Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer (raw, json)
Hash identifier: OrlsvBnm17inkk/euVUSfaFql1QGtoMTQtk6AGp5Wa0=
Subject key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0258D2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Jul 2025 21:34:31 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 38071
IP: 58.147.168.0/21
IP: 223.27.80.0/20
IP: 2401:7b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153810 (0x258d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 21:34:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:70:7b:b9:59:62:af:60:72:17:12:fb:e9:
ff:d3:b2:c0:6f:64:05:69:18:da:f9:75:71:d7:63:
56:10:69:22:16:ba:70:a6:50:4f:62:35:b0:28:3e:
fc:47:67:e1:1d:f7:da:aa:f0:52:c5:dd:e4:4f:1c:
c6:72:58:52:c1:77:63:d3:49:a4:04:38:25:5b:a5:
82:f4:dc:fa:3e:98:a1:ab:95:7d:c1:c8:92:69:57:
a8:d8:ad:ea:03:18:d7:21:d4:dc:2a:1f:15:95:82:
7d:b1:40:cb:40:10:3f:ba:2c:01:98:28:db:27:27:
7b:e7:9b:77:73:f4:6e:fe:d0:b8:cf:35:ef:68:d5:
c5:1d:de:9f:1e:18:cc:37:0b:bc:cb:9f:db:ee:eb:
e5:76:eb:40:28:d2:ae:1b:5d:be:82:00:f8:52:06:
da:f8:f3:cb:b6:62:f7:4f:49:1b:fa:62:18:56:1b:
bb:b2:c4:fa:ab:79:70:bd:4e:29:48:5c:c7:17:7b:
c7:cd:fa:b7:97:09:b2:92:16:c9:65:98:11:57:ca:
49:9e:e7:fa:89:cc:49:b9:42:be:67:c8:e2:91:4a:
40:7e:70:89:a3:fc:40:71:42:ae:9f:74:f5:a7:bf:
5f:5a:c1:08:7a:ca:e6:4c:94:47:ae:ff:c2:d9:fe:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38071
sbgp-ipAddrBlock: critical
IPv4:
58.147.168.0/21
223.27.80.0/20
IPv6:
2401:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
78:06:5f:93:1a:ab:3a:fa:59:5d:93:32:0a:11:38:ec:df:a4:
a9:35:15:13:d6:10:75:93:43:ff:21:b5:36:da:12:64:5a:17:
8c:9b:1a:86:b4:e0:24:e3:2d:70:79:1a:3e:71:6c:b0:dc:31:
6a:41:12:e2:46:95:99:65:16:80:d1:42:47:22:45:dd:d2:09:
2f:ac:a9:a0:35:7e:14:f7:73:05:14:32:0a:6b:02:23:c3:c7:
c2:d7:c9:51:3c:2a:79:89:ca:3a:5e:d5:97:ff:d4:43:4b:30:
dc:94:62:29:cf:b0:9a:ef:c0:52:9b:eb:7d:11:49:10:6f:47:
95:5b:5a:61:ed:0c:16:e0:bf:93:5d:8c:e4:79:fb:10:de:a1:
67:cd:bf:05:22:ed:fb:cb:55:91:8d:02:d2:5f:58:3f:cc:95:
91:cd:69:61:eb:0d:c5:37:dc:b7:8b:43:c8:4b:04:fc:80:b6:
3e:4e:94:64:4d:51:be:37:40:82:09:de:08:af:e1:74:6d:e2:
de:ee:11:de:48:63:5c:8e:64:f1:42:df:ca:24:79:e5:d6:cd:
f2:1a:4b:a8:6a:ef:14:ee:55:14:49:45:4f:e2:d8:14:8d:4f:
43:ba:23:6c:f3:17:19:03:08:ec:85:f4:44:24:94:4f:5d:98:
99:97:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:47 2025 by rpki-client