Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
File: ao09a_bbD13jJOQgxXOwqRhDx5Q.cer (raw, json)
Hash identifier: 3cNqKl8tGY9T9QC4zlvfAlTtu3+QB1hskDtwwXf0U+w=
Subject key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026EF1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Oct 2025 12:33:45 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 202.137.254.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159473 (0x26ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 24 12:33:45 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:0b:43:26:67:99:f7:15:89:98:f8:c9:e5:
8b:7a:1e:82:9d:b1:21:f3:6d:2a:9c:6f:90:ec:6d:
cf:80:34:98:2e:fe:16:10:ea:7b:45:8b:9d:f8:71:
3f:15:f4:f0:f0:5f:c5:fb:e1:71:cd:d5:f3:d3:4d:
71:b1:77:1a:c9:00:b0:2e:96:78:31:9d:14:7e:51:
35:89:8d:4e:83:2f:f1:99:a2:4f:89:0f:27:d4:fe:
6c:c6:c4:0f:d8:fb:ee:ba:53:5f:96:b5:c0:2e:cf:
1f:68:26:71:86:bc:63:b6:c0:81:11:c1:d3:0f:81:
c4:32:d0:7e:74:37:45:71:bb:e2:a2:a1:a0:8c:29:
41:0a:f4:d4:ba:19:39:3e:37:e4:ea:1d:ef:c2:a2:
be:57:94:11:95:85:dd:1c:39:4b:55:39:83:f2:bd:
31:f6:b3:67:ca:98:61:c3:66:ef:90:5e:67:21:30:
13:78:9b:2a:f8:8f:00:0e:3d:15:75:f2:c6:36:d3:
cf:dd:cf:46:e0:bc:28:7b:32:5a:b0:17:b2:79:8b:
1a:44:c9:95:e2:5a:90:a6:73:37:ba:7c:e5:26:45:
24:22:75:af:85:17:08:17:8d:22:dc:73:e0:73:5d:
61:ff:7e:b7:67:b2:c8:dc:28:1b:d8:9c:cf:db:22:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.137.254.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:94:fd:f0:3b:9b:8d:c4:a2:67:2d:18:be:0c:4f:5a:56:1c:
94:7e:e3:0a:19:86:10:36:09:c5:77:61:10:3d:b9:f3:62:91:
61:73:90:1a:4f:aa:d1:df:66:dc:e6:27:2c:30:5c:34:ce:bb:
01:3b:d6:52:e0:a3:22:ab:39:7d:c6:d6:bb:48:30:d8:65:98:
70:14:0b:55:09:2c:a9:3b:32:4b:7c:2c:4a:be:b7:7f:88:3c:
52:a9:b3:c1:ff:8e:8c:79:96:28:c0:1c:a6:18:10:33:af:3b:
3c:67:9c:c8:0d:93:0b:3a:69:62:8b:be:a2:ae:b8:82:1a:3e:
c3:9d:9c:a1:1f:52:cc:9f:32:90:ed:b0:e1:b5:86:54:60:45:
d6:2f:30:f9:a3:ad:9f:e2:36:01:c3:d1:a5:37:fe:5e:7e:0d:
b5:8c:f0:22:cb:9c:91:44:4b:22:25:7e:be:06:ab:d1:97:0f:
87:ff:30:d0:3b:97:f3:5e:ff:fe:ee:1f:aa:03:6a:3b:c6:13:
1c:26:07:d2:59:a9:00:b0:44:12:59:19:cf:78:b4:b3:74:8f:
e0:c1:29:f1:c5:98:5a:38:0e:60:40:4a:ed:4b:f0:f5:d4:52:
38:e3:73:a0:bd:90:11:eb:ce:ac:80:c9:f9:60:a6:cc:0d:41:
4e:a3:e3:83
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAm7xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAyNDEyMzM0NVoXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQy
MEM1NzNCMEE5MTg0M0M3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1CQtDJmeZ9xWJmPjJ5Yt6HoKdsSHzbSqcb5Dsbc+ANJgu/hYQ6ntFi534cT8V
9PDwX8X74XHN1fPTTXGxdxrJALAulngxnRR+UTWJjU6DL/GZok+JDyfU/mzGxA/Y
++66U1+WtcAuzx9oJnGGvGO2wIERwdMPgcQy0H50N0Vxu+KioaCMKUEK9NS6GTk+
N+TqHe/Cor5XlBGVhd0cOUtVOYPyvTH2s2fKmGHDZu+QXmchMBN4myr4jwAOPRV1
8sY208/dz0bgvCh7MlqwF7J5ixpEyZXiWpCmcze6fOUmRSQida+FFwgXjSLcc+Bz
XWH/frdnssjcKBvYnM/bIu/jAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUao09a/bb
D13jJOQgxXOwqRhDx5QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFBMTA4L0Y5NThGQzRBNkMwMDExRUVCOThCNDMwRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExQTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9i
YkQxM2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAHKif4wDQYJKoZIhvcNAQELBQADggEBAA6U/fA7m43EomctGL4M
T1pWHJR+4woZhhA2CcV3YRA9ufNikWFzkBpPqtHfZtzmJywwXDTOuwE71lLgoyKr
OX3G1rtIMNhlmHAUC1UJLKk7Mkt8LEq+t3+IPFKps8H/jox5lijAHKYYEDOvOzxn
nMgNkws6aWKLvqKuuIIaPsOdnKEfUsyfMpDtsOG1hlRgRdYvMPmjrZ/iNgHD0aU3
/l5+DbWM8CLLnJFESyIlfr4Gq9GXD4f/MNA7l/Ne//7uH6oDajvGExwmB9JZqQCw
RBJZGc94tLN0j+DBKfHFmFo4DmBASu1L8PXUUjjjc6C9kBHrzqyAyflgpswNQU6j
44M=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:17 2025 by rpki-client