Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer
File: HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer (raw, json)
Hash identifier: lJB5yWWwRZ9r1NOhwX096h8zh/ZJkB9u8cW9Pa3SqWA=
Subject key identifier: 1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E07
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 19:18:36 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 153378
IP: 2001:df4:8340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159239 (0x26e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 20 19:18:36 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91B8E70, serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:bd:9c:78:03:87:bf:05:de:b6:8d:7f:ba:
07:8f:58:40:04:40:f9:93:6f:6c:af:41:0d:a2:6d:
98:4b:c7:a2:f4:ef:ee:60:7f:80:3e:29:b3:67:45:
ee:d2:91:45:e9:d9:7d:4f:d1:8f:be:ca:1b:25:ef:
5c:2b:0e:a3:49:b1:8c:8d:7d:5e:ce:c9:a5:f9:89:
2a:74:f8:b9:a2:d5:38:88:3f:c9:fa:6c:e2:3a:49:
c9:1a:f0:6c:ed:2e:d7:d7:88:c8:ce:4b:a4:7a:ca:
e8:30:ed:cd:a2:a0:36:16:f9:40:f7:f8:7d:06:d3:
34:d4:e8:cd:43:49:d2:9e:d2:d5:87:49:ff:64:ec:
eb:d4:c6:17:d3:29:2d:d3:53:2b:ca:9b:e7:b6:af:
8a:d1:e2:23:e9:b5:bb:97:f3:6b:75:e4:08:d8:4d:
83:c4:9d:12:a2:66:6b:40:1f:5f:85:c6:52:ce:a2:
5b:2c:3d:0c:a7:1a:5c:91:c5:6d:b2:eb:96:17:f8:
c8:32:db:14:d4:28:d7:f6:e2:de:d2:fb:0a:66:41:
91:61:df:23:32:10:d0:f4:89:7f:0e:d3:08:b9:ab:
75:0c:10:95:ae:75:d8:23:48:0b:af:be:3e:ce:47:
2f:16:94:05:99:e1:c8:4b:27:f1:66:27:76:f1:50:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153378
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:8340::/48
Signature Algorithm: sha256WithRSAEncryption
88:f2:1f:32:0b:28:02:d0:72:eb:24:44:5c:b4:e5:d8:4b:f7:
fe:e4:26:b0:b5:e8:ad:4b:a3:ef:e5:57:61:fc:4a:6a:26:00:
f2:0f:bd:55:7d:6b:9a:83:af:b3:e5:c4:fa:67:45:c0:7c:06:
c0:09:e4:0e:27:30:23:bb:2c:b4:cd:bf:48:f2:3f:33:70:79:
6b:6e:73:2a:5d:b3:b8:57:32:4c:4a:3d:80:09:78:d2:6a:45:
80:8d:88:c3:0a:5f:1d:87:74:4a:25:35:20:62:52:49:24:87:
ee:57:aa:47:73:34:9e:62:0a:e7:3a:04:6d:43:a9:2d:2e:a7:
f7:bb:ea:2e:7f:85:da:67:9e:83:11:9a:97:d1:d2:06:20:39:
6c:88:37:e7:3d:93:41:b3:08:64:42:be:73:e3:3b:6c:59:26:
2d:32:eb:da:f5:49:74:4c:c1:d7:8a:8f:51:e9:a8:28:be:ce:
33:27:16:b0:d8:34:e3:bd:b8:04:fa:2d:a0:7b:b5:cc:b6:17:
b5:75:a8:c3:0f:e5:08:eb:91:ba:3c:73:10:0f:96:24:a9:ca:
9c:55:27:8b:c9:df:b0:58:56:45:f3:84:0c:59:46:da:e5:3f:
35:de:d9:6c:ff:99:a6:1f:84:0c:dd:90:6a:3f:f8:3c:37:3c:
55:22:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:16:05 2025 by rpki-client