Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
File: tRdNgmVknN0nQmySfRaHddeD1Tg.cer (raw, json)
Hash identifier: NsAloHlhr9Ig8SMlvsiT3AyirGziNypL8zE2TLj6ee4=
Subject key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025359
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Jul 2025 17:57:51 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 103.248.179.0/24
IP: 2001:df3:9140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 12:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152409 (0x25359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 17:57:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:5c:76:2b:4c:3c:65:16:6b:9e:8f:0e:9c:
16:b3:ab:03:b4:0e:61:89:d8:1f:ba:b1:6c:3f:35:
bb:11:99:5e:0a:26:1b:1e:4c:34:64:65:f3:eb:b9:
36:98:00:f9:20:97:cc:c9:92:5d:a0:dc:17:78:ed:
4c:bb:86:61:92:c5:4f:92:04:09:c4:e3:e8:2c:15:
98:02:b9:6a:a3:51:9d:0f:7f:29:b1:c4:41:8d:61:
ef:c2:66:b2:4c:79:39:f6:ef:12:69:c5:2a:58:c8:
08:bb:d2:ac:59:b7:2a:1b:f3:3b:bc:14:9f:60:1a:
ca:44:42:20:db:cc:fb:c0:ea:81:21:2b:1e:6f:22:
3b:8f:91:14:bf:64:46:71:73:11:73:34:26:bb:04:
52:56:49:86:72:df:9f:e0:de:76:4c:79:ea:da:d0:
e0:b7:98:82:0f:90:80:ac:7e:2b:00:4a:c0:70:3f:
e2:8c:ea:4a:5e:a3:f4:d7:ba:45:71:7d:ce:1d:af:
45:e7:90:fc:91:7e:9d:77:11:07:2c:40:0b:b3:85:
06:47:2b:69:2f:eb:f0:ad:23:d2:07:a7:a7:90:92:
6a:6c:4f:48:0c:d2:eb:ad:c6:f0:fc:a9:6f:d3:e0:
87:f8:15:47:1b:33:5a:da:55:34:e7:98:af:7c:fd:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.179.0/24
IPv6:
2001:df3:9140::/48
Signature Algorithm: sha256WithRSAEncryption
3f:cd:09:7c:10:b5:fa:d3:46:a2:d7:6c:e8:38:a0:c7:06:fa:
ad:95:93:6a:6f:40:db:8b:0a:d7:73:3b:32:8b:61:64:09:51:
b1:ba:03:08:0c:d7:1b:9c:0b:32:ba:f1:6c:3d:3e:dc:68:cf:
5e:38:38:c8:cb:eb:c7:30:aa:da:5f:6b:42:27:a0:d6:4d:ab:
ac:ce:25:24:87:bb:7b:80:b8:5e:1e:b1:ed:df:2a:74:49:98:
09:a1:89:2d:08:3e:c2:37:72:19:f8:bd:0b:40:13:10:09:71:
99:00:03:9b:39:bd:4e:4b:14:18:58:0d:f0:96:84:ae:2d:e9:
48:0a:e0:4d:28:7c:82:c2:44:e0:ec:ad:d2:83:e6:f9:b0:de:
36:33:3a:62:ca:cb:89:64:01:60:70:da:54:93:ce:1a:37:49:
6c:6b:f2:43:64:f3:8f:f6:b6:f0:de:ce:8a:ad:c6:6e:a5:40:
d5:e8:d4:39:5c:96:fa:58:10:aa:a8:d6:a9:c5:2e:dd:24:1a:
24:9e:a0:07:88:f0:91:77:5b:29:96:c8:34:5d:8f:1d:23:cd:
f4:ac:f4:fc:72:63:a7:20:05:45:a0:1f:36:30:a0:9c:30:8f:
8b:78:ef:e0:5f:c3:63:63:31:6d:3a:74:b8:39:73:42:af:0d:
82:a3:b9:8f
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAlNZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcwMzE3NTc1MVoXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkQ0NTkxMTAvBgNVBAUTKEI1MTc0RDgyNjU2NDlDREQyNzQyNkM5
MjdEMTY4Nzc1RDc4M0Q1MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpM1x2K0w8ZRZrno8OnBazqwO0DmGJ2B+6sWw/NbsRmV4KJhseTDRkZfPruTaY
APkgl8zJkl2g3Bd47Uy7hmGSxU+SBAnE4+gsFZgCuWqjUZ0PfymxxEGNYe/CZrJM
eTn27xJpxSpYyAi70qxZtyob8zu8FJ9gGspEQiDbzPvA6oEhKx5vIjuPkRS/ZEZx
cxFzNCa7BFJWSYZy35/g3nZMeera0OC3mIIPkICsfisASsBwP+KM6kpeo/TXukVx
fc4dr0XnkPyRfp13EQcsQAuzhQZHK2kv6/CtI9IHp6eQkmpsT0gM0uutxvD8qW/T
4If4FUcbM1raVTTnmK98/V8nAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUtRdNgmVk
nN0nQmySfRaHddeD1TgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZENDU5Lzk5RUM4OUVDNDIyMDExRUFCNTMwMjAxNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RDQ1OS85OUVDODlFQzQyMjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21W
a25OMG5RbXlTZlJhSGRkZUQxVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBABn+LMwDwQCAAIwCQMHACABDfORQDANBgkqhkiG9w0BAQsFAAOC
AQEAP80JfBC1+tNGotds6Digxwb6rZWTam9A24sK13M7MothZAlRsboDCAzXG5wL
MrrxbD0+3GjPXjg4yMvrxzCq2l9rQieg1k2rrM4lJIe7e4C4Xh6x7d8qdEmYCaGJ
LQg+wjdyGfi9C0ATEAlxmQADmzm9TksUGFgN8JaEri3pSArgTSh8gsJE4Oyt0oPm
+bDeNjM6YsrLiWQBYHDaVJPOGjdJbGvyQ2Tzj/a28N7Oiq3GbqVA1ejUOVyW+lgQ
qqjWqcUu3SQaJJ6gB4jwkXdbKZbINF2PHSPN9Kz0/HJjpyAFRaAfNjCgnDCPi3jv
4F/DY2MxbTp0uDlzQq8NgqO5jw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:19:53 2025 by rpki-client