Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
File: iB8oqx80yszxJe2ul-HgEGBYI0k.cer (raw, json)
Hash identifier: 1qA3JLhugcXM0FvMeOK+PF5hzfeziYlnIYe3nYNfVzE=
Subject key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026FE9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Oct 2025 21:36:57 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 138457
IP: 103.126.16.0/22
IP: 2404:240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159721 (0x26fe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 21:36:57 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:7a:ed:89:0f:c9:87:2d:3d:30:69:59:37:
59:4d:c3:5b:07:71:41:de:06:a2:8c:5a:1d:66:2d:
dc:0d:14:b9:95:7b:1d:4e:e6:00:5f:75:29:e8:74:
58:4f:28:69:8f:be:8f:0f:eb:b4:59:e9:ff:e7:1b:
8c:0c:48:ba:76:cc:8e:e5:22:8b:cd:0b:21:c1:e9:
78:46:17:04:09:15:46:d2:ae:23:4d:b3:ad:47:99:
ec:0b:56:97:9a:ae:64:58:7c:f2:e5:e9:27:51:96:
5c:d6:20:cb:f5:84:0c:45:35:af:f6:3a:24:2b:0a:
a5:05:40:b9:52:e6:01:7c:bc:b2:0a:16:70:9a:a7:
c9:69:ca:d9:92:9b:ee:a3:ba:98:c9:e3:b7:a2:74:
08:29:33:80:bb:f1:c1:e7:f7:ab:f5:13:f3:93:ff:
8d:72:aa:d9:74:ce:37:8d:18:bb:e3:2e:68:1f:c9:
62:26:79:d1:fd:1f:f3:65:68:4f:1f:df:42:19:bb:
73:96:08:2e:b7:6a:ca:e5:2a:5d:9f:87:9b:0e:80:
89:07:f5:c4:8d:a1:e4:3e:ce:0b:01:69:32:ff:87:
d4:a8:88:84:c2:16:b2:3c:2f:76:95:35:ae:83:01:
e6:8f:0d:9b:18:1b:4f:f3:f1:5d:49:a5:3b:7f:8a:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138457
sbgp-ipAddrBlock: critical
IPv4:
103.126.16.0/22
IPv6:
2404:240::/32
Signature Algorithm: sha256WithRSAEncryption
af:2f:3b:60:0c:8f:f9:dd:8d:52:e8:d0:20:32:f2:3a:db:fb:
7d:ed:92:c5:89:8d:60:5a:06:3c:4f:8f:9e:a0:be:c1:6a:8b:
8c:97:66:9d:cf:46:a0:ff:f6:10:fd:ca:0f:ce:8f:e9:1c:51:
1a:c9:5f:6e:b7:49:ea:5d:83:0d:1b:bb:ae:fb:ae:d3:fc:b4:
b0:6a:13:ec:0b:b3:14:47:9d:b1:77:28:0d:cf:f8:59:37:1c:
f7:7a:5c:be:82:ec:48:e7:a1:95:3a:10:0e:09:88:9f:27:ae:
7b:bb:ad:a3:71:fa:cc:17:9e:85:ab:5f:d0:c6:de:c5:26:34:
ff:a1:b5:ee:c3:5a:58:49:84:cf:c9:f6:6b:57:b3:16:3a:5f:
7e:e2:f9:0e:dd:a6:7e:f4:d5:fc:c2:ce:51:08:b9:ba:8f:ec:
7b:52:56:66:a5:55:fd:5c:6a:26:28:d8:bb:1b:7f:5d:1b:49:
65:67:7b:41:80:5e:22:7b:77:37:2d:6b:e0:74:06:df:de:28:
30:0d:ab:48:a6:48:18:94:e2:31:a5:a7:95:02:80:a2:0d:aa:
d7:e4:be:61:b2:08:fb:4e:64:74:5b:70:c5:a1:46:7e:cd:b1:
cc:c8:61:ab:ba:ce:08:b7:30:3e:4a:db:64:77:fc:ad:0b:00:
18:41:cd:42
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAm/pMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAyODIxMzY1N1oXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDM0MkExMTAvBgNVBAUTKDg4MUYyOEFCMUYzNENBQ0NGMTI1RURB
RTk3RTFFMDEwNjA1ODIzNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4q3rtiQ/Jhy09MGlZN1lNw1sHcUHeBqKMWh1mLdwNFLmVex1O5gBfdSnodFhP
KGmPvo8P67RZ6f/nG4wMSLp2zI7lIovNCyHB6XhGFwQJFUbSriNNs61HmewLVpea
rmRYfPLl6SdRllzWIMv1hAxFNa/2OiQrCqUFQLlS5gF8vLIKFnCap8lpytmSm+6j
upjJ47eidAgpM4C78cHn96v1E/OT/41yqtl0zjeNGLvjLmgfyWImedH9H/NlaE8f
30IZu3OWCC63asrlKl2fh5sOgIkH9cSNoeQ+zgsBaTL/h9SoiITCFrI8L3aVNa6D
AeaPDZsYG0/z8V1JpTt/il53AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUiB8oqx80
yszxJe2ul+HgEGBYI0kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQzNDJBLzE3NzhCNzBDOEVDNzExRjBCQjEyODUzQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMzQyQS8xNzc4QjcwQzhFQzcxMUYwQkIxMjg1M0NDNEY5QUUwMi9pQjhvcXg4
MHlzenhKZTJ1bC1IZ0VHQllJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhzZMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ34QMA0EAgAC
MAcDBQAkBAJAMA0GCSqGSIb3DQEBCwUAA4IBAQCvLztgDI/53Y1S6NAgMvI62/t9
7ZLFiY1gWgY8T4+eoL7BaouMl2adz0ag//YQ/coPzo/pHFEayV9ut0nqXYMNG7uu
+67T/LSwahPsC7MUR52xdygNz/hZNxz3ely+guxI56GVOhAOCYifJ657u62jcfrM
F56Fq1/Qxt7FJjT/obXuw1pYSYTPyfZrV7MWOl9+4vkO3aZ+9NX8ws5RCLm6j+x7
UlZmpVX9XGomKNi7G39dG0llZ3tBgF4ie3c3LWvgdAbf3igwDatIpkgYlOIxpaeV
AoCiDarX5L5hsgj7TmR0W3DFoUZ+zbHMyGGrus4ItzA+Sttkd/ytCwAYQc1C
-----END CERTIFICATE-----
Generated at Tue Nov 4 02:08:47 2025 by rpki-client