Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
File: glI0BAdpP4vHwTIlP0BsBORndvY.cer (raw, json)
Hash identifier: WUiKj2AmREIRHz51JKYQehT+XSBVLC2wHIR+tmvht1M=
Subject key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E95
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Oct 2025 17:37:32 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 150352
IP: 103.17.176.0/23
IP: 2400:b5e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159381 (0x26e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 22 17:37:32 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:e0:e2:e7:b8:0d:80:f7:a4:d2:cb:ab:1a:
d6:08:5a:33:96:b5:c5:8d:00:8b:55:20:75:1d:8e:
50:00:89:06:d7:c7:91:b1:cc:f8:00:9d:15:59:fe:
70:ec:10:98:f6:a9:a1:5b:4b:e8:44:8e:f3:f0:38:
27:79:81:d4:05:be:9b:c5:b0:4c:15:34:53:8f:a0:
54:3c:b4:1e:51:ee:64:43:b7:0b:e7:e2:10:e1:f6:
1d:a4:46:88:0e:ac:d1:3c:fd:16:f5:cf:44:22:e5:
3f:67:c5:70:85:3f:dc:22:c3:28:5f:da:6b:fb:62:
fa:da:f1:0c:d0:4e:a1:6a:b8:50:b5:9c:23:88:b4:
65:0c:a9:4c:f5:77:49:49:a3:59:5f:c7:07:9d:06:
59:91:25:17:29:80:37:ae:86:2d:55:ed:bd:29:75:
ed:e5:7c:8c:25:35:6f:b7:2f:ae:17:ec:a0:54:f2:
9d:d2:b4:26:de:45:0a:74:ec:7f:2c:61:f6:18:72:
4b:36:c4:38:45:f5:cf:66:a8:42:7e:fd:05:02:da:
29:d6:bc:d2:47:0b:21:98:19:e1:8b:b3:53:e1:f7:
69:ce:51:33:21:99:eb:bb:00:59:07:db:e7:af:1c:
d1:52:62:a1:76:0b:f2:18:e7:f6:3f:63:0f:16:25:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150352
sbgp-ipAddrBlock: critical
IPv4:
103.17.176.0/23
IPv6:
2400:b5e0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:3e:de:17:5b:7b:77:d9:43:22:86:b3:a3:77:34:2a:bb:47:
1e:e6:90:59:9f:83:21:51:2e:6c:a5:9d:b2:3e:19:17:85:33:
b1:82:df:24:a4:0e:33:99:90:8e:5d:17:a5:8e:35:82:78:c6:
0e:53:da:0d:3e:ae:fd:e8:9f:b2:ec:7e:d9:f3:68:f2:68:e6:
37:ee:66:aa:e3:d1:c0:cd:4f:ac:50:a8:e0:ee:c6:ba:ac:51:
12:e3:39:94:c6:6a:27:77:91:9b:96:96:4c:ba:f2:8a:c8:3e:
2b:e2:34:00:7f:94:eb:b8:ce:c0:c3:c0:f3:ce:eb:d3:ac:fa:
27:70:9e:13:67:b5:42:87:07:87:de:61:af:b4:e6:2c:4f:c5:
fc:19:1d:e0:d4:1d:2b:95:e8:cb:16:52:e9:5f:f9:e5:10:3e:
bc:4c:db:e8:07:0c:56:e0:41:cb:c2:d3:22:47:0c:e5:ad:fa:
4c:94:4c:79:91:99:ec:2b:f9:c7:40:fb:24:9c:7d:c3:da:95:
41:6b:3b:d9:08:39:92:d3:9b:bc:0e:0d:38:66:84:69:1a:99:
68:b5:32:96:1a:e0:2f:30:2e:15:cc:09:c1:08:1e:1d:93:5c:
4d:17:2f:c9:dc:66:41:93:9c:99:24:e7:1e:a2:14:59:99:69:
70:89:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:15:08 2025 by rpki-client