Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.cer (raw, json)
Hash identifier: iWzpZ8eE23IYP+kKfxMaObDEnOVv3DBdP+tgwHOx3ro=
Subject key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026DF6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 15:57:45 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 103.130.12.0/22
IP: 2403:ae40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159222 (0x26df6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 20 15:57:45 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:8e:43:d3:3a:62:d4:f1:a7:bd:08:59:d4:
d7:53:01:9a:cc:80:d5:c2:76:ad:11:1e:62:22:ab:
4f:2d:ba:a0:f7:06:93:be:31:32:f1:41:d7:58:6f:
34:14:7e:62:42:65:d6:93:28:26:16:e6:ea:53:0f:
c9:81:31:98:00:3a:9a:e4:a0:1c:7f:8f:13:85:9d:
7d:15:ff:83:ab:25:4a:7f:07:28:a5:9c:38:23:aa:
42:01:e4:93:b9:64:f2:c3:24:71:66:3e:2b:a4:ce:
07:39:58:54:76:82:1f:de:67:6c:b6:b7:87:d0:fc:
8b:b0:f5:19:88:18:ff:0c:0d:3d:b1:d2:22:b6:8e:
fb:8a:dc:4c:c1:03:d7:39:39:aa:1a:a1:4a:f7:30:
19:6c:e6:0a:78:c7:04:8a:bc:62:56:bf:31:5d:e5:
bd:9c:90:94:f3:5a:04:ac:ce:88:e2:b1:64:3c:74:
01:9e:7a:ef:d8:fc:92:23:80:23:05:65:09:cc:1e:
ab:0a:1f:54:3f:e1:89:02:3c:f2:2e:f7:8a:f7:1b:
64:b5:82:b6:f0:24:75:e7:13:a9:f2:0c:16:4f:0f:
24:e2:a8:3d:67:0e:59:2b:f5:61:64:79:50:de:9d:
1d:3c:aa:21:cc:f5:9d:45:54:43:af:71:c3:96:49:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.12.0/22
IPv6:
2403:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
97:45:81:bc:f3:fd:77:e4:b2:b5:25:6d:62:33:63:cc:1a:3f:
f2:89:00:96:39:4f:35:6b:20:da:af:f8:41:a6:8e:06:96:1e:
b1:27:dc:d8:07:2f:2e:00:a1:12:d7:80:79:9d:4d:ff:7f:10:
a7:38:6e:c7:86:f7:5c:0d:49:7c:74:a5:78:6c:3d:be:31:1a:
6d:e4:b9:89:2a:c7:af:61:a0:42:15:4e:6a:53:71:51:b4:37:
f6:92:74:9e:44:a0:7f:80:df:d4:7f:d2:be:1e:80:e1:87:59:
e6:78:1e:86:01:ad:f7:b4:07:13:1e:98:a2:70:9e:cf:f2:8f:
61:dd:b9:3d:f1:37:b5:aa:d6:8e:e0:af:d4:08:d1:03:bc:49:
8e:a0:e0:96:04:34:ba:de:35:de:33:05:61:65:7e:5f:46:24:
56:0c:2d:69:63:ad:c5:16:c9:28:f7:85:ed:00:d0:7e:44:84:
23:08:88:67:d7:41:0a:b3:ff:70:02:60:75:9f:e5:32:3e:92:
eb:c8:77:20:3a:ba:a6:55:fd:e9:6a:2d:f1:c2:75:89:48:b4:
b5:44:af:1f:3d:2e:e4:0a:1a:9f:5d:73:3b:c8:03:ed:e0:e9:
d4:b3:70:7b:12:ab:fb:67:a5:b1:fc:77:71:bb:2d:e2:ce:dc:
09:0a:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:28:19 2025 by rpki-client