Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
File: F6o5LAz_dU9iSQBtiThvhxuWk_o.cer (raw, json)
Hash identifier: ls9Mue7Wf62c1yTkDHgHdn20GoVtEk+uFtFEKwB/JCw=
Subject key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02566C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Fri 18 Jul 2025 11:16:45 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 153346
IP: 2001:df4:5140::/44
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Jul 2025 22:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153196 (0x2566c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 18 11:16:45 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:f5:52:22:49:0d:73:3b:4c:cd:59:e0:7a:
e7:f5:52:02:b9:dd:39:19:83:cd:0c:66:1c:ec:fb:
82:17:0f:8c:2e:16:0e:fb:6c:6b:83:89:ab:5c:f6:
38:5a:2d:31:c8:a7:a6:60:8f:b9:49:74:64:b5:24:
5a:b7:0e:1a:13:50:71:09:e3:61:48:df:1c:ff:29:
41:13:e1:cd:1c:55:b5:f9:9d:d8:90:fc:24:03:1d:
2c:1a:0b:73:ec:30:5c:af:2f:18:19:a0:ea:3b:a7:
20:c8:28:16:89:6b:26:f5:56:a9:49:05:64:c3:d7:
30:e0:68:c1:3b:d4:f3:b8:88:04:36:72:c6:19:46:
07:8a:3c:ef:be:71:20:d8:ff:f5:f3:9f:1b:f9:ab:
02:cb:2b:b4:8e:cc:c0:a7:16:57:39:9d:4f:e4:ae:
40:41:48:56:74:ce:e0:e5:11:c7:a4:04:5c:53:fe:
bc:a7:92:e7:75:f1:2e:ed:d3:f6:40:d3:35:f6:bb:
00:e9:f4:df:e1:2b:19:09:81:d7:99:b1:57:e5:99:
40:5d:8f:0d:b8:ca:1f:56:0c:f5:a5:43:d3:ef:a8:
27:50:bb:ed:3c:a4:b6:ac:41:97:13:ed:be:ae:73:
c3:5d:8a:18:37:25:3a:b3:12:be:0f:ac:18:77:58:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153346
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:5140::/44
Signature Algorithm: sha256WithRSAEncryption
b5:57:d1:cc:20:77:ac:ed:4d:75:0e:cf:c6:cb:a3:71:ab:df:
a2:53:3b:45:25:82:36:98:60:75:02:54:1e:75:84:3e:c4:c9:
7e:0c:75:ae:99:28:70:46:14:33:e7:3c:df:e7:8e:f3:eb:c6:
fb:58:2f:8e:ab:5f:c5:be:68:ba:94:23:76:91:cb:7f:89:0c:
6e:06:1c:67:21:ca:35:32:7d:83:a5:12:b2:93:bf:70:fc:6d:
5f:36:b5:6b:23:f1:29:f0:e3:57:b3:10:c0:c0:ad:6c:3f:cf:
97:76:29:b4:d7:0b:fd:a0:63:af:f1:b5:82:4f:58:dc:9c:17:
cb:58:25:54:96:db:85:9e:8f:0c:ce:57:aa:69:b3:80:25:d4:
a1:f3:59:1b:80:d4:31:7f:1f:85:61:ee:d1:a7:55:6e:c9:46:
15:65:41:9f:47:b1:ad:e8:9f:2e:6d:1c:35:5f:0c:2b:bc:6a:
60:b1:ec:f6:ad:e9:7b:3f:27:17:14:3d:81:58:d6:fe:05:7d:
94:cb:fb:26:a2:12:cd:9a:30:1f:35:86:bb:0c:23:6c:a4:62:
ab:16:4c:49:f7:b7:93:4c:c2:e5:ce:0c:b0:43:d5:e3:84:ed:
b1:6c:0a:f5:cf:7e:f5:f3:c3:f2:95:ec:4c:a8:ae:d8:b3:d8:
7f:a9:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:53:33 2025 by rpki-client