Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer (raw, json)
Hash identifier: IVv1inkfo9Cou1Gf9gTWD8gJC450DVihK1vcjCyikcI=
Subject key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025B2B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Aug 2025 03:06:30 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 132072
IP: 103.30.216.0/22
IP: 103.70.72.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154411 (0x25b2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 03:06:30 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:ad:f6:86:c6:40:e9:6d:c4:ed:c2:df:e0:
95:19:e5:19:b4:e6:2d:c4:81:52:41:42:b0:00:ce:
40:b6:fc:47:49:5f:6f:e4:61:fa:f3:f2:ee:0d:31:
bf:c9:cf:1d:08:e6:83:6d:0f:1e:6a:14:ab:67:92:
b3:26:8c:be:f4:52:67:ec:4e:a5:96:80:99:ab:0c:
97:bf:e5:2f:dd:8b:64:8e:46:0a:d3:59:03:0d:79:
45:40:ec:46:76:b4:d4:af:5b:cd:72:15:28:67:3f:
5f:29:9f:3f:2c:fb:16:09:d6:34:a0:3f:6e:dd:5f:
32:2b:5f:67:b4:dd:35:63:35:e6:bb:9e:11:cb:cf:
d7:aa:ad:38:0c:cf:8f:ed:9f:5a:52:6b:90:e4:ff:
27:a3:5d:1a:53:3b:0e:27:f4:9f:c7:3f:76:38:bd:
f2:72:67:78:83:2e:74:de:7a:17:8d:c3:9d:9a:82:
d0:62:b3:ab:63:d2:7f:d9:a3:2c:2e:4c:97:f7:73:
54:4f:11:4a:67:df:1d:b7:9f:24:a1:f8:b3:3e:d8:
5e:c1:f8:87:3c:23:22:c7:ac:92:0a:1d:52:b7:34:
ca:63:2f:dc:38:f8:74:1e:92:19:52:a2:39:ec:f4:
9c:ed:b4:7a:c2:8b:94:4b:af:86:42:48:47:68:e1:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132072
sbgp-ipAddrBlock: critical
IPv4:
103.30.216.0/22
103.70.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:90:45:3d:b8:d3:50:ea:06:1c:b3:a6:5c:68:4a:33:c2:a6:
56:ce:bf:79:74:d0:22:fa:b6:4c:90:e1:9e:dc:94:2d:f6:48:
a9:ac:20:68:e3:de:9b:fc:62:ca:f7:e5:e5:64:71:f4:a8:7e:
59:a0:a3:b5:67:a9:a3:e1:af:cb:b8:b5:5e:14:cf:07:ee:f8:
bd:55:e5:74:c8:e7:a3:58:dc:0b:8f:33:6e:2d:7b:2e:db:92:
08:fe:73:52:90:d4:b2:30:d3:e6:08:d6:dc:4d:61:da:cb:9a:
40:ac:e7:92:c7:cc:eb:f0:06:68:7d:79:df:24:a8:96:41:78:
44:d7:0c:80:59:01:02:16:d2:71:5d:cd:6c:a7:51:dc:0f:bf:
46:d6:04:c6:be:18:04:e7:11:10:dc:39:c0:7c:a6:e0:be:5c:
97:26:c6:86:b8:3e:93:9d:87:af:5a:6b:7f:f6:bb:a8:1e:d2:
01:79:4c:4b:19:61:4f:5c:37:96:8b:28:15:8f:5f:ab:68:2d:
bf:11:ec:c4:0d:80:01:bf:74:7a:88:49:17:be:55:4e:18:9d:
ab:3d:79:de:4c:d6:8f:58:c2:2d:5f:be:6a:77:1e:e4:68:b8:
be:99:7c:10:5b:1d:ba:34:16:b0:c7:72:36:e7:2f:0a:f2:56:
d5:c1:fb:de
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAlsrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgwNTAzMDYzMFoXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzky
MDUyQkNFMkE4QjY1NzZDNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF8K32hsZA6W3E7cLf4JUZ5Rm05i3EgVJBQrAAzkC2/EdJX2/kYfrz8u4NMb/J
zx0I5oNtDx5qFKtnkrMmjL70UmfsTqWWgJmrDJe/5S/di2SORgrTWQMNeUVA7EZ2
tNSvW81yFShnP18pnz8s+xYJ1jSgP27dXzIrX2e03TVjNea7nhHLz9eqrTgMz4/t
n1pSa5Dk/yejXRpTOw4n9J/HP3Y4vfJyZ3iDLnTeeheNw52agtBis6tj0n/Zoywu
TJf3c1RPEUpn3x23nySh+LM+2F7B+Ic8IyLHrJIKHVK3NMpjL9w4+HQekhlSojns
9JzttHrCi5RLr4ZCSEdo4cSjAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUxJ5Rg+ov
xJuKg8kgUrziqLZXbHAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURGOTM3L0E0NDdCRkRDNTUzMDExRTZBMzY0Mjc0NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1v
dnhKdUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgPoMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZx7YAwQCZ0ZI
MA0GCSqGSIb3DQEBCwUAA4IBAQBrkEU9uNNQ6gYcs6ZcaEozwqZWzr95dNAi+rZM
kOGe3JQt9kiprCBo496b/GLK9+XlZHH0qH5ZoKO1Z6mj4a/LuLVeFM8H7vi9VeV0
yOejWNwLjzNuLXsu25II/nNSkNSyMNPmCNbcTWHay5pArOeSx8zr8AZofXnfJKiW
QXhE1wyAWQECFtJxXc1sp1HcD79G1gTGvhgE5xEQ3DnAfKbgvlyXJsaGuD6TnYev
Wmt/9ruoHtIBeUxLGWFPXDeWiygVj1+raC2/EezEDYABv3R6iEkXvlVOGJ2rPXne
TNaPWMItX75qdx7kaLi+mXwQWx26NBawx3I25y8K8lbVwfve
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:29 2025 by rpki-client