Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
File: m1pTZdorJfppi3Awk8-9wqLCP88.cer (raw, json)
Hash identifier: 2N3u2UFmTr92TKeJo8Y72696UFVWPMZBYPn1cHoU2w8=
Subject key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02659E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Sep 2025 04:07:47 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 135339
AS: 152177
IP: 103.214.156.0/22
IP: 144.48.112.0/22
IP: 2407:ea40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157086 (0x2659e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 04:07:47 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:78:e5:88:0d:e4:54:82:fb:be:6a:04:e0:
69:c7:f5:61:69:33:cf:18:d6:72:2a:d5:08:8f:35:
b5:c0:45:e9:cd:4d:77:b7:9f:2b:a3:54:b1:d2:b4:
3c:93:2b:e2:62:2a:cd:64:d3:b8:ef:ef:9b:8e:c0:
86:79:60:06:ec:35:89:11:43:ac:9f:75:5d:b3:de:
e0:cd:cf:fd:c5:19:94:5a:9c:28:2d:43:2d:8c:e2:
05:47:27:13:91:e8:c2:ff:1b:bb:ed:37:ad:bf:42:
16:43:1b:61:4b:03:34:cd:84:3f:50:0b:03:f4:b5:
e1:58:91:10:e2:6d:4d:3f:96:63:ef:40:fd:6d:c5:
fa:51:96:48:94:a9:03:b2:a2:2c:2e:bd:19:97:25:
80:11:8e:29:49:64:09:c8:06:ed:92:3a:f3:b6:b2:
2d:8c:2a:31:99:45:27:9b:b2:93:dd:38:9b:2e:0e:
48:9a:64:ff:d2:2b:53:ab:c0:8a:96:9d:3c:01:7e:
7c:2c:0b:58:96:08:ce:3a:76:20:26:16:b6:54:4c:
8c:25:b3:8a:bf:b6:30:07:99:23:3b:4d:e5:c3:1d:
8f:9a:fe:49:bf:62:48:50:ce:d6:9a:18:34:57:17:
8f:03:19:4f:1a:03:bd:2f:77:00:31:91:18:05:cf:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135339
152177
sbgp-ipAddrBlock: critical
IPv4:
103.214.156.0/22
144.48.112.0/22
IPv6:
2407:ea40::/32
Signature Algorithm: sha256WithRSAEncryption
16:35:84:fb:00:0d:41:f7:97:da:fe:9e:4d:3c:be:27:36:4a:
58:97:ef:35:42:45:29:9b:e6:b2:3a:e0:d9:bb:41:54:14:c8:
52:50:b6:9f:70:ed:e4:3c:aa:65:24:f4:54:98:6a:16:25:ab:
3a:28:67:98:47:31:c1:2d:88:7b:c1:7e:ee:00:6d:bd:3b:49:
7b:48:79:b8:3e:08:6f:04:e3:3a:00:33:fd:e5:11:af:62:43:
28:39:1b:7a:6f:fb:32:06:14:0d:bb:d3:ff:2c:9e:8d:e6:21:
63:77:8e:05:9b:3b:2a:0a:e1:21:e3:13:c8:de:72:12:06:32:
02:a0:c1:f5:39:7b:80:54:4a:05:40:7b:45:e0:57:b2:a5:d3:
5c:6f:2d:2e:c4:15:cf:43:9e:1a:dd:82:da:c4:3f:c7:b5:f5:
70:a4:73:23:90:fa:e3:a4:53:f8:d7:a5:24:1e:2d:a7:86:76:
06:af:85:94:c1:e1:62:62:d9:a6:16:7a:2a:42:f9:11:5d:03:
72:d4:2f:0e:38:85:1c:f6:67:7f:5b:a2:36:bc:00:08:ff:cb:
0e:f6:a4:f1:99:97:7d:84:41:6f:e2:79:d2:ec:23:e3:bf:70:
38:3f:20:5f:8e:c0:5f:22:e5:83:80:a2:51:90:e8:ee:2e:a0:
84:22:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:08:09 2025 by rpki-client