Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer (raw, json)
Hash identifier: UkrGtQkzUGpdMl8U1X03C3h8YThWHBwvSncMdepo8/k=
Subject key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027305
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Nov 2025 18:23:53 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 103.76.36.0/22
IP: 116.206.76.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160517 (0x27305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 4 18:23:53 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:80:b0:78:f1:33:9f:b5:20:17:25:b1:a8:
8b:b0:9e:db:01:e3:50:e0:78:09:48:1a:e5:43:a7:
86:4b:99:e1:ff:90:47:e8:5b:12:1f:c4:ab:75:6c:
40:70:2e:df:3f:47:37:4c:cc:a0:bc:c3:c2:fa:7c:
7f:5d:0f:cb:a9:9f:26:da:a1:fd:0b:b9:71:0e:9a:
1f:53:2b:51:9a:ee:d7:58:3f:a9:d7:31:90:1a:36:
02:bd:29:89:ba:cf:ea:ec:b0:cf:47:34:17:d1:6c:
f1:53:79:be:f1:83:90:8f:a6:42:15:77:7e:82:58:
b7:16:e1:06:a5:c4:35:a3:d2:29:9a:9c:97:bc:8c:
ea:11:de:4e:9c:c0:50:ad:82:cc:10:a2:cc:f2:0b:
95:b4:00:90:24:ba:a9:17:2b:c3:4d:c7:99:c9:93:
01:fc:1d:da:c2:5a:77:88:d4:f7:8b:d1:9c:cf:0d:
36:1d:6f:b3:a7:0b:f2:30:7f:ac:ac:14:b2:a4:a3:
d7:1f:33:eb:8e:91:5a:af:37:00:9f:b4:a1:e9:d8:
a7:10:e7:51:30:cf:d5:39:0e:d7:50:d4:06:c7:61:
c2:7c:2d:f2:19:51:48:02:17:e1:00:6e:c7:22:50:
4e:96:c5:d8:c3:42:ba:6e:17:29:f5:d7:8d:23:9f:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.36.0/22
116.206.76.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:4b:fc:a4:3d:2d:e0:cd:4b:7a:76:e6:5c:c1:16:75:c5:e3:
6e:20:b6:60:76:5f:db:ea:0a:a8:50:62:5f:38:cf:f9:10:62:
dc:ad:d3:0d:aa:04:69:65:57:2c:76:83:37:30:e0:26:d2:a7:
7d:12:87:85:44:0a:77:85:13:2c:35:04:50:de:7d:ae:7d:8a:
bf:ec:f9:7d:df:eb:9f:75:22:d4:01:d2:29:9a:36:52:23:68:
b9:39:fa:a0:06:65:27:57:11:59:1c:b2:71:46:5e:f0:5c:b1:
fd:73:c2:c8:a7:4d:49:5c:1b:03:7d:2f:54:62:af:4b:7a:0f:
39:2f:86:13:08:47:42:6c:03:46:67:16:ef:c4:86:3a:a3:db:
e3:0e:c9:ed:e9:9c:36:59:a1:30:79:d9:43:06:a3:4c:f1:06:
68:fe:23:3d:0e:b7:49:62:d5:cf:5d:b0:ee:32:68:9e:70:ee:
6a:21:44:79:a8:8e:45:2a:ca:02:c6:35:75:2b:4b:37:5d:79:
41:64:12:cf:ec:f9:bd:7f:45:c1:50:62:c2:2f:36:9c:10:d1:
c4:81:c9:fa:2c:0c:fd:ed:b2:51:77:8c:ce:f1:87:04:c6:d4:
34:3c:95:6b:9c:d7:28:75:a7:27:91:5f:38:04:06:3c:47:b9:
5f:6c:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:42 2025 by rpki-client