
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.cer (raw, json)
Hash identifier: UycEBF0re01m+1WfMt4rDHiATDAUgxa9ofUAN5ZSGjE=
Subject key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0255F6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Jul 2025 04:10:50 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 135022
IP: 103.107.122.0/24
IP: 103.110.5.0/24
IP: 103.114.54.0/24
IP: 2401:cc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153078 (0x255f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 04:10:50 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:bb:57:74:4c:6f:d0:99:da:1d:3e:2a:7e:
33:07:84:49:d2:84:a1:3e:e1:18:e2:bf:e8:1d:97:
16:78:5b:b2:fb:bd:b6:cc:86:e0:2e:73:b2:3c:8d:
0d:c5:4d:52:ce:11:92:a6:3c:90:cf:5d:93:2d:3f:
a0:b1:64:16:da:18:33:d5:1a:2f:0f:6d:03:e8:fe:
17:aa:9b:63:d3:21:e3:e4:8a:2b:77:c4:9c:d0:46:
19:d6:19:07:b0:af:ec:ef:9e:30:e8:b4:d0:11:fc:
c8:ab:7c:cf:ed:a9:65:ca:bb:b6:ee:f1:4b:68:3c:
85:1e:ce:71:85:51:81:92:f3:45:cf:93:c9:17:b8:
d8:d5:96:e6:85:8d:62:e2:83:1f:4f:17:4b:f2:3b:
09:c7:83:e1:da:19:66:16:cc:05:2f:66:fd:80:bb:
c7:7f:bc:c9:d6:f6:a1:b9:2e:fb:e4:b7:6f:85:a1:
fc:7a:38:d7:f8:79:ef:5c:c4:4d:e1:a9:cb:51:4f:
7c:8b:1d:89:30:67:2e:ab:65:47:0c:b8:d1:58:37:
30:64:0a:f9:c5:59:1a:69:b4:28:c9:f7:54:0f:6d:
55:4d:ed:6e:d9:aa:7c:1c:76:72:be:b0:e3:3d:46:
1c:75:19:e7:71:a2:9e:31:a5:9e:4a:f7:c1:84:89:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135022
sbgp-ipAddrBlock: critical
IPv4:
103.107.122.0/24
103.110.5.0/24
103.114.54.0/24
IPv6:
2401:cc40::/32
Signature Algorithm: sha256WithRSAEncryption
a7:d3:06:d3:d5:be:34:dd:47:d9:97:93:b9:74:80:83:35:d9:
07:0e:01:4e:6c:2a:03:8d:a0:e5:9c:65:1e:0a:e5:ea:d3:59:
b8:ea:7a:13:a0:e2:bf:2b:ef:e4:ae:ed:a4:c5:1c:ad:ee:ce:
9d:27:f1:c4:90:6c:74:b8:98:aa:f3:e0:c7:0b:a6:ac:90:78:
93:50:a9:46:31:a3:cc:25:cb:26:15:b4:70:98:9f:f8:11:e4:
65:b0:34:41:62:f5:1e:00:ee:dd:37:a9:89:59:b5:b6:75:2b:
76:4c:29:5f:2a:9a:34:c1:aa:00:41:05:ce:9d:c1:49:da:4c:
f4:96:8f:69:5f:13:29:9b:cf:db:24:d7:e5:32:c0:d9:19:ba:
a5:58:7d:c9:48:9e:c4:58:eb:b2:70:fc:28:96:99:21:f9:0b:
19:bc:62:e4:e5:fc:75:3a:88:21:4d:c6:93:09:26:81:fc:cf:
a6:95:08:37:88:6d:ad:6a:38:e7:53:e2:d3:8d:f2:fc:70:c1:
45:d2:0f:53:ca:4a:18:a1:bb:39:db:13:e5:d2:31:79:7d:e0:
de:66:d0:49:12:26:62:65:f5:46:8d:f3:bf:89:78:10:6a:a0:
1f:e8:8f:64:7d:36:c3:12:e8:8c:02:d9:3e:4b:2e:90:f2:e6:
33:2d:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:18 2025 by rpki-client