Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.cer (raw, json)
Hash identifier: ZcjyXRAKIIdU7bt2FxyWSFfQOIXS2utPftZ5i6A03NA=
Subject key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025EA1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Aug 2025 16:37:01 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 132018
AS: 136726
IP: 103.21.192.0/24
IP: 103.94.184.0/24
IP: 2001:df1:7f00::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155297 (0x25ea1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 20 16:37:01 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:3b:37:ed:02:49:1c:4b:90:d4:f8:eb:2f:
c1:36:f2:b6:8f:43:23:12:c7:dc:7e:56:10:7e:55:
ef:28:82:f4:ae:7a:89:03:e6:61:fa:24:80:6b:7d:
cb:34:56:a8:18:7c:36:75:8e:e4:4a:45:71:11:6d:
1f:07:40:f8:3b:d3:3d:84:a2:8c:e6:bc:45:cd:0a:
ad:4e:88:2f:8c:bd:fb:db:87:69:99:19:fe:2e:46:
74:f8:39:68:b5:8b:fa:27:57:5f:54:05:47:52:9d:
19:c5:21:ef:c4:8f:9b:e6:be:14:97:46:94:c9:1e:
2d:6a:96:25:cb:0f:50:9e:4a:ca:1a:c9:0e:70:84:
c1:34:10:96:48:c2:5d:c4:e4:13:72:58:88:46:84:
de:d1:e7:5e:6d:cc:c1:9b:0b:d4:c3:f5:87:e5:40:
f3:db:80:58:7c:ec:fd:02:65:78:0c:a4:2b:b9:05:
50:8f:20:46:41:9c:30:d9:9e:46:36:e5:6b:f3:ac:
89:c5:49:1e:ec:9a:f3:aa:66:c9:e7:68:82:c9:96:
68:aa:00:85:22:d6:89:c5:5a:fc:8f:10:67:ad:4d:
6c:6d:64:2f:df:48:4f:b7:bf:a1:1a:30:ef:0b:82:
21:b8:e3:1d:29:6d:9b:17:22:2d:de:04:d4:c8:fb:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132018
136726
sbgp-ipAddrBlock: critical
IPv4:
103.21.192.0/24
103.94.184.0/24
IPv6:
2001:df1:7f00::/47
Signature Algorithm: sha256WithRSAEncryption
58:08:f7:66:54:f5:d7:ea:cb:f7:a2:7f:2d:3a:e7:40:e8:dd:
7e:24:c5:e9:c1:00:e7:28:57:fb:f9:b1:27:87:d7:5b:bf:1a:
12:51:32:fe:48:ae:4d:63:75:8a:70:e8:24:36:d3:d2:fb:91:
a3:54:c9:81:c6:4c:26:03:af:bd:d4:44:f9:17:28:cd:04:d5:
0e:eb:5f:af:30:46:4b:c2:f3:9e:ad:73:96:2a:0f:42:e9:6f:
a7:98:a6:72:2d:fb:c5:f9:ab:0c:ee:8c:17:86:ca:88:13:fd:
16:51:49:3c:64:4d:ee:d3:f4:6f:3d:e6:7c:59:89:0e:bd:c2:
67:db:3b:96:4f:21:87:c0:85:ea:9b:93:cc:1a:c6:78:69:89:
74:6a:a0:5a:43:ef:49:95:e2:f8:ac:fd:8b:66:8a:42:43:e3:
a9:73:05:c0:40:85:dc:f3:1d:02:c1:7b:2e:aa:1f:76:c1:45:
cb:15:9b:3d:da:1b:35:af:43:5f:be:ee:3b:7e:36:4a:55:c0:
59:04:f0:ed:71:91:f5:45:67:bd:70:49:eb:5e:c9:a9:4d:5f:
97:d7:6f:c4:1c:59:01:49:bb:c7:ae:5c:83:16:9b:39:6a:ae:
12:c5:48:52:c8:6c:37:f4:cb:b0:34:05:34:71:1c:92:49:f0:
b4:0c:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:21:13 2025 by rpki-client