Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GvPnnC07M_8EZ4dbb9SiW-42Yw.cer
File: 5GvPnnC07M_8EZ4dbb9SiW-42Yw.cer (raw, json)
Hash identifier: Bz2HAtvrPf+Wglhv64f43Q0O/SQ0xtYS9H1Y7ouBIlw=
Subject key identifier: E4:6B:CF:9E:70:B4:EC:CF:FC:11:9E:1D:6D:BF:52:89:6F:B8:D9:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025B4C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Aug 2025 11:31:16 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 2001:df5:f2c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154444 (0x25b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 11:31:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A913631F, serialNumber=E46BCF9E70B4ECCFFC119E1D6DBF52896FB8D98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:55:ac:17:2e:1c:6f:d6:9a:5d:ba:6a:dd:
23:c4:ab:e0:64:85:9f:99:d3:c6:48:82:42:2a:a5:
b7:83:df:d0:c9:e3:53:42:d5:4d:4a:55:99:ab:49:
53:c8:c1:83:17:d9:aa:7a:8d:92:bb:6c:62:d7:5d:
fb:db:2b:f9:66:de:33:c2:c8:7f:da:f4:66:2a:8d:
cd:93:8b:14:d2:b3:24:58:00:49:ba:2c:61:23:83:
3d:5a:e8:5f:65:60:8a:14:82:2c:55:50:82:f9:a0:
30:49:d1:49:ea:5b:0f:6b:be:79:18:03:8e:94:50:
8a:49:72:68:62:11:1d:11:91:1d:35:02:44:72:f8:
c8:8c:3f:59:81:58:85:af:d4:66:c1:87:74:e3:d1:
32:2a:23:69:98:60:2b:69:53:3e:7c:98:b3:7d:cb:
8e:7b:e7:5a:4b:1d:cd:fb:15:b7:cc:49:7f:c8:25:
c3:56:f5:82:ab:a4:cd:bb:2d:8f:53:0e:9f:55:75:
47:9f:3a:58:f2:4a:3e:66:ac:ba:2f:97:9f:51:8f:
0e:74:60:e8:47:d2:db:a0:c3:e2:bb:c7:b7:e1:45:
4e:10:1e:44:ab:07:59:f3:c1:f4:55:c1:b5:8d:4f:
83:10:c6:41:e9:f1:c4:c2:4e:fe:55:8c:c0:5e:5f:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:CF:9E:70:B4:EC:CF:FC:11:9E:1D:6D:BF:52:89:6F:B8:D9:8C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:f2c0::/48
Signature Algorithm: sha256WithRSAEncryption
38:6e:b5:89:ce:36:ad:ec:08:11:1d:38:9c:95:75:2d:fa:52:
94:55:8e:c0:5e:22:27:c0:56:e5:43:03:78:b7:5f:09:77:9f:
43:24:57:c8:3f:95:6b:35:30:64:02:0b:f5:f7:84:9e:80:b5:
84:3f:c3:e4:f6:c9:1d:52:4d:3e:69:b0:5d:25:68:d0:dc:10:
6a:32:37:0f:5e:9b:f1:1d:12:66:58:6a:fb:72:b5:d8:54:e8:
1b:29:a6:dc:76:b9:86:72:be:bb:95:18:fd:6c:30:58:ea:1e:
dc:c8:58:55:b9:3c:9f:e2:85:15:8a:27:ec:3a:6c:59:3a:cd:
a3:d0:80:4f:af:19:db:8a:fa:2d:dc:74:79:85:1e:b5:25:0f:
29:bb:51:48:0f:78:b8:68:96:c8:e3:00:3c:1c:07:90:39:35:
0a:8c:a4:0d:75:10:14:ba:64:ca:44:df:4e:3f:23:11:7b:cf:
86:0b:69:5f:3e:81:02:84:bf:d5:7f:01:fa:82:4f:f0:53:78:
d2:26:1c:8c:9c:e1:0b:ff:28:6d:96:67:ca:23:a6:f2:57:ce:
0a:6c:74:59:c5:aa:b9:a2:cb:73:90:ca:95:1b:0b:c6:bf:df:
0c:84:79:d5:2e:c5:c9:3f:39:4e:f1:e3:b5:7b:53:12:70:e2:
63:2b:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:24:15 2025 by rpki-client