Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer (raw, json)
Hash identifier: 2d4tQUzvqDj69NpvYo2TnJegTarU6Yjr0ARPU5rkl6M=
Subject key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E10
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 20:43:14 +0000
Certificate not after: Sat 30 Dec 2028 00:00:00 +0000
Subordinate resources: AS: 151953
IP: 203.19.5.0/24
IP: 2001:df3:640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159248 (0x26e10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 20 20:43:14 2025 GMT
Not After : Dec 30 00:00:00 2028 GMT
Subject: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:78:82:8c:81:b2:a3:d0:fc:8e:a4:d7:5e:
fc:0d:03:2f:01:f6:e8:a9:07:c8:43:bd:5d:7e:a3:
c4:9d:59:b6:67:6e:9c:e8:d4:0e:f7:e7:a4:f7:89:
0f:d3:35:37:46:8e:fe:b9:20:aa:2f:72:cd:4d:47:
78:cb:e4:19:af:0f:fe:06:62:64:17:4d:f2:01:b3:
e8:dd:1e:96:0c:0d:2d:43:ad:2f:5f:21:9c:fd:dc:
6a:ce:fd:49:84:d5:9d:25:2c:af:76:11:7d:c3:7c:
4f:9b:d3:2e:bb:e6:bb:cc:51:dd:9a:63:8b:08:80:
f7:cf:5b:a9:60:62:7d:17:cf:23:e8:a5:c4:84:e0:
5b:5b:01:e9:d4:e8:1e:29:a9:f9:57:ed:ab:03:8a:
c3:15:ec:2a:a1:0a:88:d7:e5:fe:7b:0e:ce:9b:f9:
83:96:9f:37:5a:f4:5f:95:86:8c:96:df:50:35:ea:
b3:d2:e9:2b:60:4f:a7:ab:00:4c:11:d6:52:9e:11:
4b:4b:d0:09:46:26:0d:46:f6:98:c4:81:30:13:b7:
dc:48:ac:62:fd:87:1d:98:43:58:c7:99:ac:eb:47:
38:1d:ab:52:57:90:f7:b5:a9:fb:78:72:75:0f:45:
3e:c2:e7:74:41:02:76:ca:ce:26:53:52:34:41:35:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151953
sbgp-ipAddrBlock: critical
IPv4:
203.19.5.0/24
IPv6:
2001:df3:640::/48
Signature Algorithm: sha256WithRSAEncryption
94:a9:7f:3c:c5:f8:b0:a0:9d:f1:b3:05:b3:ed:f8:7e:28:72:
4b:8e:4b:35:c6:16:cf:31:67:bc:92:29:42:28:2a:df:e7:17:
fe:55:36:92:03:35:e7:7d:45:e1:8d:4a:ea:c1:63:69:40:8d:
9e:86:50:53:ab:3c:9b:e2:e3:75:46:13:d9:02:e8:b0:74:cc:
be:84:5d:e9:54:89:f2:6a:05:6f:1a:3b:11:a7:55:e4:1b:80:
54:e8:aa:15:4b:4f:14:80:8f:d8:c3:c4:cf:ad:b7:41:de:6a:
97:38:76:6d:ad:ee:42:ee:fd:c6:d5:a5:30:a4:68:07:09:ee:
b6:50:9f:90:8d:8a:ba:0b:f0:f7:60:01:63:64:34:27:66:86:
ab:6c:75:77:ad:24:f6:60:f7:41:d7:c9:ff:50:08:a1:dd:77:
86:e8:a0:7b:88:da:44:bf:13:c9:75:e6:70:f7:04:b9:01:7a:
c3:49:2e:13:8e:1b:3d:8c:d8:35:55:0b:7a:97:e7:2a:4a:9f:
53:ea:26:fb:e7:e9:48:5f:38:c5:4e:9b:c2:5c:10:45:2d:1e:
0d:46:fd:ae:b8:cb:aa:fb:59:7f:c2:f8:d2:c8:e3:b4:04:2a:
a1:84:d2:e8:ab:fa:34:1c:a7:ba:37:5e:9a:e1:e2:0c:61:7e:
d9:61:9e:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:28:04 2025 by rpki-client