Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmA_zN7mtoB29mmttf4HrlrhMH8.cer
File: MmA_zN7mtoB29mmttf4HrlrhMH8.cer (raw, json)
Hash identifier: aWhnBpb5sJT6L3ej86S+vmKH0Z8eQjUiqTgwEdhr7pE=
Subject key identifier: 32:60:3F:CC:DE:E6:B6:80:76:F6:69:AD:B5:FE:07:AE:5A:E1:30:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025E15
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/MmA_zN7mtoB29mmttf4HrlrhMH8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 18 Aug 2025 16:09:18 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154155
IP: 49.213.62.0/23
IP: 2001:df6:40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155157 (0x25e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 16:09:18 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A916FC1D, serialNumber=32603FCCDEE6B68076F669ADB5FE07AE5AE1307F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:cb:90:26:d2:17:36:ad:df:3f:55:fa:63:
f5:5f:6b:eb:b3:56:f0:97:38:b5:0a:8c:48:68:8e:
79:4e:d2:94:3a:82:b8:51:c4:37:c9:09:75:87:c6:
59:8f:16:c1:b2:aa:d1:09:f0:ff:de:ea:ec:35:64:
34:f3:14:ce:5e:76:c3:90:ed:be:fa:09:49:99:38:
51:22:7e:5f:5c:3b:04:72:2d:68:b8:46:f2:bf:fc:
95:b5:ef:29:c9:cd:35:63:c5:98:e1:a7:39:8e:da:
27:2c:87:3d:e3:07:2b:96:da:63:52:b9:0d:6b:fe:
e3:15:6a:24:1d:22:b2:32:6f:15:1f:b9:1a:59:93:
14:6b:bc:b2:71:ef:31:66:e4:6c:98:8e:7b:0f:fb:
16:93:f4:9c:58:25:70:2c:b9:b3:b3:09:0b:12:79:
71:18:c4:49:43:0c:72:15:bb:91:60:54:d5:9f:19:
7a:3d:d2:e1:20:cc:4f:32:fd:49:7c:b4:92:4b:97:
f4:e1:68:f7:09:78:63:0e:0f:66:99:75:96:4b:7f:
bc:35:37:51:27:b9:49:27:6c:28:11:15:18:ee:47:
19:b0:41:d3:6c:1f:78:bc:46:0f:00:9c:37:ff:88:
dc:d8:a2:68:f8:68:2f:58:e2:ef:1c:97:2a:e3:05:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:3F:CC:DE:E6:B6:80:76:F6:69:AD:B5:FE:07:AE:5A:E1:30:7F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/MmA_zN7mtoB29mmttf4HrlrhMH8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154155
sbgp-ipAddrBlock: critical
IPv4:
49.213.62.0/23
IPv6:
2001:df6:40::/48
Signature Algorithm: sha256WithRSAEncryption
5e:bb:c7:92:ea:67:9b:f4:88:86:66:8a:24:2d:f7:b7:46:56:
e3:9a:ad:04:ce:58:25:17:4f:1e:25:7e:db:2c:16:9e:be:6c:
d2:5a:17:46:bb:ec:7d:a7:33:69:c4:97:63:10:90:fb:98:8e:
4c:73:08:d9:b2:72:10:4e:0d:0f:49:6a:9a:e7:ec:30:28:bd:
ac:07:e8:bb:ae:d8:bf:0c:45:f8:e8:7c:9a:02:37:9a:00:71:
5f:0e:98:26:56:1e:5c:c5:b2:98:1d:f0:49:09:73:9a:8e:2b:
32:85:e1:bf:a8:b4:20:14:ec:04:3f:6f:d7:15:44:1f:15:85:
dc:bf:40:ef:a2:2c:9e:60:fd:8d:41:5c:1b:84:3a:7a:75:6d:
75:60:9e:38:2e:57:84:8c:fc:fb:dd:a3:6a:d1:5b:96:fc:9f:
e2:bd:5c:05:dc:13:5c:aa:53:8b:42:d4:fa:39:70:4d:4e:07:
66:6e:84:e7:7d:27:e4:3a:4a:b2:b4:67:2d:43:f8:75:83:1e:
87:ee:ff:9a:8f:9a:89:98:4f:1f:38:70:3f:33:91:85:c3:40:
82:cb:26:2a:af:2c:ff:24:c9:6e:cf:93:61:09:7c:9c:6b:39:
1d:3f:52:ed:f6:2c:2e:03:f5:5c:f5:ad:08:70:3c:d7:63:16:
63:71:32:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 22 14:22:37 2025 by rpki-client