Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.cer (raw, json)
Hash identifier: tiPTMNkRIhyII5hlZud6G6KeZjBa1Eugx6S3VD+Ewnk=
Subject key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025C0F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 Aug 2025 04:04:30 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154118
IP: 210.56.146.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 Aug 2025 04:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154639 (0x25c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 8 04:04:30 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:fb:2c:5e:3b:f5:7d:e8:92:c2:e0:89:57:
20:e3:12:55:ce:e2:6a:4b:28:8e:51:32:fe:a0:39:
e0:57:23:02:de:99:c3:c1:44:5e:c5:37:7f:81:ce:
7f:77:6a:99:97:b0:4d:1f:d5:67:3b:e1:27:e9:f9:
1a:23:d2:44:f1:a2:0f:00:1f:c3:dd:67:08:88:f5:
b4:44:a6:55:af:59:c3:36:71:25:86:02:30:8e:54:
ef:68:90:af:d3:ed:99:3c:c0:cd:29:a8:dc:9c:0b:
3f:53:7f:80:a2:6f:d6:3e:78:c9:f7:34:0e:7d:d8:
4c:11:22:12:c0:70:8a:be:8a:9b:05:ba:57:4c:a1:
9b:cb:53:07:47:29:0d:45:26:4d:54:d6:23:41:be:
68:a2:34:82:24:f9:cd:b4:84:20:95:94:cb:59:3d:
1d:0f:85:06:56:88:42:82:cb:65:11:ee:ae:2a:47:
f4:b0:ea:da:30:c2:5c:36:91:67:a4:58:d3:4f:39:
b2:42:08:9b:af:8e:63:fe:62:b5:f8:89:0e:a8:4d:
89:b0:a2:84:2c:25:5c:8d:a0:4f:b3:52:b4:cd:33:
ab:2f:64:23:df:e1:d5:6c:54:5e:4d:8d:1a:a3:9c:
a1:c1:29:fc:98:c7:3b:6a:c8:7e:10:91:7f:be:b5:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154118
sbgp-ipAddrBlock: critical
IPv4:
210.56.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:d4:87:54:69:b3:7a:4d:ce:69:a7:1c:a7:96:9a:a6:f3:b6:
15:68:e9:35:28:a7:0d:22:ce:cd:02:3c:2e:03:2e:d5:20:44:
ca:e3:e4:ea:76:25:00:88:89:91:f9:41:78:17:e3:f7:1e:39:
bc:b1:80:db:31:70:39:01:c2:45:bc:67:02:2d:a2:a4:59:c1:
40:a8:63:53:0c:d4:5f:1d:66:51:02:b2:7f:30:0c:12:e9:dd:
3a:e6:d2:87:c6:4f:bb:c6:d9:7f:66:29:f0:15:87:a5:6f:e7:
c4:aa:4a:55:7e:b0:ba:93:13:87:f1:f5:32:a9:e6:17:c2:3e:
b9:fe:5e:64:65:ec:6f:d1:6b:e6:7f:28:56:8f:15:39:16:41:
2f:85:19:60:4f:99:bc:88:bc:49:d3:e6:8d:64:63:8e:94:e1:
99:95:07:ea:a1:cb:ba:ab:6d:0f:25:f3:b0:f6:03:fe:72:98:
19:15:ee:4c:7a:e9:b8:98:58:f5:af:ff:64:17:12:16:82:24:
82:29:51:c4:e9:db:88:e7:6e:67:ed:52:53:46:82:6f:30:cf:
aa:df:69:6b:fe:fb:8a:72:75:29:17:e9:3c:0b:6c:a3:77:1c:
50:7b:c4:3c:f7:cf:18:d3:2e:4c:94:8e:e7:5c:04:95:c6:23:
fd:4a:dc:27
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAlwPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgwODA0MDQzMFoXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODM3MDQxMTAvBgNVBAUTKDZDNjY3MDE3NTI2ODMxQ0MxODI3NTE4
REUxMkI2MjFGNkYzRjM3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAXvssXjv1feiSwuCJVyDjElXO4mpLKI5RMv6gOeBXIwLemcPBRF7FN3+Bzn93
apmXsE0f1Wc74Sfp+Roj0kTxog8AH8PdZwiI9bREplWvWcM2cSWGAjCOVO9okK/T
7Zk8wM0pqNycCz9Tf4Cib9Y+eMn3NA592EwRIhLAcIq+ipsFuldMoZvLUwdHKQ1F
Jk1U1iNBvmiiNIIk+c20hCCVlMtZPR0PhQZWiEKCy2UR7q4qR/Sw6towwlw2kWek
WNNPObJCCJuvjmP+YrX4iQ6oTYmwooQsJVyNoE+zUrTNM6svZCPf4dVsVF5NjRqj
nKHBKfyYxztqyH4QkX++tRWDAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUbGZwF1Jo
McwYJ1GN4StiH28/N4gwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgzNzA0L0M1QjQ3RDcyNzQwQzExRjA5NEU4RDU0MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MzcwNC9DNUI0N0Q3Mjc0MEMxMUYwOTRFOEQ1NDBDNEY5QUUwMi9iR1p3RjFK
b01jd1lKMUdONFN0aUgyOF9ONGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAloGMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0jiSMA0GCSqG
SIb3DQEBCwUAA4IBAQC01IdUabN6Tc5ppxynlpqm87YVaOk1KKcNIs7NAjwuAy7V
IETK4+TqdiUAiImR+UF4F+P3Hjm8sYDbMXA5AcJFvGcCLaKkWcFAqGNTDNRfHWZR
ArJ/MAwS6d065tKHxk+7xtl/ZinwFYelb+fEqkpVfrC6kxOH8fUyqeYXwj65/l5k
Zexv0WvmfyhWjxU5FkEvhRlgT5m8iLxJ0+aNZGOOlOGZlQfqocu6q20PJfOw9gP+
cpgZFe5Meum4mFj1r/9kFxIWgiSCKVHE6duI525n7VJTRoJvMM+q32lr/vuKcnUp
F+k8C2yjdxxQe8Q8988Y0y5MlI7nXASVxiP9Stwn
-----END CERTIFICATE-----
Generated at Thu Aug 14 06:37:48 2025 by rpki-client