Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
File: xPuRgT57oJnZHpxIFyCUuZBcDxE.cer (raw, json)
Hash identifier: lChJ9rau+X4YgMOM6y2M+6+NvCwDn/3xPpPv7RHmajk=
Subject key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026DFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 16:20:43 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 58424
IP: 43.255.112.0/23
IP: 103.5.124.0/22
IP: 103.206.200.0/22
IP: 116.214.24.0/23
IP: 116.214.30.0/23
IP: 2407:8180::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159226 (0x26dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 20 16:20:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:c7:67:a8:2e:22:4e:f9:98:8a:fb:2e:fa:
cf:a7:06:8d:03:51:a1:a0:42:4e:55:2a:2c:4e:8f:
a4:44:80:c4:0e:fc:43:18:3b:56:e7:ef:5b:ec:79:
f0:0c:8a:dd:d4:83:ec:c7:cb:00:3e:c1:f7:a8:9e:
15:46:09:ad:54:b2:15:d6:08:62:0b:d2:b5:f6:74:
b3:b2:1d:e0:80:be:8f:ad:28:0c:ec:de:0c:67:99:
8a:dd:65:e0:c2:20:be:92:c7:82:c8:7f:2f:75:3c:
bb:a7:73:6c:c6:83:f9:49:a7:b5:ee:47:d8:ce:7d:
40:5b:cb:a6:97:2c:dc:d8:97:1a:6b:be:69:11:87:
32:e5:b4:ac:05:3f:92:98:7c:98:06:57:e6:c0:c6:
3f:11:55:27:7e:88:d8:73:7e:da:f2:11:ec:4c:db:
5c:fe:45:e1:e3:f6:5c:37:95:3f:08:30:23:8a:e6:
b8:fb:ae:6b:bb:34:4a:90:ad:ee:79:e7:83:c5:7a:
61:31:dc:f0:9e:35:73:7a:43:82:1a:1e:4e:15:34:
e7:26:2d:9e:72:a8:d1:34:4e:b5:eb:18:bd:66:20:
e0:3c:8e:3c:a4:87:df:5a:08:70:25:a5:0b:0a:84:
e6:7d:16:2d:e1:37:f7:7a:8f:65:49:38:63:88:a8:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58424
sbgp-ipAddrBlock: critical
IPv4:
43.255.112.0/23
103.5.124.0/22
103.206.200.0/22
116.214.24.0/23
116.214.30.0/23
IPv6:
2407:8180::/32
Signature Algorithm: sha256WithRSAEncryption
7c:b3:82:10:ac:9e:9d:5b:2c:ea:c3:59:e7:75:67:1c:00:21:
68:91:3e:c6:15:4b:7a:17:8c:19:a2:50:02:db:d8:fe:a0:36:
93:03:0a:50:4b:37:5e:c5:bc:b9:51:de:46:1a:e3:df:20:b5:
b0:d1:d2:81:72:c7:8d:e9:e7:e7:c4:e9:c7:65:eb:3f:22:8a:
e0:12:18:61:10:c5:08:c9:63:76:ab:a7:82:e8:a6:58:17:32:
ac:93:08:44:d4:f2:f3:47:a0:48:55:d8:f5:bf:cb:67:55:15:
24:39:94:c8:bc:33:5a:55:db:48:d3:a8:f0:b0:07:f6:9a:67:
e1:fe:48:48:70:4c:e6:25:e4:af:ff:a1:bc:7a:0e:4e:8c:c1:
be:4f:42:cc:00:bd:8b:62:c4:49:08:6f:1a:30:65:3b:e7:92:
7a:eb:59:f6:b9:ac:2c:42:ab:20:60:d7:9e:84:61:09:85:d7:
73:54:ba:7a:19:71:38:09:6b:44:90:60:b5:d1:86:e9:4c:ca:
6d:01:fe:ec:0f:aa:fe:8e:f5:00:2c:dd:a2:74:1f:d1:9b:87:
a3:47:7e:89:fd:56:76:61:77:92:24:e8:fb:28:62:87:7b:41:
a6:4c:73:42:17:9b:ff:34:d4:19:66:f3:34:5c:70:37:71:17:
87:59:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:11:29 2025 by rpki-client