Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer
File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer (raw, json)
Hash identifier: D8deiRNN+Qv1M/5JIIJtLAFXX5xrz/1yR2+ubVguBJI=
Subject key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026119
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Aug 2025 17:02:58 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 153324
IP: 2001:df4:3f40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 21:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155929 (0x26119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 30 17:02:58 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:89:92:28:9b:89:3b:6e:f4:e0:dd:20:cb:
c2:65:4c:bd:93:0c:f5:54:1a:c4:53:bc:e9:4c:47:
ea:9d:cb:09:61:bb:99:84:38:b2:05:bf:a6:65:92:
67:bb:f8:ca:ac:e2:c5:33:b7:2f:bc:45:f9:41:9b:
5b:b0:ef:53:68:86:1f:ad:8a:84:c3:24:d0:12:ae:
40:ec:8c:b9:f4:c6:e9:6d:35:7a:4a:fe:33:d7:ab:
f9:21:79:b1:d4:e3:33:a1:77:b1:26:96:9e:81:1c:
c7:be:6d:31:ec:43:73:2e:da:8f:cd:89:f3:6d:80:
b1:5f:4d:b1:2a:50:46:37:73:b5:c6:c4:a6:99:56:
77:af:37:0c:5d:af:dd:be:30:f8:77:84:ed:01:35:
a4:d9:45:2e:fe:a9:9e:99:08:f3:f4:78:d1:45:2e:
e7:33:24:73:0a:f3:a1:e1:22:5a:3c:a5:f3:3c:85:
15:41:2b:01:ed:de:c3:b6:d0:2f:c2:e9:67:64:65:
9a:01:2b:18:3d:61:7c:a6:6a:00:d2:60:cc:cf:55:
36:58:40:f8:95:79:90:15:a6:9d:a7:97:a0:78:50:
bc:aa:bb:e4:44:09:e5:ab:e1:90:f6:d3:7e:5e:c2:
aa:61:7c:41:37:62:f5:40:c5:ff:0f:40:c8:9b:2d:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153324
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3f40::/48
Signature Algorithm: sha256WithRSAEncryption
53:29:bc:2e:9e:cc:d6:37:42:a3:84:c6:ef:95:06:4e:e5:59:
6b:a3:bc:87:77:b1:77:38:bc:e2:19:ef:7e:dc:b3:bf:16:88:
73:13:06:c0:7e:70:7c:e8:6c:6b:09:52:26:7e:8a:fb:75:0b:
1f:4b:00:5a:8b:43:25:93:cf:90:5b:a4:e5:08:4d:fa:dc:7f:
e7:8d:f3:9d:27:58:03:13:e6:e5:01:a5:4a:57:b1:c1:c5:29:
b1:b2:e9:8a:d2:ed:63:8e:f4:84:ee:31:5e:1e:3a:0a:6a:82:
b0:55:e9:1c:51:3b:f3:d1:92:fd:35:28:be:c7:bb:eb:f3:15:
c6:b5:94:b9:34:2d:37:61:ea:06:34:8b:eb:38:c5:3a:a6:3c:
87:e5:71:9d:1b:0e:76:19:9b:90:00:e2:f0:3b:e1:05:9e:41:
9c:13:92:38:58:3a:b3:4d:39:b0:04:99:e1:fa:61:6f:70:7f:
63:fb:01:f3:e5:1b:d2:80:63:6b:eb:96:d6:ae:82:d1:f1:0d:
1f:72:68:5e:f0:eb:cb:ef:f6:e5:29:2a:43:b0:80:ee:ad:c6:
be:34:67:9a:a2:34:be:f0:9a:d4:98:77:ac:a2:6b:5d:39:68:
84:8f:91:ab:f6:ad:1c:ac:d0:dc:89:10:39:fa:e7:ae:f7:63:
55:c1:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:09:12 2025 by rpki-client