
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BccVxvW374gjLNStH7Lnj06Rgts.cer
File: BccVxvW374gjLNStH7Lnj06Rgts.cer (raw, json)
Hash identifier: KL0O6ZYmg/NsZL0wnoFFgmix5q8a7Q2GNb0A7DYPTzs=
Subject key identifier: 05:C7:15:C6:F5:B7:EF:88:23:2C:D4:AD:1F:B2:E7:8F:4E:91:82:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025C0D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/05C715C6F5B7EF88232CD4AD1FB2E78F4E9182DB.mft
caRepository: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Fri 08 Aug 2025 03:21:26 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 7719
IP: 2001:df5:f4c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154637 (0x25c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 8 03:21:26 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91B82CE0000, serialNumber=05C715C6F5B7EF88232CD4AD1FB2E78F4E9182DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:0c:83:00:28:f2:23:62:91:db:95:74:ca:
65:02:57:22:f3:f3:a4:b4:d8:67:14:6d:8e:73:8b:
28:77:82:75:96:08:00:33:93:14:6d:4d:a4:12:69:
af:16:5c:41:50:64:b7:e1:f0:9c:e0:f1:bd:86:fa:
9f:e7:70:18:9e:12:90:1d:90:5b:02:11:52:e8:79:
1c:03:a5:82:c2:1f:36:ec:27:22:37:2c:2e:72:1b:
82:2c:cc:68:82:cf:7c:71:bc:e5:af:e4:87:86:ee:
cd:4d:7a:28:1f:18:4a:8f:2d:b7:1f:e1:d1:15:f4:
69:b1:66:95:46:39:03:95:ed:42:00:39:ac:6f:c0:
ed:1a:2b:2a:8b:38:ea:8d:d5:66:44:a7:c4:fb:0a:
e9:8e:01:4b:86:a8:e4:6f:c1:8e:c5:8c:99:4a:32:
7f:ea:07:6b:2f:dc:27:cb:30:47:50:1c:d1:97:eb:
df:d5:e2:78:4a:ab:ba:e5:cf:9e:c1:a2:8d:20:55:
2d:f7:12:86:d4:1f:aa:f3:f7:7b:e3:66:b6:10:af:
77:c2:b3:da:fb:1c:e0:f3:95:bb:1d:e1:9e:e4:fe:
8a:85:94:45:be:33:01:a2:34:f0:10:da:be:a7:0f:
eb:6c:1d:45:e4:82:7b:2f:be:5b:ea:53:36:55:75:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:15:C6:F5:B7:EF:88:23:2C:D4:AD:1F:B2:E7:8F:4E:91:82:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/05C715C6F5B7EF88232CD4AD1FB2E78F4E9182DB.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7719
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:f4c0::/48
Signature Algorithm: sha256WithRSAEncryption
05:21:8e:3a:72:92:58:25:9d:e2:8d:82:1f:67:30:84:94:0a:
42:9d:32:ec:a6:a0:66:8b:b3:bb:5e:01:e6:dd:fd:15:b9:0c:
aa:89:9a:73:91:3e:82:54:9f:06:e0:c5:95:db:2b:aa:5c:c6:
7f:1f:fc:27:79:20:a7:29:90:ff:23:82:de:9a:8f:7e:90:bd:
0b:8a:da:6e:67:d6:44:f3:83:f6:bb:4a:56:f8:71:4a:6b:4d:
fb:db:f2:43:66:fa:e0:ed:a2:30:80:71:ab:c2:52:75:f0:52:
25:24:63:1a:29:c9:b2:f9:ec:26:96:98:be:b7:a1:b3:3e:24:
25:1d:0e:b0:a7:47:eb:ca:73:73:13:fa:cc:83:5f:31:4f:5c:
6c:db:ff:d8:fb:3e:31:c7:7b:76:10:97:2a:d7:19:5c:6f:0f:
3d:13:fe:46:95:81:06:29:57:8a:bd:bf:54:db:70:50:5a:1f:
56:6d:09:6d:d5:54:69:09:74:71:f0:58:73:3d:66:01:74:f3:
51:3f:8f:0a:be:30:af:74:df:5e:a7:c8:39:13:22:c7:e0:57:
da:a4:1d:ee:f8:4f:b6:e8:8a:b1:7f:0e:c2:86:f0:c2:85:ec:
42:ed:2c:29:60:c4:44:fc:d0:60:a8:67:39:d1:3f:8d:c8:ea:
ee:e1:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:20:11 2025 by rpki-client