Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer (raw, json)
Hash identifier: +V1dLTMUgvju4vyNScu/K6wkRdC2ryeUBhzWK0rc098=
Subject key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0271BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Nov 2025 19:16:53 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 45.125.188.0/22
IP: 103.11.4.0/22
IP: 103.14.176.0/22
IP: 103.245.232.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160186 (0x271ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 1 19:16:53 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:0a:09:b1:db:80:d3:d9:2f:29:eb:61:1f:
94:d6:64:e5:02:95:35:86:e0:d4:bd:1e:db:97:81:
95:c7:0e:d0:d9:92:8d:36:fc:21:d5:bf:89:c8:14:
85:50:17:e8:12:86:1a:5e:84:af:91:70:83:0d:2d:
71:b3:8e:23:9f:29:42:5b:61:3c:a4:42:2f:ab:0b:
91:48:71:69:d3:51:7b:34:15:81:80:5b:2f:bc:f1:
9c:fa:6c:c6:d7:4c:f9:69:ee:ac:0c:63:79:8b:7d:
de:e1:b0:35:ab:7f:46:59:c7:01:40:50:1e:d5:23:
35:c3:00:c8:8c:a2:3e:86:a2:b9:38:4e:ba:72:35:
8f:25:23:81:f1:0f:f0:0d:8c:e0:f6:e8:ff:bb:90:
ac:26:ee:99:4b:13:da:b6:ea:74:82:d5:4e:ff:12:
60:03:c0:ab:94:bb:0b:a0:25:e0:7a:ea:ea:89:9d:
ad:d8:95:87:af:9f:cb:d0:4d:83:dc:c2:41:9c:38:
5f:38:15:75:64:f5:82:80:e0:49:38:d3:72:c2:9e:
3d:77:f5:11:ef:ee:ce:cb:46:a2:80:6f:1f:fc:3e:
38:3c:be:c0:e3:69:ec:e3:38:58:f4:33:a7:c5:02:
11:5f:10:b2:17:95:6f:9d:dd:88:86:ac:c9:c9:ce:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.188.0/22
103.11.4.0/22
103.14.176.0/22
103.245.232.0/22
Signature Algorithm: sha256WithRSAEncryption
72:55:ec:9d:6c:99:24:c7:70:6a:ce:e3:1d:90:62:39:f2:04:
48:ac:d9:f6:d6:4a:05:a7:42:a6:42:ec:50:33:36:15:10:67:
67:85:54:aa:b1:4e:71:e2:13:6b:92:ae:87:df:95:38:75:e3:
ba:6f:54:a2:17:59:61:87:5a:66:3e:57:a8:81:88:76:dc:83:
b4:8e:ea:63:64:0c:4d:47:e8:0d:0c:80:2b:a3:e1:21:d6:6a:
ae:a5:af:70:d3:73:75:29:ae:3e:2a:df:79:a2:6a:48:22:fb:
a0:a9:f1:b1:95:f2:7f:21:df:cc:13:44:36:e3:64:ce:62:f4:
cf:60:c5:a1:6f:4a:2d:85:bc:7d:bf:0f:27:fb:8e:a0:21:d5:
4e:df:18:d8:b1:da:31:26:00:1a:e2:9c:7a:2e:e4:2e:d7:97:
37:53:e9:ac:72:d3:71:0e:16:7f:4a:85:8d:39:84:4b:08:4c:
ca:a6:e8:ef:54:f9:1c:b1:88:65:ad:9c:86:a9:08:3b:dc:e8:
b3:ea:21:2c:ec:20:af:6e:a0:bf:11:de:68:48:3c:4f:61:c5:
e6:47:a9:39:1f:a4:62:90:32:2d:3a:1e:4e:14:98:71:4f:d9:
d6:4d:e2:ea:da:73:36:8c:b4:a8:2e:be:50:ae:6e:0b:a4:35:
03:2a:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:10:28 2025 by rpki-client