Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
File: qo4b42JCQNwzAgR_tBp9TkeAjvg.cer (raw, json)
Hash identifier: JtJhOco4vA1WU3RgIHdcAUQyc3tDbvZHQ18i+z9wiH0=
Subject key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026597
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Sep 2025 22:59:31 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 135391
AS: 135575
IP: 43.224.64.0/22
IP: 43.230.88.0/22
IP: 45.253.246.0/23
IP: 45.255.132.0/22
IP: 61.29.240.0/22
IP: 61.29.248.0/22
IP: 103.43.84.0/22
IP: 103.49.132.0/22
IP: 103.65.40.0/22
IP: 103.98.8.0/22
IP: 103.211.230.0/23
IP: 103.216.100.0/22
IP: 146.196.76.0/23
IP: 157.119.232.0/22
IP: 2405:fd80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 15:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157079 (0x26597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 15 22:59:31 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:0c:73:1b:7f:62:cc:c2:be:f6:20:79:f5:
bb:2d:79:e5:1a:ca:2b:94:10:62:76:d2:49:88:34:
9f:09:91:ec:62:98:7f:b4:4f:d3:da:5b:84:89:6c:
ad:b4:3d:da:be:4c:ab:47:7a:1b:0d:58:37:fd:47:
dd:29:26:0e:d8:55:80:be:6f:96:30:dd:36:41:a6:
0f:71:28:0b:8f:b6:95:ad:79:55:0d:96:4c:61:60:
6d:87:19:7c:ed:ac:aa:f2:ce:b3:46:6a:6e:d7:d3:
23:a1:5c:bf:20:0c:ed:7d:31:2b:38:59:de:29:e0:
5b:a7:0c:54:18:7f:6b:9d:27:01:7a:77:86:34:03:
7c:26:ce:04:f8:6e:b7:29:c5:0c:f4:c9:1a:f2:d3:
fb:59:aa:55:5e:a7:0b:9a:df:14:6b:6b:15:7e:e1:
ae:6f:c7:8a:2c:b8:41:53:5b:35:01:4c:15:55:a4:
b9:fd:94:8f:5a:dc:d3:af:d1:5b:8d:a1:05:43:7c:
8b:32:78:be:ec:f1:4a:ba:df:15:84:97:72:d7:f6:
74:57:e0:cb:d8:75:79:a6:99:9a:4f:dc:6f:79:98:
c1:ba:c5:01:7b:cc:e3:3d:c4:9b:4b:96:04:29:61:
7c:d5:64:8b:5b:d2:72:63:a6:8b:76:ce:e8:7c:65:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135391
135575
sbgp-ipAddrBlock: critical
IPv4:
43.224.64.0/22
43.230.88.0/22
45.253.246.0/23
45.255.132.0/22
61.29.240.0/22
61.29.248.0/22
103.43.84.0/22
103.49.132.0/22
103.65.40.0/22
103.98.8.0/22
103.211.230.0/23
103.216.100.0/22
146.196.76.0/23
157.119.232.0/22
IPv6:
2405:fd80::/32
Signature Algorithm: sha256WithRSAEncryption
41:15:24:62:22:05:a2:a6:db:34:63:8f:59:96:bd:06:c9:9f:
91:c8:b9:41:70:ce:c2:46:96:0a:f4:8c:75:0a:ae:fa:d7:43:
a4:21:2d:0d:ac:2e:f8:93:c2:5b:c0:59:9d:da:b9:6a:8c:a2:
c0:6c:ad:86:fb:45:1b:4f:60:62:49:f4:28:92:b8:c9:f4:3b:
41:7d:ec:6d:a4:fa:44:c2:a0:8e:85:ec:21:30:de:8a:37:4f:
3a:60:e8:3b:d2:87:21:e7:39:ac:a1:ca:f7:97:e0:5b:f6:6f:
eb:e9:e8:92:6a:9b:3b:a1:62:5b:71:6c:99:0c:20:a5:76:26:
44:76:8e:10:b4:b4:bb:67:d9:0a:bc:01:ac:7f:06:78:ae:7d:
7a:5d:aa:ed:13:58:2b:c1:a4:85:bd:fc:0e:58:b6:b7:cf:33:
5a:aa:9d:22:71:0d:ce:ab:21:45:3a:27:de:c1:ec:9e:68:1f:
e9:de:3d:00:f0:fd:3a:b7:0d:b9:ef:57:7d:54:86:d7:c7:e4:
5a:b9:8a:51:8f:a8:d8:3a:3a:d6:2b:c5:39:df:33:dc:e8:0d:
d7:22:2b:56:9b:5e:e2:f9:b7:85:97:11:67:ce:37:9a:76:93:
4c:35:f0:98:b6:a8:f5:c7:a4:b1:96:2f:75:f5:4c:e8:c4:48:
57:ac:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:17:41 2025 by rpki-client