Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer
File: OUsE6TpOrJKA9-wejZv_nebApZ8.cer (raw, json)
Hash identifier: j05ts5i/CWOnfyR7T7N87O2hVFSDmofypDsfwauNgI0=
Subject key identifier: 39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026FA7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Oct 2025 07:44:25 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 154009
IP: 2001:df5:cf40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159655 (0x26fa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 07:44:25 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9150F54, serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:ba:2c:f0:93:40:fe:7f:d6:61:ac:d6:1a:
7b:48:e1:85:3d:36:95:c4:d4:06:4b:31:98:e8:e7:
6e:81:d5:fb:6c:a2:77:65:2a:5b:98:09:84:3c:d5:
29:f6:15:f1:08:5e:25:0c:57:94:e2:e0:6a:49:12:
86:76:14:8c:d3:67:30:94:e3:35:22:10:cc:88:5c:
15:0d:9e:f8:55:e9:21:6f:8f:bf:8b:6f:57:c7:da:
59:4d:97:3c:51:12:3f:b0:71:74:bd:93:dd:b7:11:
e4:a4:99:3a:0a:b1:69:1f:50:ee:ea:18:eb:f1:db:
3a:11:11:a8:de:d9:4d:8c:6b:d5:30:ee:eb:86:b2:
f5:83:d8:b4:d7:bb:bb:8f:91:01:49:4c:c4:a9:39:
3d:f9:09:c3:8c:c5:c2:8e:6f:ab:3c:60:69:27:9b:
34:d6:f7:83:d3:23:0a:3b:b6:40:89:9a:f3:62:fd:
59:71:68:a4:e4:c1:96:a2:54:71:a7:42:33:a5:ab:
34:4a:a0:28:a0:2a:72:f6:e6:e3:b2:16:56:7c:7f:
17:f0:62:cd:da:cb:17:c5:38:cc:48:46:d6:71:e2:
97:3e:61:08:a8:9f:17:b3:c5:01:c0:3d:77:bb:e3:
9a:4a:3a:8d:3e:50:06:64:55:9d:a9:dd:c5:52:79:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154009
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:cf40::/48
Signature Algorithm: sha256WithRSAEncryption
d9:22:93:e9:bf:2b:4c:3c:43:2b:b8:2e:70:f9:d2:c7:25:fb:
a6:d0:1d:82:a8:20:8d:75:5f:be:e6:d6:b2:e5:96:00:05:4a:
53:07:66:d9:f2:f9:1d:e7:d6:d6:76:e3:78:37:ea:63:1e:68:
f1:94:46:80:2d:b8:0d:49:ea:7c:e1:53:d6:0e:c7:59:fa:bd:
3d:a6:62:08:20:1b:a1:88:4d:37:c7:59:f2:89:6a:a9:b6:f4:
ce:fb:3f:a0:0a:b9:ce:3e:f4:d5:7f:f3:30:40:a7:35:0b:fb:
3d:f3:0a:3b:62:91:18:22:69:41:a9:d2:9c:55:70:37:1f:f3:
51:af:d4:f3:a9:a5:21:85:43:68:a1:33:f0:75:b7:5c:d5:cf:
f9:bc:df:6b:04:cf:9f:0a:1b:86:aa:58:ea:67:9c:65:bc:ec:
b8:dc:31:48:33:c4:44:50:7e:e9:0d:47:4d:6b:98:c5:b5:de:
72:bd:d5:bc:9d:a2:b0:d6:3d:13:7c:80:9e:48:5e:94:99:2a:
d2:19:ff:5e:13:20:a4:64:2f:8b:38:94:14:49:b3:af:e8:4f:
47:9a:86:ac:72:b6:e6:d8:d9:ba:50:ca:6c:34:09:35:50:45:
93:45:72:2b:23:7e:f1:b4:36:57:40:d1:53:87:e4:b6:1a:c7:
3b:fb:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:18:01 2025 by rpki-client