Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.cer (raw, json)
Hash identifier: MgMmtAwRAN6SfUzn4Ux15X0Q4gGmYzY7k4UmO2iIXe8=
Subject key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025290
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Jul 2025 08:27:48 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 150172
IP: 103.2.80.0/22
IP: 103.10.78.0/23
IP: 103.27.72.0/22
IP: 103.100.152.0/22
IP: 103.113.8.0/22
IP: 103.123.238.0/23
IP: 203.56.14.0/23
IP: 220.158.200.0/22
IP: 2407:5d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152208 (0x25290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 08:27:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:64:5c:72:f6:24:00:c1:26:03:17:a4:11:
31:fe:da:36:ca:73:f7:b6:0c:62:6b:f9:19:ed:f2:
8a:eb:7f:9e:52:41:8e:56:d9:61:3c:45:dc:72:62:
13:48:23:04:c1:92:d5:20:e1:9d:8e:3e:7f:97:29:
fb:a8:53:01:9b:d4:8b:1d:07:67:6a:32:1d:bf:ec:
e2:33:cd:83:47:a1:59:a6:15:2a:11:32:cd:fc:59:
f6:fe:52:b5:74:2e:d4:b6:b3:42:31:1c:4e:0f:a5:
4b:8a:df:6f:31:f8:bb:95:1a:ff:40:14:3d:b7:03:
b0:04:34:de:c7:9a:3c:8d:63:89:02:22:4b:d1:4c:
22:ef:68:61:e9:97:c2:bf:a2:ed:4e:55:21:15:27:
ce:dd:70:93:bf:e0:32:1a:22:cf:3a:55:40:f8:0d:
38:e6:9b:ff:91:5b:c5:20:92:07:6a:97:df:39:a0:
3c:87:6f:98:f7:51:a9:82:b2:1f:11:df:bc:f7:b4:
2b:46:7f:64:a2:3e:54:0e:5f:fb:6c:f4:e7:53:f0:
1a:c6:a7:2d:27:57:95:db:8e:c5:e9:45:92:df:30:
37:8f:74:59:39:5c:17:14:12:ba:eb:c6:66:a4:47:
12:a4:ab:ac:fb:89:f3:a7:5f:ff:86:af:ef:71:72:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150172
sbgp-ipAddrBlock: critical
IPv4:
103.2.80.0/22
103.10.78.0/23
103.27.72.0/22
103.100.152.0/22
103.113.8.0/22
103.123.238.0/23
203.56.14.0/23
220.158.200.0/22
IPv6:
2407:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
a1:8d:91:35:f0:ce:fb:4f:48:eb:15:ef:93:12:d6:9d:af:66:
c1:70:7c:42:c9:d9:37:ca:15:50:33:02:db:c7:72:77:eb:b1:
b9:4a:1a:42:02:41:20:1c:65:b3:8d:4d:a4:ed:e7:ac:bc:07:
dc:f0:e0:3d:fc:f6:fd:1b:27:d0:fc:8f:20:9c:47:bc:48:a8:
dd:39:87:5f:11:80:98:c6:f2:9c:60:ec:7f:73:23:2d:5f:aa:
0c:bb:37:e7:bb:9f:ac:ec:79:da:8f:65:e6:95:8e:4a:79:3f:
28:b2:8c:ea:fc:1d:a0:09:05:02:75:64:c8:99:07:6d:0f:cb:
24:eb:66:39:53:c1:42:29:56:8e:dd:3a:5e:79:ae:46:af:a5:
98:da:73:b1:11:80:2d:e3:20:2f:20:0e:22:14:6d:45:88:a5:
ee:f5:ab:68:be:7a:8f:25:3f:50:c4:44:88:5d:50:66:4b:ed:
a4:90:65:94:3b:19:6a:13:f4:80:fa:06:70:4a:59:5b:7a:ac:
11:1c:e3:c7:16:0f:c2:5d:1a:0f:39:99:28:58:25:24:21:31:
26:97:e4:39:d2:ad:55:aa:a2:2b:99:87:69:df:0a:b6:65:20:
32:cf:98:1c:a8:c2:61:67:94:64:b3:38:dd:6f:30:10:cb:24:
12:71:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:51 2025 by rpki-client