Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
File: bRdadMGgmL-i337kNxYF_2owQkk.cer (raw, json)
Hash identifier: 6xXPPibCNXCTqZa0HLuuJOPdbaeqet/UTqlAoGA2WjE=
Subject key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025A36
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Aug 2025 10:15:33 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 45472
AS: 56079
AS: 139663 -- 139664
IP: 103.22.196.0/22
IP: 115.31.88.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154166 (0x25a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 10:15:33 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:0a:a3:ba:0d:1d:19:29:3e:05:e2:ab:df:
dc:9a:87:87:18:10:e6:49:4a:b5:ac:53:ec:85:7e:
c2:a7:94:e4:b0:1e:af:26:b0:ea:60:24:80:02:99:
cf:85:53:db:51:82:a0:1e:b3:b7:04:d9:97:6b:8c:
8f:37:ef:39:a6:68:01:97:7e:d5:0a:33:de:f9:ce:
04:76:d3:68:e9:1a:0c:83:97:07:14:8e:27:74:78:
44:f2:c3:6e:49:41:49:be:89:29:c2:a8:f1:b4:fd:
86:74:69:1f:b4:4f:64:e5:65:50:66:ae:69:75:b5:
4a:53:62:d0:7b:e1:d3:6a:c5:8c:9f:5f:6a:1f:af:
12:c6:65:4d:05:a0:1a:64:36:0c:ec:2b:ba:68:69:
da:ec:15:b0:45:6d:fe:b1:44:52:31:49:16:88:17:
7c:e3:e1:cb:63:dd:20:27:f7:d4:92:c6:58:a5:95:
0f:38:d5:14:21:94:a0:d2:e9:b8:1b:a8:41:1d:6d:
ce:e8:ce:83:cd:11:93:e4:54:a9:ca:7e:8f:3e:2d:
b7:cf:9e:85:1f:8e:2b:e0:e0:63:5f:1c:25:bf:13:
d0:7d:93:79:0e:5e:1b:73:ab:93:fa:cf:1e:99:3f:
0b:7e:77:bf:c0:f6:77:1f:22:4d:26:e1:c5:51:0e:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45472
56079
139663-139664
sbgp-ipAddrBlock: critical
IPv4:
103.22.196.0/22
115.31.88.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:58:8d:21:3e:3f:53:7a:e6:cf:c9:0e:0d:19:ba:10:5b:ea:
33:a4:88:b6:bd:09:8c:c6:ad:55:d8:da:e4:81:0a:2d:a0:c0:
e2:d5:07:9b:86:06:d8:15:ac:6f:c5:86:a8:21:26:02:77:41:
27:26:24:3f:6e:bc:9f:12:87:e6:bb:27:df:62:32:6c:a6:d2:
0c:b1:87:ae:82:10:8c:e3:17:94:ff:c7:c9:cd:6a:9b:2b:4b:
e5:f0:6e:a5:97:b7:27:aa:4b:2b:d1:f1:a2:64:b7:05:7d:95:
1a:95:5f:3e:48:ee:c2:09:05:16:8e:94:87:9f:e8:a8:f6:4b:
47:ae:68:92:04:d6:6a:d0:2b:10:4f:43:79:b0:40:fe:f2:ec:
2c:09:78:95:9f:f2:f5:d9:8c:d9:a2:d7:4c:e3:bc:41:ff:56:
bc:e4:b3:7e:27:fa:c2:aa:12:4c:ce:de:f0:9e:a2:77:ec:dd:
52:24:8c:b0:24:c0:f1:ad:ec:c9:61:f1:d1:60:49:8a:b8:49:
31:69:25:95:68:49:e6:dd:2c:2f:31:ec:02:e1:e4:d2:85:82:
86:d7:3a:99:d6:33:31:f7:c5:c4:96:91:fa:bf:0a:05:42:b2:
57:e4:fe:ae:fe:4e:c0:ea:bf:9b:f9:36:e3:54:d8:f6:ea:90:
5f:46:9d:42
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAlo2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgwMTEwMTUzM1oXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjZDQjAxMTAvBgNVBAUTKDZEMTc1QTc0QzFBMDk4QkZBMkRGN0VF
NDM3MTYwNUZGNkEzMDQyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuXwqjug0dGSk+BeKr39yah4cYEOZJSrWsU+yFfsKnlOSwHq8msOpgJIACmc+F
U9tRgqAes7cE2ZdrjI837zmmaAGXftUKM975zgR202jpGgyDlwcUjid0eETyw25J
QUm+iSnCqPG0/YZ0aR+0T2TlZVBmrml1tUpTYtB74dNqxYyfX2ofrxLGZU0FoBpk
NgzsK7poadrsFbBFbf6xRFIxSRaIF3zj4ctj3SAn99SSxlillQ841RQhlKDS6bgb
qEEdbc7ozoPNEZPkVKnKfo8+LbfPnoUfjivg4GNfHCW/E9B9k3kOXhtzq5P6zx6Z
Pwt+d7/A9ncfIk0m4cVRDgZ5AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUbRdadMGg
mL+i337kNxYF/2owQkkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY2Q0IwLzM1NTYyMDFDMDkzMjExRUM5OEI4REYwRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNkNCMC8zNTU2MjAxQzA5MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1H
Z21MLWkzMzdrTnhZRl8yb3dRa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQgBAf8EHDAa
oBgwFgIDALGgAgMA2w8wCgIDAiGPAgMCIZAwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAJnFsQDBANzH1gwDQYJKoZIhvcNAQELBQADggEBAGxYjSE+P1N65s/J
Dg0ZuhBb6jOkiLa9CYzGrVXY2uSBCi2gwOLVB5uGBtgVrG/FhqghJgJ3QScmJD9u
vJ8Sh+a7J99iMmym0gyxh66CEIzjF5T/x8nNapsrS+XwbqWXtyeqSyvR8aJktwV9
lRqVXz5I7sIJBRaOlIef6Kj2S0euaJIE1mrQKxBPQ3mwQP7y7CwJeJWf8vXZjNmi
10zjvEH/Vrzks34n+sKqEkzO3vCeonfs3VIkjLAkwPGt7Mlh8dFgSYq4STFpJZVo
SebdLC8x7ALh5NKFgobXOpnWMzH3xcSWkfq/CgVCslfk/q7+TsDqv5v5NuNU2Pbq
kF9GnUI=
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:51 2025 by rpki-client