Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
File: _x_VyU8S81-tE63yeZqJj94Gysk.cer (raw, json)
Hash identifier: U7Q/6b7O8FIqDzxLiPEGaoXRBzJeeMGc9TfEMY2l+ik=
Subject key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027280
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Nov 2025 14:59:11 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 103.36.12.0/23
IP: 2402:ec00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160384 (0x27280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 14:59:11 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91504D6, serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:7f:81:a8:10:92:e1:80:0a:df:eb:05:95:
c3:bb:f6:b5:f3:98:ff:94:3c:39:e3:6b:ba:12:db:
fa:27:80:3f:97:01:ea:33:06:57:b5:86:3d:08:55:
f6:07:ef:40:a8:6a:cb:b4:71:36:cd:b7:d4:c3:ba:
1d:7a:e3:0e:10:6b:31:60:41:e9:61:0d:9a:08:a8:
6b:6f:ae:45:01:17:85:57:51:6b:02:f8:88:02:11:
ac:bb:aa:16:4c:3e:ed:2e:20:b0:81:86:d0:25:05:
df:44:e7:08:7e:82:32:ba:f4:e6:7b:de:6c:96:a9:
0f:85:66:c4:46:cd:9f:29:ca:a2:a4:d7:cb:b8:4a:
6d:41:6b:40:0c:9b:ba:d6:aa:32:35:dc:29:ba:5c:
79:74:a5:6c:80:17:95:c6:f1:ed:84:3c:89:3b:2a:
d4:fb:c3:64:99:64:32:fd:ab:f5:77:61:fa:27:ef:
98:be:a6:1a:00:ce:8c:4b:43:81:fa:4e:84:df:0a:
21:3f:3b:c8:4d:e9:8b:68:e6:3b:4d:37:bb:cb:60:
c4:67:10:d9:fa:dc:e3:b4:6b:c6:c6:e4:26:e2:ae:
ea:d3:23:7f:f6:de:bf:73:f1:f2:66:fa:e4:f0:4b:
36:00:4f:12:f8:89:ba:8c:98:62:f5:7c:86:db:2a:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.12.0/23
IPv6:
2402:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
0c:85:e4:05:89:89:8c:50:20:8d:f9:3a:3c:01:5c:67:ea:2e:
5f:27:23:e1:88:69:af:fa:a7:a5:fc:bd:09:e4:1d:d7:e4:72:
6f:fc:e6:a4:70:d0:65:66:25:6c:42:6e:cf:00:4f:38:05:a7:
9e:2a:9e:5a:ca:8b:08:07:c6:c7:18:68:59:e5:ef:79:75:a3:
46:2b:61:ac:00:4c:f2:c4:4a:f3:b0:be:cf:b6:34:2b:24:22:
80:5e:01:78:9e:93:50:f0:c9:db:fd:88:59:8b:b9:cd:85:df:
57:e4:7a:6a:7d:1a:a8:a1:d8:1f:a0:77:16:89:f6:c8:f5:bd:
74:78:02:20:ef:b0:3f:fa:15:97:39:e7:8a:f2:af:1d:6a:2a:
e0:bf:78:8a:0a:7e:89:0a:88:4c:de:c7:3d:4d:3f:20:7a:5c:
60:41:53:54:ba:40:af:27:16:db:1c:10:63:92:3d:b6:63:5c:
57:34:de:53:4c:6f:9d:2b:54:0e:1b:62:e3:91:47:e7:ea:7f:
eb:4f:e8:9d:11:b6:c8:91:b4:28:06:dc:9f:32:8d:a5:06:89:
05:03:d8:32:87:19:3e:8a:d6:05:f4:63:4f:50:7a:e1:03:57:
9d:66:43:dd:99:d2:ae:9b:10:7a:b7:4b:2d:bc:d1:51:9d:92:
b3:28:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:10:17 2025 by rpki-client