Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
File: PC3463wb1QIzAvYRqX4F14QXCTs.cer (raw, json)
Hash identifier: cRHZ3OPknKWAairCmkWBgWssHGTy3MsVKnzDyUL/YVk=
Subject key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025559
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 13 Jul 2025 13:15:07 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 152899
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 09:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152921 (0x25559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 13 13:15:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:d1:8d:5a:9d:fd:48:4d:55:9e:6e:6a:50:
3f:96:8b:6b:b3:bc:2a:d7:47:7e:67:1c:24:9a:b3:
a0:74:57:6f:a2:c1:fd:a6:81:14:c1:e8:05:68:f0:
89:da:db:a6:24:8f:cd:43:c8:aa:6e:ff:6c:38:df:
08:7b:25:74:cb:8e:39:4d:55:3a:dc:b1:ef:21:eb:
55:02:22:96:57:a7:a5:ce:df:00:28:40:85:45:cc:
b8:30:66:13:08:cc:f3:e4:c0:af:14:3c:63:5e:2f:
be:c8:17:84:b2:98:2f:8d:9d:c7:9f:27:cb:27:76:
15:e9:b8:92:9c:f5:97:5b:c6:04:2f:e0:96:a1:95:
eb:14:2d:1d:74:60:a7:89:73:46:74:1a:34:95:0c:
09:05:7c:1a:9d:2a:9e:7f:91:20:b2:4e:52:fc:09:
ba:9b:ed:c0:d3:fb:75:82:f3:e9:94:80:35:7e:93:
80:63:4d:59:89:70:89:31:81:c6:05:77:9b:31:4f:
88:4d:44:0f:6e:d3:4a:39:93:35:6e:77:cf:1b:41:
95:41:25:e3:9f:ad:74:b9:89:ab:e5:e7:d4:cc:1d:
ec:98:f0:34:e5:9f:2d:07:05:9c:63:75:52:aa:d5:
9f:26:c5:ea:02:b6:76:4b:ae:5a:57:f7:ed:58:e7:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152899
Signature Algorithm: sha256WithRSAEncryption
8c:39:a3:9b:56:09:06:b2:69:14:1c:34:84:4e:49:a3:4c:f8:
cc:d8:30:2f:ea:27:c6:40:57:1a:47:ea:26:89:d4:05:a6:37:
b4:cb:73:10:a1:ec:f7:5e:8d:02:87:af:b8:fa:8b:da:c3:64:
70:e5:ea:a0:54:41:12:db:d1:eb:99:41:2f:0a:e7:9a:27:da:
a8:39:8e:c0:ee:5c:d0:d7:39:38:89:55:1c:90:d3:dd:fb:88:
fe:7a:8f:50:6d:75:f5:28:1f:90:c0:c0:c5:52:1f:8c:c4:12:
68:25:fd:e6:95:e4:ba:f5:2a:f3:67:9c:af:a3:74:62:6a:91:
01:3e:1d:c0:90:de:0b:00:81:58:36:49:d1:1e:7d:4b:f9:ac:
b7:39:14:a0:fb:f0:41:ed:a9:c5:32:76:ec:0f:a2:bd:01:41:
4f:da:a2:9d:0e:5b:12:2a:4e:09:5f:49:31:15:62:c3:f5:4a:
01:d3:76:05:0a:68:3e:a8:68:40:70:11:a1:be:b7:54:42:81:
44:e0:04:77:87:86:c4:e1:ad:7d:53:8e:6e:f2:a7:1d:77:b6:
67:4b:d7:e8:98:34:d0:ae:2a:78:f7:fc:b3:17:75:9b:02:8c:
93:2d:c8:b1:3c:9c:e4:28:45:1d:af:79:d2:75:02:fb:63:87:
b6:01:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:44:27 2025 by rpki-client