Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
File: 7TaUIY3LHq89GvXGq8Axptt-bOU.cer (raw, json)
Hash identifier: /3I+/tsv5QbjYzHKAe5P60S6t0LyyJpHbraTug0DtOs=
Subject key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0259D4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 31 Jul 2025 23:21:47 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 4620
AS: 9234
IP: 43.255.56.0/22
IP: 103.11.140.0/23
IP: 103.29.106.0/23
IP: 103.70.132.0/22
IP: 203.78.148.0/22
IP: 2402:5900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154068 (0x259d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 23:21:47 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:83:43:98:8b:c8:75:e1:1d:49:4b:12:85:
9c:d3:26:95:01:6e:1f:fe:2b:49:dc:cc:8b:fc:73:
9a:3b:c2:51:10:a4:96:8b:42:27:de:86:07:31:77:
37:ce:16:9e:2d:fc:84:cf:9e:3b:b0:72:04:86:24:
d3:c7:d8:b5:2e:d7:da:81:81:73:6c:0e:21:c3:f9:
ca:b0:de:8b:dd:0f:51:ae:db:b0:db:c9:d7:1d:e5:
3d:42:e2:cd:42:b5:65:33:55:b1:fc:e3:fa:0c:62:
ac:51:c0:1a:f0:08:0f:99:34:83:05:b5:9b:2e:15:
d4:8c:59:de:f6:ae:72:09:04:b3:3a:36:ba:c1:47:
da:7c:33:4b:6f:0b:e5:7a:6b:75:22:54:c7:b5:3d:
e2:bc:df:5e:e9:48:c3:e6:0f:1c:f9:ce:7d:0a:56:
2b:97:3f:b5:fa:c3:23:29:c6:ca:80:cc:fa:05:be:
fe:3a:55:bb:26:51:90:e1:23:4d:fd:bf:92:a9:7e:
9d:79:6d:87:85:a9:1f:a7:9c:98:b7:68:1f:58:91:
c1:08:49:8e:3b:1e:ef:4b:cb:82:98:13:53:17:0e:
49:f6:51:f7:2f:f5:73:94:20:8c:62:83:e2:42:62:
d0:fc:2a:4c:9d:c3:d6:40:47:3e:45:5c:36:22:f7:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4620
9234
sbgp-ipAddrBlock: critical
IPv4:
43.255.56.0/22
103.11.140.0/23
103.29.106.0/23
103.70.132.0/22
203.78.148.0/22
IPv6:
2402:5900::/32
Signature Algorithm: sha256WithRSAEncryption
d3:cc:26:c6:75:27:7f:e0:65:45:a6:3a:6a:aa:73:2d:6c:eb:
15:a2:f7:8d:ae:f6:b8:28:f5:5f:1b:22:ff:ee:ec:38:62:cc:
7b:8a:f8:05:62:e9:dc:1c:cd:df:99:3a:bb:3d:cd:d2:be:1b:
f4:c9:c0:13:f0:de:25:75:df:b5:08:a4:c9:67:4c:0b:f3:55:
04:4f:65:9d:ac:1c:87:32:31:eb:fc:50:78:15:6d:ef:3f:43:
0b:85:49:17:45:76:dc:bf:52:e1:2d:f4:82:f7:62:45:2e:dc:
46:ba:7f:53:27:fc:20:80:87:f3:a4:6c:00:03:7e:2a:7d:de:
e2:c3:04:36:6c:de:fd:62:7d:c0:21:bb:3e:15:f1:16:25:c1:
83:2a:91:cf:f8:7d:3e:50:de:8c:c4:e4:36:62:f0:30:ee:16:
57:ba:f4:09:f5:53:a9:01:8c:84:56:8b:3e:67:82:41:fe:fa:
e9:c2:93:7a:bf:d7:ee:1a:59:c1:e2:52:a1:35:80:e4:70:f6:
af:f8:9f:ed:38:72:09:94:9f:a5:9d:19:09:8d:04:24:32:71:
56:27:22:45:fc:8c:03:1b:10:0a:28:ed:9d:53:f3:2f:a2:b5:
8a:72:37:f8:ba:fb:9a:2d:97:3f:4b:31:63:f1:f3:82:f2:6b:
ae:0c:d0:3e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIDAlnUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDczMTIzMjE0N1oXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVD
NkFCQzAzMUE2REI3RTZDRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDaIYNDmIvIdeEdSUsShZzTJpUBbh/+K0nczIv8c5o7wlEQpJaLQifehgcxdzfO
Fp4t/ITPnjuwcgSGJNPH2LUu19qBgXNsDiHD+cqw3ovdD1Gu27Dbydcd5T1C4s1C
tWUzVbH84/oMYqxRwBrwCA+ZNIMFtZsuFdSMWd72rnIJBLM6NrrBR9p8M0tvC+V6
a3UiVMe1PeK8317pSMPmDxz5zn0KViuXP7X6wyMpxsqAzPoFvv46VbsmUZDhI039
v5Kpfp15bYeFqR+nnJi3aB9YkcEISY47Hu9Ly4KYE1MXDkn2Ufcv9XOUIIxig+JC
YtD8Kkydw9ZARz5FXDYi93lhAgMBAAGjggM5MIIDNTAdBgNVHQ4EFgQU7TaUIY3L
Hq89GvXGq8Axptt+bOUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlFQUYzLzlEMjAwREJDNkQxODExRTdBODE1REE4MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkz
TEhxODlHdlhHcThBeHB0dC1iT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHQYIKwYBBQUHAQgBAf8EDjAM
oAowCAICEgwCAiQSMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCK/84AwQB
ZwuMAwQBZx1qAwQCZ0aEAwQCy06UMA0EAgACMAcDBQAkAlkAMA0GCSqGSIb3DQEB
CwUAA4IBAQDTzCbGdSd/4GVFpjpqqnMtbOsVoveNrva4KPVfGyL/7uw4Ysx7ivgF
YuncHM3fmTq7Pc3Svhv0ycAT8N4ldd+1CKTJZ0wL81UET2WdrByHMjHr/FB4FW3v
P0MLhUkXRXbcv1LhLfSC92JFLtxGun9TJ/wggIfzpGwAA34qfd7iwwQ2bN79Yn3A
Ibs+FfEWJcGDKpHP+H0+UN6MxOQ2YvAw7hZXuvQJ9VOpAYyEVos+Z4JB/vrpwpN6
v9fuGlnB4lKhNYDkcPav+J/tOHIJlJ+lnRkJjQQkMnFWJyJF/IwDGxAKKO2dU/Mv
orWKcjf4uvuaLZc/SzFj8fOC8muuDNA+
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:17 2025 by rpki-client