Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
File: 6w67ZlG90AYnOWdC_xoLTqD94uU.cer (raw, json)
Hash identifier: dNnihBnY8c3G+jRTn1q2v1i8DWTKkBpO9qMU8PoiG1o=
Subject key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025528
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 11 Jul 2025 13:56:22 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 136794
IP: 103.96.32.0/22
IP: 2401:74c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152872 (0x25528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 11 13:56:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A913E504, serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:a7:d2:70:d3:ae:82:d8:56:cc:1d:79:f3:
47:b1:8f:26:1b:1e:ff:6f:9c:40:87:3b:5b:28:69:
78:69:61:af:d4:a0:cd:9d:47:27:35:b9:0c:8b:21:
a6:09:00:ce:0e:69:1a:2f:94:2c:d2:00:ca:a3:59:
be:74:c1:37:8f:1f:3f:1f:f9:48:27:8c:8e:e2:3a:
ae:7a:92:1e:c6:2c:25:e4:ba:e6:2e:9e:13:82:84:
b1:97:e3:e3:93:e1:40:eb:44:2b:3a:0e:1a:ef:e6:
05:b7:5a:e2:5c:4b:cc:82:c7:6d:61:9b:d0:db:11:
e4:4f:c4:4b:b6:cd:5a:46:21:bd:47:95:33:f1:8a:
23:49:b3:3b:a2:a8:11:8e:29:8b:4c:69:d7:b0:13:
42:6c:d9:bf:0b:70:36:42:8f:d6:90:e1:67:5e:fd:
1b:7e:eb:42:30:11:7e:9d:ff:a6:e9:9d:3a:1e:8b:
90:c1:42:fb:24:6a:e8:51:dc:77:16:f5:62:64:3a:
45:0f:07:4a:9b:0b:b0:a8:aa:75:82:d6:df:ef:21:
fd:65:31:26:17:18:cb:f7:e3:72:78:0f:2c:bc:9e:
ec:7c:04:3f:c0:1c:79:8d:7b:f2:e3:38:3f:b6:0d:
0a:6e:e3:07:0a:8d:e7:b8:f0:23:75:94:41:e6:a1:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136794
sbgp-ipAddrBlock: critical
IPv4:
103.96.32.0/22
IPv6:
2401:74c0::/32
Signature Algorithm: sha256WithRSAEncryption
d5:b9:ac:03:38:23:9a:7f:6f:3e:71:23:35:c0:d8:c0:0a:51:
64:e3:c6:ac:fa:4a:28:67:e9:55:08:5a:c9:c7:4f:2a:60:09:
3b:16:00:a0:d8:f2:aa:01:5e:f1:0d:34:56:57:73:86:ab:3c:
f5:b1:3d:9d:d2:39:c2:59:aa:55:19:7f:5d:16:25:9f:07:48:
ff:70:97:85:e4:7d:e6:2e:20:5b:1c:92:59:aa:b2:5a:fc:c5:
de:ea:4e:da:fa:b9:30:0b:67:77:e0:f2:40:11:9c:12:9a:85:
ae:a4:52:88:d2:1f:21:65:dd:8d:3d:70:24:2c:f8:0c:71:02:
22:72:f7:86:f2:00:2d:70:c6:f5:99:42:4a:17:f2:d4:07:c0:
da:82:27:36:4c:25:48:70:f3:d4:96:7a:e2:8e:06:20:cf:07:
2f:a2:d1:a0:1a:16:6a:53:ad:7e:3e:21:7e:1a:4f:c2:7a:2a:
0d:d9:63:38:d4:c3:54:d7:cd:d7:cb:b0:66:1e:6a:b5:3c:a6:
f5:d8:16:79:e4:9e:99:bd:32:94:cf:1d:93:db:27:44:3d:2e:
52:6d:98:3a:7d:31:43:85:40:29:17:7f:1e:78:71:c7:0b:f8:
b7:c4:e7:22:7f:f6:fa:91:c0:14:32:35:e0:7e:6d:95:18:e6:
3b:74:fb:65
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAlUoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcxMTEzNTYyMloXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0U1MDQxMTAvBgNVBAUTKEVCMEVCQjY2NTFCREQwMDYyNzM5Njc0
MkZGMUEwQjRFQTBGREUyRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCY0qfScNOugthWzB1580exjyYbHv9vnECHO1soaXhpYa/UoM2dRyc1uQyLIaYJ
AM4OaRovlCzSAMqjWb50wTePHz8f+UgnjI7iOq56kh7GLCXkuuYunhOChLGX4+OT
4UDrRCs6Dhrv5gW3WuJcS8yCx21hm9DbEeRPxEu2zVpGIb1HlTPxiiNJszuiqBGO
KYtMadewE0Js2b8LcDZCj9aQ4Wde/Rt+60IwEX6d/6bpnToei5DBQvskauhR3HcW
9WJkOkUPB0qbC7CoqnWC1t/vIf1lMSYXGMv343J4Dyy8nux8BD/AHHmNe/LjOD+2
DQpu4wcKjee48CN1lEHmoWq7AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU6w67ZlG9
0AYnOWdC/xoLTqD94uUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNFNTA0L0EwOEEyQzc2OTgzRDExRTdBMzdGRDQ3OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRTUwNC9BMDhBMkM3Njk4M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxH
OTBBWW5PV2RDX3hvTFRxRDk0dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhZaMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2AgMA0EAgAC
MAcDBQAkAXTAMA0GCSqGSIb3DQEBCwUAA4IBAQDVuawDOCOaf28+cSM1wNjAClFk
48as+kooZ+lVCFrJx08qYAk7FgCg2PKqAV7xDTRWV3OGqzz1sT2d0jnCWapVGX9d
FiWfB0j/cJeF5H3mLiBbHJJZqrJa/MXe6k7a+rkwC2d34PJAEZwSmoWupFKI0h8h
Zd2NPXAkLPgMcQIicveG8gAtcMb1mUJKF/LUB8Dagic2TCVIcPPUlnrijgYgzwcv
otGgGhZqU61+PiF+Gk/CeioN2WM41MNU183Xy7BmHmq1PKb12BZ55J6ZvTKUzx2T
2ydEPS5SbZg6fTFDhUApF38eeHHHC/i3xOcif/b6kcAUMjXgfm2VGOY7dPtl
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:53:54 2025 by rpki-client