Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer
File: E5kSHmqxW_iSv4n71dqfNIaDl_g.cer (raw, json)
Hash identifier: lr46WmSMT/nTLW1AGE6/LQopaeeJ+uUqLu42Uj6WJUQ=
Subject key identifier: 13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025BBA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Aug 2025 00:01:09 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154121
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154554 (0x25bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 7 00:01:09 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91DA736, serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:24:cf:e4:6a:05:36:5d:7d:78:ae:6c:78:
52:60:38:1a:56:2c:2a:22:cb:35:42:44:74:fe:45:
30:d8:8e:7d:a9:89:91:4c:03:9b:5c:32:8b:ca:e6:
bb:e5:d5:9f:c4:cb:ea:2b:30:ee:7a:62:32:b3:1a:
64:ef:c0:cf:79:2c:a4:2c:ec:36:a5:35:3f:d7:d0:
45:e3:c5:d9:8b:58:01:7e:d5:0a:9a:98:72:55:38:
0c:c4:dd:9c:77:af:fc:86:23:ff:b2:09:a1:54:49:
5a:c1:18:cd:5a:0c:ba:74:28:34:ef:9f:21:04:61:
0c:07:e5:75:8b:fd:98:f7:95:f9:8a:75:b8:d4:58:
2a:cc:b0:4e:23:c7:16:d7:87:29:28:07:da:69:59:
04:05:31:95:2e:b8:5d:48:8a:1a:80:57:0f:fa:f7:
fd:70:4d:8d:30:8d:00:26:e8:41:c8:0e:85:fb:25:
21:76:0a:48:79:35:b3:d1:01:7d:ef:bc:74:a1:b7:
ea:d0:fd:79:bd:24:f6:1f:1d:93:9d:13:59:02:05:
30:e5:4a:eb:f3:27:0b:be:31:1a:b6:1c:ad:c4:a0:
28:77:a0:7b:bd:6f:52:68:0c:6d:b0:12:e4:d0:c4:
ca:08:88:f2:f3:55:c2:a3:d4:aa:d0:98:ad:2c:bb:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154121
Signature Algorithm: sha256WithRSAEncryption
d8:b6:51:59:25:d5:ce:ab:8d:da:bf:63:f9:fb:66:e8:65:f1:
b9:c4:31:16:83:42:b6:28:ed:8c:38:fc:a9:3b:7b:53:86:a0:
75:c2:17:44:8e:98:52:d9:65:75:9f:42:94:61:d5:b0:67:e9:
74:6b:bf:85:ff:f7:1d:5b:11:b4:29:80:63:c6:dd:fc:fc:a0:
93:f1:6a:36:ab:32:50:dc:2f:0a:68:a4:5b:18:0f:1a:e5:bf:
10:da:0d:13:d8:14:c4:53:ae:04:b3:24:57:87:0e:04:e6:7a:
c1:b1:40:8e:11:39:a1:4e:8e:ef:0f:ed:40:c1:e6:52:c8:9c:
fc:64:b6:a5:01:08:87:8e:3c:6d:c8:b3:e7:73:cb:1b:40:b0:
fa:df:68:a8:41:66:0a:19:64:8d:e2:e4:a1:12:34:88:22:2d:
2f:af:f6:1e:8a:5d:7f:d3:f4:db:50:99:25:79:1b:03:81:51:
b7:69:17:0f:da:80:9e:24:fe:77:ef:33:f1:fe:54:6e:af:90:
df:51:05:c9:d8:76:f9:61:9f:23:26:87:2f:35:16:72:f4:e7:
fb:02:df:6d:de:a0:b1:b6:08:05:36:c4:3f:c7:b6:f3:bc:97:
a0:94:66:b1:b7:78:80:39:53:6d:19:16:7e:e6:41:c4:ed:d2:
e6:1f:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:13:21 2025 by rpki-client