Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
File: 80xSFZH7LNAtxnvdctzyiwekL_Y.cer (raw, json)
Hash identifier: K3LS/JfsFKZZxsvMtXvGBSYEGNhBVMzaWUu13NaV6gk=
Subject key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025CFD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Aug 2025 22:48:10 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 203.34.41.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154877 (0x25cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 12 22:48:10 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:36:fc:27:bf:a2:ec:7f:08:47:1c:e8:42:
1c:b1:f2:ed:2a:5d:4e:d6:e1:cb:5b:80:0e:dc:be:
55:27:f1:f5:de:89:40:86:6d:74:cb:ce:fa:b0:d3:
0d:9f:89:b2:24:45:37:fa:12:69:5e:0d:d6:e2:53:
bf:57:a0:bf:5a:70:8b:60:c8:94:06:d2:8b:64:0a:
69:b9:52:54:e0:db:f7:93:e9:c2:f7:e7:b6:79:1c:
be:34:cf:e2:a5:1e:e3:39:75:58:f0:c9:6b:1c:d3:
57:d4:1e:7b:e6:6b:2a:71:88:10:24:29:87:7b:d1:
e7:2b:75:37:99:1a:05:49:6a:d7:9f:24:57:03:69:
93:31:25:6e:7d:51:a8:32:1b:18:99:e5:5d:22:46:
7c:7c:37:31:66:24:33:96:67:6a:f7:3e:14:95:ab:
5d:a2:db:91:5b:14:06:76:1c:00:8e:e8:6d:4e:ea:
52:8a:4b:7f:05:ff:a4:67:36:45:78:ee:d9:90:0a:
dd:a4:f3:0a:13:ec:de:d2:2a:91:a4:cb:0e:f1:8b:
85:cb:88:73:e4:f8:78:15:e8:6d:42:85:33:69:f3:
f9:a9:70:c3:7d:38:e6:8d:42:1d:8d:7c:88:ee:cf:
6e:cd:66:46:f0:be:37:37:57:db:3c:04:79:46:05:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a0:e9:08:aa:24:d8:b3:5f:f0:d8:a5:ce:35:f4:3d:ee:5b:
bd:40:6c:19:e0:78:fe:88:9f:8c:54:2b:c2:cf:f1:ca:0a:11:
62:0c:64:27:b8:4c:f6:35:6d:1a:80:ff:f3:1f:f6:8b:db:79:
27:b9:ea:6a:48:a0:1e:1b:4c:ce:5c:18:af:90:af:0d:ee:3d:
38:96:e0:34:45:3b:0d:39:3d:6c:96:d8:9d:cf:66:6f:2f:9c:
0d:8c:44:b2:7d:ce:a8:18:97:14:12:79:ab:e8:9a:04:ee:50:
87:58:fb:4a:50:1c:f6:78:e3:3b:98:f7:c8:ec:c3:4a:69:ef:
09:e6:31:db:44:89:20:df:80:c7:51:c9:49:5e:0e:3e:5c:70:
7a:26:fc:29:9c:9a:bc:1c:3b:c0:96:02:46:80:de:2c:0e:43:
0c:bd:b3:bf:85:e4:69:2f:2e:30:d5:06:bb:04:22:f3:da:75:
bc:85:69:ba:87:fe:f8:13:b3:fe:46:b2:c0:86:6d:c9:1c:ad:
16:8e:6d:f3:b0:60:c9:47:48:ca:8f:2a:44:97:5f:1a:ca:d7:
85:59:5f:39:8b:6e:8b:6d:5a:ff:c3:f5:12:71:aa:71:49:00:
f7:bb:3d:f8:c8:7e:9b:c2:aa:d1:14:7d:ee:0a:2b:88:02:dc:
cc:3a:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:23:22 2025 by rpki-client