Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
File: HVvjkVLqbW3wn52ErGmpYbfIOG4.cer (raw, json)
Hash identifier: /1WITl3//Dnm5Yjs1+tgJAVXfOXvgGjG2u2DLpUAOv4=
Subject key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02557B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Jul 2025 14:39:12 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 152454
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 04:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152955 (0x2557b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 14 14:39:12 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:d5:5f:48:d6:ba:6c:99:39:18:8b:5c:71:
3a:e7:a3:fa:b9:8f:03:08:9f:a6:df:a8:06:ee:1b:
aa:b6:1b:58:ae:7e:c1:49:45:d9:cf:9e:ea:58:71:
e6:5a:7a:af:a2:06:95:2f:22:46:b8:7c:23:69:69:
40:10:ad:c5:56:f6:6a:5d:54:c5:b9:63:75:9f:9d:
ce:2c:50:8c:02:74:fb:22:7b:f0:47:79:62:4c:58:
dc:3d:a2:04:dc:38:ce:8a:e4:c4:ff:1d:11:01:fe:
1a:88:15:42:93:3f:c4:2b:d6:1a:71:04:2a:bc:af:
d5:49:fd:2f:96:34:38:59:f2:6f:79:a4:ac:03:07:
15:fd:b9:91:2d:a3:0a:a6:7c:00:ed:31:25:47:a4:
79:03:6b:9f:78:80:e1:9d:59:bb:12:93:5a:1a:94:
1f:53:4f:81:bf:8e:a8:9e:28:6c:25:18:b5:a4:60:
91:5d:33:54:c3:30:71:01:4e:a5:fc:cc:4c:0e:3d:
e4:3d:7e:95:31:c6:8c:9a:90:60:de:be:77:91:d1:
24:ee:ba:c6:04:e0:bc:3e:90:b9:80:91:18:6f:16:
e6:67:78:d8:80:78:88:e5:28:53:9b:e7:98:2a:1b:
56:51:ce:48:54:85:05:12:01:1e:90:24:10:1e:70:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152454
Signature Algorithm: sha256WithRSAEncryption
23:96:fd:92:d1:c7:a8:ab:d6:03:fb:de:fe:24:3e:19:86:35:
36:fe:e4:23:03:e8:73:b7:01:0c:a2:0f:08:14:68:33:ba:ac:
2d:36:a0:41:f3:d7:26:59:74:02:20:54:9e:aa:85:3f:e4:b4:
83:9b:6a:e9:ad:fd:6e:94:a0:20:b8:11:ce:b1:31:cd:18:fc:
85:94:51:ef:9b:7a:3e:99:c8:ab:82:08:33:7a:9d:ea:95:a4:
4b:10:1d:9f:87:01:7f:7e:b3:b9:7d:b2:64:99:c1:22:d7:a1:
77:49:fc:f9:f3:a2:3f:00:ad:a8:55:65:9b:00:cf:d0:38:9b:
ce:c7:75:1e:2f:4b:dc:e5:44:93:93:1b:91:fb:92:04:c0:b4:
4a:fc:f4:74:9e:9c:3b:1d:5e:fd:b9:61:19:95:e0:0f:a9:3c:
71:ee:a0:14:a2:c3:31:0c:a0:35:d8:cd:ef:ff:5c:f0:7d:89:
9d:d4:85:ae:30:26:f7:05:c3:43:23:f8:7f:ec:a3:45:eb:f3:
30:ab:65:8b:35:f4:94:6a:b0:60:22:57:6e:d8:e9:a7:c1:f8:
df:19:80:2d:7b:2d:02:9c:8f:8d:93:91:a0:38:21:53:70:75:
75:64:26:fb:f5:8d:32:fc:d4:c4:ff:d3:88:2f:e4:21:3d:a5:
08:64:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:55:49 2025 by rpki-client