Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
File: HQ2sEe2C41wjsMvv--4AYmOwmVc.cer (raw, json)
Hash identifier: 1TJzfNJie9SWdAtWxyFLSxRsfWhO7k2zKDOUrllWssE=
Subject key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024861
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 24 May 2025 09:35:02 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 153883
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149601 (0x24861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 24 09:35:02 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:2a:35:c1:08:b8:a8:d8:28:8a:9b:79:8a:
e4:07:da:b7:ee:79:fb:f6:3b:aa:c1:10:8f:5a:b9:
ed:50:51:9f:0a:c4:37:5a:5e:bb:3c:39:86:09:2a:
67:57:c9:13:c1:3c:46:36:93:1b:9c:84:42:9d:f2:
aa:7d:e5:89:b7:fc:a6:28:72:0e:07:ab:19:c0:66:
01:73:33:ee:46:7a:09:2c:48:b9:b4:98:e5:85:8b:
93:3e:90:12:d5:67:b6:ff:e4:46:91:1e:75:be:3a:
66:f9:e8:c4:a4:0f:85:36:ec:fd:46:e7:1e:3d:dd:
cf:1c:61:76:be:63:4b:af:a2:c4:bb:69:0b:f0:e1:
cb:02:37:54:6a:cf:be:2f:d8:91:99:57:dc:e7:ed:
de:ba:e8:f1:a5:24:2c:86:b9:f5:44:55:17:4c:89:
08:5a:8b:54:8b:0f:0a:76:95:66:0b:9b:da:e2:f5:
ab:f3:bc:b7:a8:e6:c3:0b:4b:5d:2d:54:d4:f7:97:
ea:c7:54:25:f5:e6:35:41:02:29:a0:79:e3:55:d7:
b6:e9:e7:0f:9a:cf:ce:1e:84:c5:6b:40:31:6c:db:
02:98:bf:e9:04:7a:26:2d:c7:e0:99:37:87:73:d3:
8f:bd:c0:d1:35:2b:a6:c3:b2:65:a5:8f:7f:b7:b1:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153883
Signature Algorithm: sha256WithRSAEncryption
64:34:a7:16:09:79:28:51:19:0a:4e:40:d7:b9:1d:bd:12:b9:
0a:61:3d:7a:11:d3:4c:3d:8e:78:42:4a:e5:dd:21:07:6e:a9:
9c:91:76:50:48:b4:94:53:4c:32:64:f6:e8:b7:65:8e:f9:8f:
dd:68:8d:b8:20:d5:20:fc:01:0d:2e:e7:9a:4f:05:e2:d5:39:
04:52:1a:ec:55:54:e8:8f:f1:20:ff:39:2c:fd:21:45:eb:b6:
dc:0e:fb:a9:5a:d4:83:86:5b:1d:3e:3f:d5:2c:41:59:8f:b7:
86:fb:d8:c1:41:ab:3d:98:fe:b4:10:8e:83:eb:bd:d9:8f:bf:
89:7d:51:49:dd:7b:5b:de:d3:c7:0c:0a:e3:f2:c7:c9:92:29:
82:14:3f:b5:b1:91:49:0a:71:c6:50:a6:40:f6:fe:4f:56:d8:
01:43:a4:da:7c:16:3e:b4:e1:df:0f:e9:98:70:7c:64:77:b1:
aa:21:d3:4f:7c:20:fd:22:57:66:5a:6b:29:51:cb:ad:5c:52:
65:25:91:65:98:56:be:bb:0c:5d:aa:6b:3c:42:63:50:9a:e8:
49:44:14:a2:11:dd:01:eb:33:4e:ac:96:72:ea:67:dc:cf:9d:
7e:a8:1a:05:0d:60:10:96:43:dd:44:bf:f9:c4:d7:6e:e9:ad:
47:85:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:21:29 2025 by rpki-client