Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer (raw, json)
Hash identifier: BFakqHDgll3LSFoFDamP+IFUcQeoz5nABYV1Ky/yXBU=
Subject key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027207
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Nov 2025 14:35:53 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 45461
IP: 113.20.32.0/19
IP: 223.29.128.0 -- 223.29.175.255
IP: 2403:200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160263 (0x27207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 14:35:53 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:ee:d1:46:bb:f2:88:57:2b:10:89:6f:ae:
0e:90:71:9c:49:bd:63:5a:66:9b:6a:e5:2e:c4:bb:
6c:e5:44:a8:e9:99:c7:7c:f6:9a:b8:ae:0b:5e:f5:
18:86:7f:a7:53:1f:36:64:9e:a7:d0:50:cd:f6:a4:
70:13:d8:84:46:10:f8:ba:c3:1b:d6:38:45:8e:e9:
12:05:d6:cf:98:a8:24:43:74:07:58:9f:df:b5:7d:
ed:54:84:3a:8d:d3:1a:e2:6c:7d:bc:84:b9:55:91:
9f:6e:d5:ff:45:8e:af:5c:13:c8:ca:dc:40:d2:10:
95:90:bb:4a:90:d8:79:a1:fb:23:64:5d:4b:b8:5d:
9f:20:88:c4:ee:1d:ca:01:f0:95:27:39:71:0d:53:
9d:bb:c3:f7:10:9e:0e:cc:77:0e:95:61:52:c4:2a:
28:7b:8c:03:c5:e1:23:14:35:ab:db:b1:51:4b:52:
71:53:2c:d1:07:65:58:f7:5a:ae:ea:9b:fa:66:d3:
b2:11:04:53:a2:ee:68:84:ab:0d:02:c5:8c:23:c1:
b3:29:9a:01:c7:57:8e:e6:2b:dd:9b:1c:2a:6f:71:
cc:ab:a8:40:4a:36:dd:fb:e3:66:b0:22:f9:36:df:
ed:fd:36:63:69:f7:eb:25:a5:d1:fb:13:c9:7c:c8:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45461
sbgp-ipAddrBlock: critical
IPv4:
113.20.32.0/19
223.29.128.0-223.29.175.255
IPv6:
2403:200::/32
Signature Algorithm: sha256WithRSAEncryption
1b:a7:ef:37:93:ce:23:98:e6:d3:73:d2:30:72:d0:b5:e1:c7:
cd:6a:7f:2e:ec:f5:f3:3a:78:93:77:a1:cc:4f:d9:46:7e:4b:
a6:85:a9:5b:cd:58:ea:bc:fa:fd:9a:e4:c0:d3:32:ae:eb:15:
ab:44:38:81:8c:44:9b:2a:95:bd:b9:fd:f6:9c:58:7d:53:f2:
b5:48:1f:b1:e6:c7:38:a8:eb:82:85:94:43:cc:c2:78:16:5d:
80:a2:5e:33:5a:8c:62:6a:f5:17:2b:a7:0b:27:b7:9f:91:84:
3e:da:74:b9:83:71:52:76:23:f6:c9:09:11:9d:bf:2d:d3:c8:
2a:3d:5f:a7:5e:f7:5e:89:70:42:9a:2c:81:15:21:db:d4:2d:
d8:e3:4e:3e:3f:99:7b:af:3e:ea:9d:61:e3:36:4e:3a:37:45:
36:e6:57:2c:39:79:e9:96:eb:fe:74:63:3b:15:dc:0d:8f:92:
a1:d2:59:fb:9a:64:39:24:27:5f:04:97:5b:5a:48:8a:ca:f6:
cc:d8:0e:77:82:96:4a:4a:75:06:81:a6:54:39:9d:3d:ed:85:
09:67:0c:45:bc:b9:38:23:26:20:7c:5e:65:25:68:89:1c:8b:
69:6d:a6:be:32:89:1f:f4:b7:35:b6:8d:8c:f5:0d:25:45:d2:
55:c0:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:28:46 2025 by rpki-client