Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
File: hHdPRraSCgXa3UJHe6qzbucka5Q.cer (raw, json)
Hash identifier: YpJv/YF79sr7MXLP7MSOa/Z2spIxM3CwLNLjdno122I=
Subject key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02712B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Oct 2025 18:08:48 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 24341
IP: 180.178.120.0/22
IP: 2401:8180::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160043 (0x2712b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 31 18:08:48 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:fd:5a:16:97:fe:d7:43:e2:20:ec:24:45:
e7:de:68:11:84:23:6d:73:04:7e:1c:f5:62:07:cb:
a6:f7:49:88:d0:d1:7f:83:9b:01:1e:cb:e7:bb:ad:
85:e7:22:a2:24:bf:8d:17:56:c1:be:5b:88:33:ad:
7e:29:73:ee:87:21:17:7c:d9:b4:a7:4f:d9:ee:69:
e6:a3:35:9e:1a:cc:9f:b5:e5:99:8c:b5:27:94:a8:
e5:c9:22:bc:3a:db:46:19:6f:1f:b9:c3:90:04:59:
23:24:79:5c:c8:da:3e:e3:b3:8b:b7:df:fd:22:cb:
ac:c9:1b:91:e9:e9:5c:a3:7c:62:06:34:7f:a3:5f:
f1:9e:07:c1:4b:73:de:ee:af:98:9d:f2:40:fa:5f:
e4:06:1c:eb:91:8a:4b:6c:d0:04:06:48:f3:8f:ed:
09:e7:24:46:d0:08:ac:45:53:ec:58:34:99:6e:3d:
3f:8d:7f:85:85:ef:4f:2d:ed:7e:f3:0e:ed:a6:b9:
06:c4:c4:8f:b5:d5:ad:d9:23:fa:9f:45:2e:00:4e:
ea:f2:6f:0e:90:47:c8:f7:bd:7a:66:26:c3:0a:78:
fc:00:9b:61:93:39:a5:c1:b8:f2:92:2e:82:b2:a9:
06:ab:42:42:5c:af:4d:8a:cc:98:ca:da:ef:26:56:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24341
sbgp-ipAddrBlock: critical
IPv4:
180.178.120.0/22
IPv6:
2401:8180::/32
Signature Algorithm: sha256WithRSAEncryption
20:bc:c5:15:4a:b7:79:10:c0:2b:e7:69:29:79:33:92:1f:7b:
de:e0:43:1d:b3:6c:f6:d2:8d:dd:9c:fe:b4:a8:4c:38:3b:2e:
71:20:86:bc:51:d5:eb:29:0b:1e:c0:d9:ac:86:c4:af:1e:64:
40:00:31:7d:00:65:bd:e5:ed:b5:51:ad:03:a3:3f:66:04:58:
99:9a:ef:ec:e3:d7:b9:0a:ca:7a:83:f3:84:91:18:3a:35:ec:
57:e6:01:3c:5e:8f:a0:83:a7:62:eb:ff:fb:60:0e:b7:e3:45:
53:06:e0:53:2b:28:d5:ee:b9:c9:5d:36:17:de:e1:cd:57:9d:
24:48:24:0e:a0:16:76:22:f4:27:69:03:99:30:7f:10:66:0c:
68:7e:73:f0:fb:7f:20:d2:f8:f7:d3:35:be:c8:d6:d0:4c:94:
95:82:87:6a:1d:75:9b:8d:86:08:b8:6d:b0:c2:64:b5:f4:d2:
7b:c3:e2:49:9d:b7:1d:bf:d2:a0:2d:b5:c1:31:b2:e1:3d:03:
cb:57:23:e9:c3:4f:94:94:39:c0:25:53:bc:a6:7b:d1:c9:26:
10:e8:39:3a:d5:9b:ae:b9:cc:37:fd:e1:c0:fd:0f:96:21:af:
b1:1b:37:63:31:7d:a4:09:f8:8e:d2:d3:af:ac:ba:d5:82:78:
40:ae:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:14:36 2025 by rpki-client