Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
File: gxf8eoKw7oZSDfGP_VcpURbaXfI.cer (raw, json)
Hash identifier: argiAgv9Zjfa6tefcoiDJMxYRgWFE1smocGVASGtQcY=
Subject key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025DF4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 18 Aug 2025 13:14:24 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 45327
AS: 59241
IP: 116.90.64.0/21
IP: 203.20.152.0/21
IP: 203.56.87.0/24
IP: 203.56.90.0/23
IP: 2403:5600::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155124 (0x25df4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 13:14:24 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:4c:c8:fa:fb:76:6f:41:8c:66:14:be:bb:
ab:ef:44:d6:59:e0:87:cf:81:b0:ed:ff:79:dd:a8:
52:1a:f4:cd:31:c6:d8:c1:d5:6f:5b:5e:d6:8b:a6:
3c:a1:38:1a:c4:fe:fc:09:e1:d9:72:c7:8c:7d:b3:
5c:a2:04:1f:a2:79:63:58:36:33:44:0d:24:5e:d9:
e5:f9:b0:e5:e8:cd:ee:2f:0c:22:72:a5:d4:2f:13:
17:6b:83:93:e0:07:45:42:0b:4a:10:d3:8a:0d:16:
c2:9f:6a:38:96:22:5e:be:1e:24:f5:7b:42:93:b8:
fb:6a:b4:00:49:14:1e:ae:73:22:a9:25:07:1e:e0:
2a:15:85:5f:90:21:94:2a:c9:eb:88:47:96:fb:d4:
cc:d1:9a:9a:99:18:94:f8:f6:4d:cc:72:e9:a3:c6:
fd:85:b0:15:22:dd:d7:db:34:65:87:49:e6:9f:2f:
bb:7a:3d:98:a5:65:19:40:fc:09:ce:c4:9f:34:f6:
79:dc:28:6d:52:35:76:67:e3:a6:d9:62:56:57:fc:
f3:4d:3b:0e:69:54:8d:ec:8c:c0:30:b3:37:00:12:
d4:f8:07:89:9d:74:a5:92:50:fd:eb:8e:74:ab:8f:
49:ed:39:8a:70:87:1d:e0:3f:15:2a:f0:b7:5c:5a:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45327
59241
sbgp-ipAddrBlock: critical
IPv4:
116.90.64.0/21
203.20.152.0/21
203.56.87.0/24
203.56.90.0/23
IPv6:
2403:5600::/32
Signature Algorithm: sha256WithRSAEncryption
41:d3:95:02:02:d4:d7:81:de:d9:81:65:f7:b0:da:d5:8b:82:
b4:94:51:04:af:4c:2a:58:a8:ed:a5:be:66:b5:ea:d9:c1:cd:
2b:1c:ba:59:33:18:63:32:c9:2e:ca:81:d7:db:1e:34:1d:5a:
1d:88:d6:b1:e2:73:99:26:2e:c7:8e:58:f3:49:ac:61:62:e1:
bf:b2:b3:23:1b:3f:4e:fa:f0:70:6a:81:91:04:18:9f:a5:bf:
88:8f:1e:a8:c4:ce:53:05:ea:4a:61:b7:cb:6f:55:75:38:2b:
e6:99:a3:6a:41:82:8c:9e:67:7a:e1:bf:49:54:5b:4f:f5:65:
95:91:12:f9:8e:85:04:4a:d2:98:e8:a0:e6:4e:88:f9:0d:d2:
9b:cf:d7:81:34:b3:dc:e0:4d:ff:de:ae:cb:33:e0:77:18:a4:
82:f0:62:4d:51:6d:b6:0e:b4:6e:dc:4e:7f:ad:57:cd:0a:98:
0f:d2:59:63:6c:f8:13:c7:cb:7a:ae:ad:2a:99:71:c8:e9:87:
c0:df:d7:24:bf:86:c4:87:25:7f:93:26:8d:3c:7f:39:6a:0d:
47:a6:b3:98:42:7a:6e:cf:d6:89:f1:3c:f5:6a:e5:6f:6b:24:
39:aa:71:fd:86:ad:ba:6e:a8:29:4e:18:cc:7d:53:0e:fc:6b:
26:f0:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:23:29 2025 by rpki-client