Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
File: 5Ux-FlPQE0JCIsO5NoohO6URXOM.cer (raw, json)
Hash identifier: b2LTHgNTk8GMVUxDQwNEsZv7Qu4H0RxTiM6w35m+6Zc=
Subject key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025489
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Jul 2025 04:40:11 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 153995
IP: 2402:1260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Jul 2025 11:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152713 (0x25489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 9 04:40:11 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:c0:42:a0:2c:da:28:b5:a8:2b:b5:92:d0:
d2:5c:d1:ee:49:37:90:d7:0e:b6:17:fe:9e:cd:60:
2e:23:5e:f9:c9:4c:ba:62:e6:b9:c7:dd:43:9f:df:
3e:3c:ca:1e:f7:8d:f1:49:63:3d:00:89:24:d2:a4:
dc:97:74:88:34:9a:58:4b:79:0d:53:ab:7a:5f:e6:
36:b3:59:b8:19:59:24:8c:c1:78:58:8d:9f:98:dc:
24:3c:5a:d4:33:45:77:d5:fc:c8:f8:c9:ab:0a:7c:
7e:ac:28:ad:d6:15:b2:fc:da:22:27:ae:bd:fc:0a:
05:2a:6d:1f:9a:78:ca:d2:30:05:ec:9a:ea:1c:4b:
7b:31:50:1f:08:d9:05:5d:6c:14:cf:20:3d:7b:66:
bc:4c:0c:7a:87:72:cd:2b:c5:04:2d:9b:f5:21:d0:
92:23:a5:de:4d:72:59:19:73:6b:8d:d7:10:cf:fd:
30:3a:6a:b2:90:30:8b:fa:e8:7f:80:ee:d9:e5:9b:
a0:7c:57:01:3a:c5:23:69:e2:5f:f7:ad:fc:40:71:
05:8e:72:b1:c0:71:79:f6:1d:4e:e5:9e:8b:24:24:
54:69:34:74:34:db:20:33:40:d8:48:4a:4f:96:46:
a4:40:1d:ea:1c:f9:d7:74:f0:36:02:f2:0d:67:4f:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153995
sbgp-ipAddrBlock: critical
IPv6:
2402:1260::/32
Signature Algorithm: sha256WithRSAEncryption
97:18:aa:67:71:dd:6e:8d:d1:57:d8:db:7e:64:07:77:a4:de:
89:e5:8e:ef:6e:a6:72:83:7d:cb:e1:9b:16:91:0e:90:06:fb:
dd:ac:b7:8b:a2:17:50:b8:8a:23:f3:ae:a1:7f:88:99:13:7a:
ad:68:83:e8:50:27:46:36:00:a0:ee:55:fa:ea:d9:ee:22:a2:
1c:4d:2f:16:83:4d:68:c3:99:19:4c:11:44:98:47:a2:e7:68:
79:97:9d:5d:b9:d6:7d:a4:b2:31:3d:cd:f0:83:1d:33:a7:e5:
01:e0:39:ce:a0:13:1d:dc:11:1c:3a:ef:71:c2:73:6a:ee:c7:
6f:f2:dc:69:4a:2c:43:6a:26:7e:f1:02:64:9b:5d:48:6b:d8:
f4:7c:56:7b:d1:b5:f8:98:a5:12:94:c6:16:d5:14:9a:a6:6d:
c3:86:71:53:4a:f4:96:1d:b9:56:d1:14:6b:57:92:d7:25:e2:
c3:27:56:c5:a3:38:34:a1:b7:4b:85:45:f8:ea:41:ed:d6:a7:
f7:53:10:47:7e:3c:91:20:ba:d1:bd:ac:5a:fb:8b:65:8f:1a:
99:e1:2b:7c:40:1d:8e:40:23:3a:61:ca:d3:3d:60:8d:55:d1:
5d:4e:94:00:2d:c0:78:89:41:a6:f0:de:b6:23:94:06:a1:37:
c9:0b:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:52:28 2025 by rpki-client