Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
File: _Ern2eP0GafSBKVMedHz76mn1sg.cer (raw, json)
Hash identifier: THMPVy6p7EBqxsWC17HlQYHVaalllLBp4MyG3sFBlvM=
Subject key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027083
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Oct 2025 13:04:19 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 58.84.28.0/22
IP: 103.197.44.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159875 (0x27083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 30 13:04:19 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:45:6f:e2:d8:12:d2:a6:e9:50:57:75:01:
14:91:82:6e:de:ce:7d:ef:bd:a1:8d:5c:01:5c:ea:
92:cd:93:c8:ad:c8:66:58:51:39:a8:af:b0:cb:1b:
29:33:02:21:d3:15:32:e5:cc:75:6e:bf:dd:19:47:
33:0c:4d:7d:4d:c2:d6:db:2e:7b:09:6b:3d:50:c1:
18:77:27:98:96:6e:a7:61:10:e7:58:1a:88:67:91:
5e:79:cc:96:9f:37:6a:9b:75:8f:ba:0b:2d:38:95:
9b:28:a0:f9:d2:b2:e3:0c:39:dd:d0:cf:cf:bd:d2:
64:cf:2b:09:7c:25:5f:6b:2e:da:0e:e6:9a:83:95:
2f:a2:d8:65:22:7f:eb:a4:37:ae:0d:72:67:17:55:
36:ca:4e:18:19:61:ac:cb:c4:d3:97:12:3e:23:15:
2d:eb:ea:f5:55:26:4e:d5:0e:c6:2c:fa:e5:da:75:
49:67:cd:1d:13:d6:1d:7d:a7:34:78:41:c3:c9:90:
1f:51:aa:42:d9:55:32:67:12:b0:53:a7:ed:93:96:
07:f2:eb:91:33:a6:34:d1:54:45:98:8a:e6:dc:43:
06:dd:9a:6a:16:fe:ea:9f:a7:f6:fc:db:aa:53:84:
fa:b6:33:45:81:35:20:61:2b:f7:6c:4f:43:44:37:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.28.0/22
103.197.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:a7:60:17:8f:5f:d7:6f:2d:50:d6:27:d1:1d:b7:6c:46:c4:
b4:c8:1b:6b:7a:50:f2:ce:65:90:ce:51:7b:34:f2:0f:6b:33:
01:cf:e0:5a:dd:b9:34:cc:07:79:45:42:32:4b:4c:cd:f7:7c:
52:85:f0:8d:ff:51:f9:d6:9d:22:3b:79:44:d4:d9:43:e0:02:
d6:42:8f:73:b1:ff:f5:7e:2d:8e:c0:2c:21:51:6f:a7:fb:00:
5e:71:40:8f:a0:f4:d1:3f:56:81:b9:37:a4:41:70:2f:3b:39:
7b:de:05:f2:25:be:3c:1c:d7:c0:f1:c9:5e:d5:a5:61:bd:f6:
8d:78:00:ed:cb:44:bd:6a:3b:68:44:c3:71:61:88:b3:f5:dd:
cd:1a:c6:85:44:2c:14:36:a4:90:43:c2:c9:a2:de:92:4e:a6:
b0:69:ca:bd:fb:ee:41:4c:af:57:e1:fc:31:53:82:27:e3:c3:
47:d8:e4:ed:c8:f7:e7:30:8e:ff:57:c3:7e:9b:28:4b:57:10:
34:0e:d6:fb:e8:33:41:9f:30:87:70:b7:09:88:dc:a6:e5:aa:
28:1f:8e:e3:54:df:45:d4:c3:87:b7:f3:3e:3b:92:c3:48:87:
58:b9:97:ad:87:48:77:d2:7e:cb:77:d8:8b:8d:3d:82:0f:9c:
3e:b9:e2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:12:58 2025 by rpki-client