Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
File: XUXapVj_ZfZmNblniAm4rPBAc9I.cer (raw, json)
Hash identifier: 9fSCMcPNPln+ZR4ks13vVT5bn0xBh+lP2JYvJ2OdhrA=
Subject key identifier: 5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02593C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Jul 2025 23:21:17 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 136562
IP: 103.92.212.0/22
IP: 2401:2140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153916 (0x2593c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 30 23:21:17 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91F52FD, serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:15:38:20:6e:d5:ed:f8:c8:08:43:6f:a0:
93:42:bf:c6:19:48:e4:f8:36:97:26:93:cc:8b:6c:
e7:34:31:cb:d5:55:47:17:6f:16:1d:82:40:49:da:
ff:d7:28:48:1d:6a:ce:82:9d:3e:2a:df:e3:8c:b3:
2a:6f:79:ac:7e:28:16:c0:6c:fb:d0:9b:b6:69:c0:
85:6e:bf:b2:2a:3a:db:0e:ff:a2:03:09:8d:49:c1:
b3:3b:89:67:e7:93:63:ff:73:c9:53:3d:6c:ff:a0:
2f:37:89:2f:07:28:dd:e4:97:87:60:a3:3e:5b:9f:
eb:ad:6a:65:e8:a3:e1:4a:d3:72:76:2e:c6:2b:0f:
d3:ef:51:60:38:35:8b:c2:c2:18:76:6e:d7:29:07:
60:7b:1f:d0:31:49:c0:85:c6:df:19:7b:15:d3:5d:
35:d1:31:08:0d:64:43:69:61:54:15:07:a0:4f:af:
58:ec:cb:d9:a0:19:05:4b:9b:2c:fe:27:67:b2:03:
56:13:77:07:cb:d7:90:31:4f:e8:5d:69:a1:bc:f8:
96:d8:b8:77:2b:1a:ef:38:94:eb:6b:b7:da:c6:fa:
d1:71:b5:d0:fb:63:30:ba:c7:a7:28:93:cf:e6:e5:
46:96:83:f7:df:1e:ad:7a:5f:83:97:ec:71:63:09:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136562
sbgp-ipAddrBlock: critical
IPv4:
103.92.212.0/22
IPv6:
2401:2140::/32
Signature Algorithm: sha256WithRSAEncryption
d0:cf:bd:06:21:06:e7:d6:bc:cc:75:b5:96:9d:95:c0:c8:3b:
af:0b:03:0c:ee:c4:fd:c8:27:ae:f0:83:25:57:15:3b:51:14:
de:c3:10:a2:ba:3e:a1:c8:9f:94:3f:e2:bc:b0:ca:b0:3f:3c:
f4:aa:1c:a8:ca:80:ac:7e:3e:4d:b6:0d:4f:75:60:8c:73:8d:
25:06:72:d0:b6:5c:58:b0:37:d5:72:81:87:c0:27:c0:82:4a:
f9:95:8d:99:46:d1:9d:57:8b:04:f1:d4:f0:af:86:fd:3c:35:
19:c3:0d:a0:ea:26:33:06:84:85:24:b7:ca:45:33:0a:c8:63:
45:cd:d8:99:10:1f:a2:b3:17:4e:84:5e:ba:9f:da:db:2b:1d:
3f:35:01:9c:ec:ae:9c:1a:b4:0c:43:ac:dd:4e:cf:35:3b:e6:
1b:35:1e:14:c0:b5:67:0e:13:2c:1e:22:9f:7d:21:51:c8:5a:
bd:6a:41:98:94:08:92:e3:fe:b1:f9:94:1d:c5:e8:4c:51:46:
76:63:ef:a2:e7:90:fa:c0:78:db:f3:5d:c1:9a:63:1f:a5:27:
35:87:36:88:23:9c:45:b5:7c:c6:63:a4:26:85:2d:6c:f2:b1:
46:34:fd:09:0c:24:d1:ea:c4:a2:0c:fc:29:68:0c:3c:dc:ae:
30:38:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:52:18 2025 by rpki-client