Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
File: 1ybobzALJko1PClnPgdxb1RUteI.cer (raw, json)
Hash identifier: E6wSqrSOx19HcxCoQgQFUBLe5/eQuZy6hZRsgFyuvDs=
Subject key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024FE8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Jun 2025 09:54:44 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 153996
IP: 2001:df5:c8c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151528 (0x24fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 24 09:54:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:96:b0:44:5e:fc:3d:96:28:55:35:f8:3c:99:
41:88:45:ad:6e:4f:97:f6:82:d2:47:c0:43:15:0a:
30:83:a6:dc:e4:bb:b8:2e:64:62:b4:1e:9a:37:75:
c7:34:7f:57:a2:f2:88:6a:bb:6a:ee:c3:61:f8:68:
b5:49:23:0a:23:81:cb:3f:b6:dc:20:73:35:92:b6:
aa:2a:05:89:24:1e:df:7b:cd:ed:a1:ff:b7:25:6b:
b8:3b:53:d6:55:2f:c8:cb:e3:33:44:cb:c9:ea:b0:
7d:2f:a4:fc:38:ca:06:49:39:09:f5:2c:b6:bc:ec:
2d:52:6d:15:55:d3:44:17:90:17:be:87:d3:ba:32:
40:e6:c1:4f:84:df:fc:d7:8f:54:54:71:5e:6f:a9:
ff:3f:9a:fc:48:43:85:a2:8f:98:80:92:2a:64:1d:
1e:b8:94:40:a1:80:a4:50:2e:a7:03:12:a3:07:3d:
2d:dd:2f:17:2f:38:9e:25:11:f3:41:2f:6b:4f:5b:
4a:d1:00:17:b7:70:ca:1e:7d:fa:fb:5f:3a:bc:86:
9e:ee:a2:b9:87:db:04:e8:1f:07:16:2b:fa:c1:dc:
a9:78:32:82:7f:fa:2b:bb:95:30:5d:5b:bc:8d:30:
1a:41:d2:56:f3:0c:fe:66:1e:09:91:f3:38:a1:b4:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153996
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:c8c0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:0f:db:3c:58:67:19:10:fb:67:11:5a:3c:88:9f:1a:66:fa:
c8:19:34:b4:b4:73:06:2c:91:46:5e:f3:f0:04:5e:4c:1f:bc:
0f:4c:4a:85:a7:68:25:cf:ed:dd:47:dc:c3:07:b8:8f:fe:5e:
d7:69:df:12:3c:5e:59:82:67:93:de:43:66:5e:bf:ac:b6:74:
50:7c:f3:8d:59:14:68:60:2a:c5:f4:51:08:c0:e0:be:cc:24:
a1:06:46:34:68:75:13:dc:f7:5d:68:c1:6d:83:02:2a:f4:4d:
56:2e:11:dc:a9:2a:61:3b:9f:d8:3a:68:ab:37:ae:da:23:55:
0e:b6:c4:09:2e:85:1f:cd:a0:70:3d:93:a7:5a:9e:22:93:8a:
9a:33:3c:f7:82:d5:75:80:6b:33:40:ad:27:29:94:14:74:76:
82:7d:5c:8a:b9:e6:ca:24:04:f7:c2:d7:a7:ea:a3:4f:91:c3:
a3:85:04:85:6c:b0:34:59:be:6c:46:b9:f1:c9:e1:3c:0d:3d:
fa:0c:69:5d:4d:0a:b5:f0:99:c6:52:6e:70:c9:55:8b:86:27:
b5:37:93:3b:d6:94:2b:24:15:69:19:b2:a5:48:42:5f:3f:8c:
a7:ef:4d:48:37:f2:8d:f5:da:13:d2:c4:c5:e2:ab:87:db:d5:
75:9b:bd:4b
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAk/oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYyNDA5NTQ0NFoXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjQwNTMxMTAvBgNVBAUTKEQ3MjZFODZGMzAwQjI2NEEzNTNDMjk2
NzNFMDc3MTZGNTQ1NEI1RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvlrBEXvw9lihVNfg8mUGIRa1uT5f2gtJHwEMVCjCDptzku7guZGK0Hpo3dcc0
f1ei8ohqu2ruw2H4aLVJIwojgcs/ttwgczWStqoqBYkkHt97ze2h/7cla7g7U9ZV
L8jL4zNEy8nqsH0vpPw4ygZJOQn1LLa87C1SbRVV00QXkBe+h9O6MkDmwU+E3/zX
j1RUcV5vqf8/mvxIQ4Wij5iAkipkHR64lEChgKRQLqcDEqMHPS3dLxcvOJ4lEfNB
L2tPW0rRABe3cMoeffr7Xzq8hp7uormH2wToHwcWK/rB3Kl4MoJ/+iu7lTBdW7yN
MBpB0lbzDP5mHgmR8zihtIs3AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQU1ybobzAL
Jko1PClnPgdxb1RUteIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI0MDUzLzNFREI4M0ZDNTBFMTExRjA5MUM0QkI3NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCNDA1My8zRURCODNGQzUwRTExMUYwOTFDNEJCNzRDNEY5QUUwMi8xeWJvYnpB
TEprbzFQQ2xuUGdkeGIxUlV0ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlmMMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9cjAMA0G
CSqGSIb3DQEBCwUAA4IBAQCzD9s8WGcZEPtnEVo8iJ8aZvrIGTS0tHMGLJFGXvPw
BF5MH7wPTEqFp2glz+3dR9zDB7iP/l7Xad8SPF5ZgmeT3kNmXr+stnRQfPONWRRo
YCrF9FEIwOC+zCShBkY0aHUT3PddaMFtgwIq9E1WLhHcqSphO5/YOmirN67aI1UO
tsQJLoUfzaBwPZOnWp4ik4qaMzz3gtV1gGszQK0nKZQUdHaCfVyKuebKJAT3wten
6qNPkcOjhQSFbLA0Wb5sRrnxyeE8DT36DGldTQq18JnGUm5wyVWLhie1N5M71pQr
JBVpGbKlSEJfP4yn701IN/KN9doT0sTF4quH29V1m71L
-----END CERTIFICATE-----
Generated at Mon Jul 7 05:03:54 2025 by rpki-client