer (raw, json)
Hash identifier: NHaWlRkWZPYWoiGmMWTOX4ETTXrUFfwB1MdR4KwWkic=
Subject key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027311
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Nov 2025 20:17:32 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 23958
AS: 23960
AS: 24183
IP: 45.125.168.0/22
IP: 103.226.32.0/22
IP: 202.20.0.0/21
IP: 202.68.80.0/20
IP: 202.174.176.0/20
IP: 2402:9e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160529 (0x27311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 4 20:17:32 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:ce:a8:df:fe:99:c3:09:cd:0d:58:53:ac:
06:54:a7:b7:2b:46:4d:d8:11:32:ff:d5:77:c1:28:
2d:1d:71:47:b7:48:38:06:05:a7:86:ff:b3:8e:54:
b1:ba:ad:a4:e4:09:00:dd:14:3b:d2:63:78:a3:80:
6a:e3:12:95:33:07:31:83:5d:7c:d2:86:90:db:7c:
a3:d6:17:d1:29:64:ca:58:ae:da:22:65:fc:fe:a7:
ef:f7:20:dd:04:6a:3d:31:84:f0:e6:7a:91:42:23:
f5:27:b7:dc:f1:46:bc:09:ca:22:08:19:39:f8:9e:
60:ff:4e:31:b4:e0:36:33:a1:5d:eb:54:74:a3:65:
57:33:7f:23:5e:ae:a0:be:d8:48:ff:71:98:03:fe:
8a:b0:9d:71:e3:5d:d8:62:f9:6a:9f:af:43:78:dd:
71:61:54:1a:a8:c7:0e:73:ec:5c:ca:8e:79:f2:9d:
13:b8:27:f6:cd:ce:5a:73:85:21:e4:93:c4:db:2b:
95:05:2c:8e:bc:9c:3d:2a:20:5c:61:04:9f:40:4b:
c2:f3:cd:23:6d:21:b4:7b:51:8b:a7:42:33:89:4c:
5f:86:c1:45:20:ef:53:e7:74:bc:3b:62:d1:c8:bc:
a8:15:60:ad:7c:35:4f:53:1a:7c:ff:49:68:e6:28:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23958
23960
24183
sbgp-ipAddrBlock: critical
IPv4:
45.125.168.0/22
103.226.32.0/22
202.20.0.0/21
202.68.80.0/20
202.174.176.0/20
IPv6:
2402:9e00::/32
Signature Algorithm: sha256WithRSAEncryption
91:af:60:2a:41:d4:0b:0d:d4:97:3a:69:5f:ab:90:bb:a1:1c:
ca:de:06:5b:3e:b7:5f:e6:ae:6f:25:3e:f9:20:c5:a3:32:27:
5e:84:4e:cb:d5:fc:54:a3:b1:50:35:67:b3:3a:f2:f4:df:9a:
5a:42:81:5e:5c:19:8d:7c:17:ae:c5:03:df:c9:a1:cb:1b:05:
dc:7a:13:be:12:a1:38:44:eb:cc:e3:5d:eb:62:62:1a:9a:f3:
e7:10:a8:ab:ab:c0:0d:c8:7d:25:c1:00:5d:cb:7a:44:19:c7:
2b:46:d8:aa:84:f4:39:2c:21:ec:80:72:f8:61:b3:57:8c:19:
41:b3:c2:18:45:47:6d:02:5b:5f:a6:f7:b5:4a:18:de:fd:50:
3a:70:a3:3f:f7:42:b4:1b:b3:b0:32:df:ff:8f:f3:28:b9:e7:
cb:0a:75:02:96:f5:77:64:95:c6:c6:fc:9d:0a:9d:18:d7:f8:
7b:e3:69:42:64:e8:6a:80:86:99:97:35:ed:30:08:2d:9e:33:
03:ce:ef:40:dd:37:d2:92:d0:47:23:9f:63:58:4f:7b:d1:1e:
fe:67:ef:2a:e9:1d:40:45:b7:5b:b9:6c:91:a1:86:bd:12:92:
9a:ee:2b:b0:30:a6:2e:8a:79:a7:cc:be:72:ef:57:63:ce:95:
ea:e7:4f:7d
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIDAnMRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTEwNDIwMTczMloXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5
N0U2QUQ4QzFEMjRCRDI5OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC85s6o3/6ZwwnNDVhTrAZUp7crRk3YETL/1XfBKC0dcUe3SDgGBaeG/7OOVLG6
raTkCQDdFDvSY3ijgGrjEpUzBzGDXXzShpDbfKPWF9EpZMpYrtoiZfz+p+/3IN0E
aj0xhPDmepFCI/Unt9zxRrwJyiIIGTn4nmD/TjG04DYzoV3rVHSjZVczfyNerqC+
2Ej/cZgD/oqwnXHjXdhi+Wqfr0N43XFhVBqoxw5z7FzKjnnynRO4J/bNzlpzhSHk
k8TbK5UFLI68nD0qIFxhBJ9AS8LzzSNtIbR7UYunQjOJTF+GwUUg71PndLw7YtHI
vKgVYK18NU9TGnz/SWjmKEkvAgMBAAGjggM9MIIDOTAdBgNVHQ4EFgQUgCGxa5JC
H3e3Jg6X5q2MHSS9KZowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzNkJFL0NBMDY2NjhDRTQ0ODExRUE4MTBCMDM4MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVK
Q0gzZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQgBAf8EEjAQ
oA4wDAICXZYCAl2YAgJedzBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAi19
qAMEAmfiIAMEA8oUAAMEBMpEUAMEBMqusDANBAIAAjAHAwUAJAKeADANBgkqhkiG
9w0BAQsFAAOCAQEAka9gKkHUCw3UlzppX6uQu6Ecyt4GWz63X+aubyU++SDFozIn
XoROy9X8VKOxUDVnszry9N+aWkKBXlwZjXwXrsUD38mhyxsF3HoTvhKhOETrzONd
62JiGprz5xCoq6vADch9JcEAXct6RBnHK0bYqoT0OSwh7IBy+GGzV4wZQbPCGEVH
bQJbX6b3tUoY3v1QOnCjP/dCtBuzsDLf/4/zKLnnywp1Apb1d2SVxsb8nQqdGNf4
e+NpQmToaoCGmZc17TAILZ4zA87vQN030pLQRyOfY1hPe9Ee/mfvKukdQEW3W7ls
kaGGvRKSmu4rsDCmLop5p8y+cu9XY86V6udPfQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:22:53 2025 by rpki-client