Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
File: r7qhUW6eF_JM-RRbjHzUuoGlekA.cer (raw, json)
Hash identifier: OsuqQzx3Y4BJp3ZNosc86NXmdq1A7BZw5Ioh+oVvR/M=
Subject key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026475
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Sep 2025 09:29:53 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 140622
IP: 103.182.173.0/24
IP: 2001:df0:7e40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Sep 2025 04:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156789 (0x26475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 10 09:29:53 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:d2:ac:06:ec:1a:ed:8f:7d:f9:16:a7:01:
81:11:a7:b2:df:52:c4:81:9c:9e:77:aa:79:2b:f8:
c8:b2:8a:00:ee:a0:12:f4:91:50:48:77:c0:c2:93:
81:b3:f7:aa:ea:b6:27:ae:a6:19:c6:a1:3d:d2:9e:
d0:3b:a3:d6:19:a0:3c:a3:3f:ae:33:c9:a6:73:8a:
3f:6d:da:a8:60:0c:37:89:5c:31:5e:8c:bc:cb:1c:
7b:2b:7b:fb:e5:d9:a0:63:22:3b:6e:15:19:3e:9e:
d6:23:41:10:f7:1d:00:9b:5b:6c:a5:bd:bf:c4:ca:
02:3c:b9:11:a1:56:77:47:f9:e8:35:25:b1:01:f7:
c3:81:da:7c:56:7b:e4:5d:9c:47:4e:23:18:04:09:
3b:a1:51:88:28:76:ae:26:98:aa:67:b6:12:ae:1e:
69:fa:3e:fc:da:c9:a0:60:f9:ec:e7:3d:70:df:0d:
ec:ad:18:fd:84:17:03:8a:67:57:42:f4:3f:db:1c:
ae:22:83:fe:51:60:e2:20:03:7d:e7:c3:71:9e:d5:
fa:bf:83:9f:e5:a6:03:83:aa:74:e7:90:92:77:f0:
c4:d1:fb:3e:09:de:10:05:87:bf:80:25:c3:f9:5b:
c3:92:15:8f:dc:a5:de:ed:9f:e7:92:f1:5f:75:8e:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140622
sbgp-ipAddrBlock: critical
IPv4:
103.182.173.0/24
IPv6:
2001:df0:7e40::/48
Signature Algorithm: sha256WithRSAEncryption
ad:69:8c:95:a9:8e:c8:68:61:5a:20:11:3d:1d:12:cb:da:ce:
63:d4:63:d7:9a:53:52:c1:8c:a5:2f:3b:bd:7a:e9:dc:3a:bc:
90:bc:c9:39:b2:f9:ff:ca:06:dd:f5:9a:f8:e4:52:29:48:21:
2a:e6:a2:d4:87:83:11:9e:b2:2c:b7:60:19:6d:49:90:1d:90:
bc:0b:f0:02:6b:9b:dc:d8:24:6b:61:87:0c:5d:61:89:b4:38:
15:b1:0a:58:2b:52:ef:11:16:64:ed:13:f8:21:85:17:bd:ef:
c8:27:c4:2e:1e:9c:bc:2d:5e:38:09:0d:a3:27:6d:ec:e3:f2:
94:c8:40:9b:e3:9d:da:50:26:3e:77:06:4a:53:58:c8:e9:a9:
83:1e:08:2b:b3:7e:52:39:6c:a6:59:6f:20:71:47:1d:bd:53:
a6:94:d7:d6:f6:6f:cc:7e:9a:84:20:bd:a6:71:64:aa:4a:d9:
ef:8d:14:b1:a3:3d:d2:81:e0:66:a9:2b:11:34:1b:16:b8:57:
15:c9:df:85:73:58:bc:0d:90:d4:25:96:78:8f:e1:24:02:35:
e1:d1:b4:85:3c:4b:58:81:44:3f:fd:34:29:d7:1b:eb:3f:3d:
ef:e6:2f:98:dd:c3:c8:d5:ec:8b:f9:3f:15:fb:38:a4:6e:c8:
b5:d4:38:ce
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAmR1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDkxMDA5Mjk1M1oXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTY4QTAxMTAvBgNVBAUTKEFGQkFBMTUxNkU5RTE3RjI0Q0Y5MTQ1
QjhDN0NENEJBODFBNTdBNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPT9KsBuwa7Y99+RanAYERp7LfUsSBnJ53qnkr+MiyigDuoBL0kVBId8DCk4Gz
96rqtieuphnGoT3SntA7o9YZoDyjP64zyaZzij9t2qhgDDeJXDFejLzLHHsre/vl
2aBjIjtuFRk+ntYjQRD3HQCbW2ylvb/EygI8uRGhVndH+eg1JbEB98OB2nxWe+Rd
nEdOIxgECTuhUYgodq4mmKpnthKuHmn6PvzayaBg+eznPXDfDeytGP2EFwOKZ1dC
9D/bHK4ig/5RYOIgA33nw3Ge1fq/g5/lpgODqnTnkJJ38MTR+z4J3hAFh7+AJcP5
W8OSFY/cpd7tn+eS8V91jmN1AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUr7qhUW6e
F/JM+RRbjHzUuoGlekAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU2OEEwL0IyMDY4Q0Y4OEUyODExRjA5QzJBNkI0OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NjhBMC9CMjA2OENGODhFMjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2
ZUZfSk0tUlJiakh6VXVvR2xla0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiVOMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ7atMA8EAgAC
MAkDBwAgAQ3wfkAwDQYJKoZIhvcNAQELBQADggEBAK1pjJWpjshoYVogET0dEsva
zmPUY9eaU1LBjKUvO7166dw6vJC8yTmy+f/KBt31mvjkUilIISrmotSHgxGesiy3
YBltSZAdkLwL8AJrm9zYJGthhwxdYYm0OBWxClgrUu8RFmTtE/ghhRe978gnxC4e
nLwtXjgJDaMnbezj8pTIQJvjndpQJj53BkpTWMjpqYMeCCuzflI5bKZZbyBxRx29
U6aU19b2b8x+moQgvaZxZKpK2e+NFLGjPdKB4GapKxE0Gxa4VxXJ34VzWLwNkNQl
lniP4SQCNeHRtIU8S1iBRD/9NCnXG+s/Pe/mL5jdw8jV7Iv5PxX7OKRuyLXUOM4=
-----END CERTIFICATE-----
Generated at Tue Sep 16 05:48:45 2025 by rpki-client