Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer (raw, json)
Hash identifier: cd3TBxxLupMn31/mX7RFl4gB7ygp6VxiFh5kCD3NpS8=
Subject key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027253
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Nov 2025 01:49:46 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 203.6.250.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160339 (0x27253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 01:49:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:47:f8:7b:18:2b:96:7b:10:b6:f5:22:ec:
cd:80:5c:b5:21:8a:9a:06:57:ec:6e:4b:c4:c3:8a:
05:50:45:ab:a0:a6:d0:4b:f7:82:7b:27:fd:40:f3:
c4:e4:28:44:5d:75:74:be:39:6c:4a:d7:ae:c0:85:
34:ac:0d:7d:e6:f7:82:d3:66:06:e3:ef:ba:de:33:
a3:b1:f9:5d:41:89:6e:c5:f7:d8:aa:f8:07:dc:93:
e0:b6:60:ec:23:ef:3e:cf:82:1a:5f:d2:24:cd:26:
79:18:94:6d:e6:2a:a8:c5:aa:ee:2e:6b:36:da:17:
af:49:70:1d:59:66:51:97:0b:2f:1e:08:70:5c:dd:
a1:62:3f:5d:4f:92:19:ea:88:e6:d9:af:04:e0:df:
42:4e:68:76:87:f9:f2:09:d1:4e:9b:71:6a:b1:56:
58:16:1c:e8:45:78:8d:36:df:b9:e7:db:9b:30:a0:
4f:cb:42:e7:fd:37:72:4e:ef:3b:3c:7a:82:9e:6d:
12:1a:82:8b:8d:89:bb:1b:ed:bf:a7:b1:ee:26:5c:
f4:43:6c:87:31:9b:66:9f:22:55:26:07:b7:3a:d6:
50:e3:1d:66:c0:e9:59:9a:6f:67:6d:00:62:88:77:
fb:07:f8:ba:dd:79:eb:d2:44:e4:a3:ee:4c:33:5e:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.6.250.0/24
Signature Algorithm: sha256WithRSAEncryption
80:22:45:c1:be:2f:71:d2:e7:d6:0d:9e:21:19:a7:69:58:9a:
2e:29:bb:53:5f:49:75:95:f8:3b:01:92:32:e8:62:bc:dc:5e:
ea:52:29:ed:77:05:f2:54:ca:cf:43:b9:60:77:3a:89:14:ed:
8d:4e:a2:be:06:be:bd:9e:c0:5d:73:97:4b:e3:22:86:84:e2:
2e:43:96:3e:c5:30:d1:43:92:13:04:66:3c:2e:34:88:15:6d:
33:51:41:72:b7:f6:83:97:38:b6:64:c4:0a:45:06:5d:2f:2d:
52:2d:e4:7f:7d:4c:50:7a:11:c3:1e:f8:c7:75:6d:8a:1d:86:
88:69:d3:d1:05:9a:b7:db:f2:42:bf:c3:43:16:8d:1a:f7:06:
6a:69:0f:25:8a:84:46:25:ef:6d:af:39:6b:92:58:bd:11:0f:
4e:71:cd:d4:c2:ac:9c:4e:20:64:43:e6:cb:81:9c:8e:ce:33:
27:0b:7f:e3:24:13:49:11:6a:50:c1:fd:9f:13:85:18:9f:01:
96:cb:38:b4:05:4e:d1:c9:83:c4:45:5f:7c:64:fb:b8:57:a9:
f8:36:5d:1d:2c:ac:5c:0e:11:ee:6c:cb:74:9e:a0:55:14:a5:
19:49:e1:c3:30:3e:d1:a7:83:62:8c:63:5b:4b:96:85:c8:8a:
c2:0f:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:54:10 2025 by rpki-client