Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer
File: wUJMTMxZyaAxvhrN95gth6tX0Gg.cer (raw, json)
Hash identifier: OZyvvLvSx8rFMY/FsxLRNfPgcOBnMCeZ/rsFbq7U9j4=
Subject key identifier: C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0270D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Oct 2025 03:30:00 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 4857
AS: 17536
AS: 23646
AS: 23723
IP: 202.147.96.0/19
IP: 203.82.160.0/19
IP: 203.201.64.0/18
IP: 221.120.128.0/19
IP: 2405:4740::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159959 (0x270d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 31 03:30:00 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91139AB, serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:9a:a6:14:5a:c8:9f:4f:79:03:97:03:01:
f8:c3:d5:3a:6e:5d:13:5c:14:de:a4:6f:c6:83:cf:
85:52:9f:b4:23:5d:5f:77:04:20:d7:cd:d2:c1:4c:
6f:08:80:1b:5f:6c:f7:7e:19:a7:58:14:23:75:44:
41:3a:c8:78:a8:a2:1f:fa:28:df:6a:da:19:51:72:
d2:ec:c1:9e:fe:ac:ce:33:1d:e6:6d:dc:f2:34:4e:
c6:e9:68:fb:9f:79:a8:45:bf:d1:bc:66:66:e5:f8:
9f:d1:ce:6f:14:54:e3:f5:3c:57:ee:a4:a2:fe:49:
fd:40:ce:22:96:c1:ee:b2:5b:43:ee:49:e8:7c:c1:
75:22:b7:c5:b1:e4:f2:f9:a5:96:e5:15:d0:f1:d2:
5e:ed:45:d4:86:cb:8b:bd:b3:d9:ce:85:81:b1:62:
aa:69:5d:dc:5d:2e:63:dd:fb:94:4c:fa:d9:6c:91:
7d:6c:f8:04:89:36:c7:06:71:8f:9a:e3:a1:89:d1:
d3:e9:36:88:13:84:50:8b:b7:25:19:54:d5:5c:e6:
3c:43:b6:4d:6c:28:36:6f:a0:e1:59:3b:37:90:a8:
1a:cb:48:6e:e7:b4:4b:ba:26:ff:4c:d3:f2:88:fc:
31:05:34:ce:9d:4f:db:64:63:7b:69:58:7c:56:77:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4857
17536
23646
23723
sbgp-ipAddrBlock: critical
IPv4:
202.147.96.0/19
203.82.160.0/19
203.201.64.0/18
221.120.128.0/19
IPv6:
2405:4740::/32
Signature Algorithm: sha256WithRSAEncryption
51:01:22:bf:64:b0:a3:3c:74:c2:fc:d9:f8:98:62:f7:ab:2d:
c1:bc:6a:d0:33:57:ee:46:4c:fb:92:8f:07:51:2c:fc:d1:71:
0b:06:01:07:50:32:d5:1b:cf:b5:82:62:73:8c:b9:69:a4:75:
35:87:87:14:f1:ce:c6:12:4d:b5:fa:13:08:6b:61:a2:ac:7e:
f5:29:67:f6:64:51:f8:3e:af:b3:6d:72:49:8d:ea:ec:b8:24:
a7:3e:f9:7b:29:60:53:e7:73:ae:2f:31:56:4b:5b:04:3e:1c:
8b:e4:a9:17:bc:1a:09:1d:60:3f:b2:ae:94:f1:65:15:46:6e:
c0:d8:e8:67:3a:ad:4b:62:40:3b:7a:50:cd:c5:f9:18:a3:e6:
ad:bc:8c:4e:02:c0:73:d9:63:db:75:ea:6b:bc:12:52:4f:6d:
f8:bf:25:7e:47:42:7d:cd:1f:f2:87:db:b9:1e:d2:8f:e5:59:
e9:eb:d5:33:db:66:f2:66:7d:90:72:24:a1:55:9e:c5:d1:8d:
af:26:2e:46:3b:a5:39:0f:cf:ab:f9:9c:65:a7:da:c4:74:24:
77:ca:9d:c0:8f:cf:83:36:10:d3:91:f2:a9:f0:55:93:bb:91:
39:33:36:f5:af:67:f7:1e:76:d9:2a:54:f8:82:f6:87:e0:98:
c0:35:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:46 2025 by rpki-client