Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
File: W9MkppvSbt2t9RKc0Y93odgFI7Y.cer (raw, json)
Hash identifier: bPsIs78ms3JtWEWFKAamWVHG4Nuas+FyQ8kgAASfkxk=
Subject key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0253C2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Jul 2025 19:26:00 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 17751
AS: 18361
IP: 43.255.128.0/22
IP: 103.239.128.0/22
IP: 203.0.116.0/22
IP: 203.4.176.0/22
IP: 203.6.252.0/23
IP: 203.15.144.0/22
IP: 203.18.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152514 (0x253c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 4 19:26:00 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91B0380, serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:3b:c2:8f:48:4a:36:1d:0c:fc:40:48:cb:
79:18:05:2f:66:6a:68:5d:42:2d:1a:de:64:e0:dc:
04:1e:01:42:6d:76:08:a4:8e:12:09:3e:0e:a3:9c:
43:db:e8:d4:78:be:b2:2e:80:65:49:27:83:ce:8a:
6b:82:c2:e2:d2:38:a2:af:7b:9e:8c:cb:42:de:1c:
d7:10:ec:5a:4b:3e:69:82:a9:b1:16:3c:e0:5f:27:
93:a2:b4:77:ab:f5:8c:2c:3e:90:40:1a:e1:e9:08:
14:90:b3:13:df:7a:f6:d1:be:e1:c2:89:82:66:84:
b7:33:c7:80:07:f7:2c:e1:f8:2c:25:95:fe:23:38:
4f:04:c8:4b:c8:89:3d:96:1a:04:05:97:2a:1c:17:
da:2a:48:76:cf:bf:ee:da:16:a7:61:96:67:cb:c7:
38:21:9d:dc:57:a0:76:f1:32:f7:c3:25:77:e8:9c:
ce:66:fc:81:0c:f2:7b:0e:03:d4:43:65:82:fb:af:
a4:3a:7f:d4:dd:26:ce:9a:c3:37:49:04:6f:e8:59:
62:e1:28:1f:61:9c:93:7c:b2:32:f0:7b:b2:c2:75:
16:af:23:ef:e6:54:5e:7d:43:e8:f4:18:31:05:d8:
03:b1:9a:c9:eb:49:f3:d1:8f:9d:04:92:ab:7e:36:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17751
18361
sbgp-ipAddrBlock: critical
IPv4:
43.255.128.0/22
103.239.128.0/22
203.0.116.0/22
203.4.176.0/22
203.6.252.0/23
203.15.144.0/22
203.18.164.0/22
Signature Algorithm: sha256WithRSAEncryption
97:29:91:d6:89:0d:8f:27:17:d9:14:3d:e5:45:87:38:64:c7:
e2:b0:6c:09:bc:ef:b6:e6:d0:0c:d1:f1:8b:47:60:a3:3c:78:
9b:5f:57:2d:2b:2b:8a:9d:61:d0:41:33:bf:5d:9b:7a:0a:3e:
98:5d:43:f5:1a:1a:db:70:4d:11:15:8e:54:e6:1a:b7:d1:93:
f7:7a:33:a5:ac:5a:33:4f:88:66:c7:01:93:71:39:45:a7:cc:
e6:bc:a3:ac:1c:e5:16:51:4b:bc:d9:88:10:94:a5:e7:dd:3b:
50:e2:44:99:0d:e5:58:10:b6:9f:c2:87:54:af:db:37:29:d9:
2f:32:bc:a3:ac:e0:af:ab:d3:fa:32:03:c4:e2:0c:2b:90:a7:
33:8d:0a:48:74:f3:9b:d7:c9:61:33:6e:ae:45:48:7b:d2:39:
80:8d:05:bd:10:32:0c:1c:21:91:8f:50:3b:c8:0a:56:5b:06:
2a:20:67:47:60:56:a8:54:c3:19:3d:aa:b5:83:53:71:fc:05:
c4:80:1d:fc:8b:51:1a:37:b1:63:41:31:5d:c4:52:b7:fc:2b:
f1:29:65:8e:cb:cc:f4:89:5c:f0:08:a1:1f:44:84:c4:3d:c2:
12:48:5c:72:06:88:42:6d:60:e3:1e:09:9f:3e:a2:e1:dd:50:
25:34:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:08:28 2025 by rpki-client