Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer (raw, json)
Hash identifier: TKCDKik0cUtlqU8POWz15Jg+eKQs0EJx4sL/jsTIFNE=
Subject key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025D91
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Aug 2025 00:26:40 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154127
IP: 210.56.148.0/23
IP: 2402:2160::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155025 (0x25d91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 15 00:26:40 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:3d:0e:e1:fe:66:47:ed:32:98:00:3d:7e:
d8:b6:62:45:61:34:42:c9:12:e3:0e:df:8a:80:17:
5c:43:f8:b4:d7:6d:a5:02:f6:46:01:71:30:dc:c5:
56:36:3d:aa:ea:5a:d8:a2:0a:91:b0:5d:8a:b0:f4:
7d:d0:b5:c9:c7:50:9f:e5:5d:9f:28:04:68:38:2a:
dc:cd:61:05:90:51:92:fe:df:3d:99:77:d5:f0:7b:
1b:46:52:5b:9d:4d:33:32:6c:35:cc:c8:cf:1c:e6:
68:e3:82:ab:5a:7b:e2:47:60:5b:15:53:d0:2e:e3:
cc:71:08:92:84:84:fb:45:9c:12:12:47:59:7f:39:
1b:53:23:bf:ab:07:a4:8a:98:ab:fc:74:45:a4:66:
b0:96:61:94:f1:9b:81:7b:e5:e7:d1:3e:53:da:15:
04:a1:14:11:64:2d:d2:37:8e:57:6b:07:60:a3:16:
a6:a0:3a:87:5c:b7:ad:60:1d:86:32:c5:8a:b6:56:
cf:64:63:b8:ff:79:22:cd:6e:e7:b5:31:ab:85:a5:
58:2c:fe:b8:28:ba:3d:1a:eb:d7:13:97:9d:20:93:
7a:11:86:6f:d1:5a:ec:c6:5a:58:18:c9:06:af:13:
f4:05:3a:2d:c0:7c:f9:65:9e:7f:1c:b5:d6:fd:ae:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154127
sbgp-ipAddrBlock: critical
IPv4:
210.56.148.0/23
IPv6:
2402:2160::/32
Signature Algorithm: sha256WithRSAEncryption
60:58:4a:2f:a5:b4:e8:9e:3d:b5:39:64:28:09:a9:f4:43:7c:
1d:c9:40:8c:b9:c9:14:d4:bc:be:95:17:49:9c:93:4a:8a:8b:
a6:6e:3f:ed:38:50:d6:e9:40:6f:1e:18:7d:ca:e7:9d:25:9e:
ae:c9:84:5d:b2:d8:bc:0b:d0:c0:2d:5c:31:14:82:2f:fe:7b:
ae:05:38:47:33:67:21:d6:b5:be:70:ba:b7:dc:d0:17:92:70:
81:23:52:07:af:ae:48:5f:a6:78:ff:d7:46:f2:8b:c1:09:df:
94:bc:11:4d:8b:25:7e:da:2a:09:de:f2:9c:73:d2:a6:7d:8a:
55:91:fe:4d:78:dc:08:2a:e7:64:93:0e:ac:60:da:14:b5:21:
3d:c4:c4:31:42:2d:0d:5c:7c:26:49:bc:25:01:89:d4:38:87:
7b:85:12:f2:93:5d:8d:cb:8e:26:87:26:f9:b8:a8:74:a7:3b:
bd:8b:bf:1f:00:b2:20:ec:c7:2c:25:6f:92:e1:1d:98:e4:ca:
3b:35:ad:46:f3:59:37:55:af:3d:36:3d:47:9b:38:ba:2c:a4:
5d:f4:3c:57:f1:cc:00:c5:bb:dc:89:5a:d9:d9:ae:25:f7:75:
37:6c:7e:64:fc:83:7d:c6:ab:08:27:51:97:2e:24:65:ca:5a:
ab:0e:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:22:38 2025 by rpki-client