Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.cer (raw, json)
Hash identifier: PZ3vXDKda44pMg6v0pLS4HlAMiLWY9ruJw+s1tXqPAg=
Subject key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026FE7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Oct 2025 21:20:52 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 147292
IP: 103.174.98.0/23
IP: 2001:df7:c480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159719 (0x26fe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 21:20:52 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:d4:ec:ad:0f:e0:66:31:d5:05:d1:73:01:
6a:26:7d:f4:27:75:7e:5f:7c:b7:44:ad:e1:72:12:
71:b4:55:ea:13:64:5e:f3:25:cd:3f:d5:c6:10:ac:
19:b3:26:6c:a1:4c:29:d6:d4:36:7d:ea:2c:46:d0:
5f:6b:3e:fb:ef:37:a1:81:b7:68:d1:f5:51:72:4f:
d7:fd:0a:3e:e1:61:cc:2d:b5:3a:de:62:e9:4a:4d:
de:49:fe:f5:73:0f:2f:d2:65:a4:8e:41:3f:d0:9d:
34:19:45:ee:90:ab:f9:c3:90:42:62:0e:ef:15:16:
70:f3:cf:87:3b:18:c6:db:03:c6:12:66:a5:88:1f:
57:c4:e7:32:94:6d:cc:4c:a0:dc:50:60:c6:15:aa:
71:4c:17:62:81:b2:09:cf:db:f7:9f:fd:d7:ca:c6:
15:3c:68:bd:aa:d1:1b:72:c1:13:19:d6:24:4e:20:
b5:cd:44:fa:15:e9:aa:7c:8e:ef:f3:ef:9b:7e:8b:
aa:ea:03:d4:66:e6:50:a7:32:bc:73:3c:a0:11:f8:
24:61:b8:37:7b:14:b8:f5:44:91:fd:2d:77:b5:34:
55:53:e1:59:3e:ee:d2:7f:61:61:c1:17:94:be:3a:
17:9e:76:fc:26:48:72:08:3f:0d:d9:09:4d:cc:d5:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147292
sbgp-ipAddrBlock: critical
IPv4:
103.174.98.0/23
IPv6:
2001:df7:c480::/48
Signature Algorithm: sha256WithRSAEncryption
d2:a5:66:6a:54:cc:15:86:dc:71:17:44:36:b0:dc:2c:95:4a:
4d:96:7e:af:af:9b:ec:45:1d:10:f3:72:1b:ca:68:38:71:67:
96:35:ec:ab:64:70:92:8a:10:16:03:e0:3c:51:d6:65:84:20:
d2:f9:5e:a3:c2:d4:9e:4e:ab:93:08:b8:23:ec:ad:30:b1:41:
72:95:35:e5:73:e8:e6:6c:fe:54:90:4d:52:28:e2:05:4a:82:
15:d6:3d:f0:64:65:3c:87:4a:f8:9c:1b:50:af:90:6a:9a:28:
29:31:be:50:51:eb:13:c2:54:46:52:39:3b:67:d8:db:a6:33:
57:f2:a0:d7:85:5a:78:30:9f:da:b1:b5:08:09:0e:c8:2b:0f:
a9:6a:11:b2:83:88:be:d5:34:0a:1d:a6:6b:62:1a:24:c4:82:
68:1b:ab:b6:98:5d:06:18:ee:23:d0:ec:92:a2:cc:a1:5d:45:
fb:98:08:2c:56:73:ba:32:02:fc:6f:89:a3:1b:50:3c:23:dd:
f8:c2:10:7f:66:74:56:de:4f:d0:e0:f4:be:82:b9:16:c4:4a:
11:b6:bf:a6:ba:46:d6:05:a6:cf:46:13:da:26:c1:65:7c:62:
8b:26:79:7e:ee:b7:0e:a0:50:d6:e3:f4:89:c4:80:8b:fd:bd:
e1:ee:73:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:50 2025 by rpki-client