Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer (raw, json)
Hash identifier: yvlNdt93hEZINAR9l6uKqe/GuCfCzMhHNySI3eBDlZo=
Subject key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025551
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 13 Jul 2025 05:15:38 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 151351
IP: 2402:1760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 31 Jul 2025 18:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152913 (0x25551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 13 05:15:38 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:88:5d:73:d2:99:d7:f4:35:f8:17:b9:ac:
65:db:0d:fa:9b:14:43:cc:cc:c9:0d:ea:ee:68:3b:
56:04:72:09:53:2a:d8:77:67:90:37:86:f9:1d:e5:
94:88:97:1d:8b:0c:23:0f:df:cf:1b:09:fc:51:7b:
f9:28:a1:ed:ef:9f:8a:fb:91:19:f0:cc:00:1f:d0:
a5:fa:67:95:a7:74:77:a6:fb:46:cf:09:74:f1:88:
a5:70:28:4a:34:52:f0:d6:75:f8:e5:3c:2d:17:0f:
87:69:68:05:b7:b2:c9:9f:36:0f:f6:b2:1c:ce:79:
92:c0:73:4a:b2:79:b7:a9:a2:93:df:12:f9:a0:cb:
4d:77:a1:93:47:21:75:96:e0:af:9e:2c:b6:4b:cd:
d4:d5:bd:35:05:b5:f3:83:81:4e:ac:d4:84:22:f5:
5c:b8:ef:c5:64:2d:75:4b:34:e9:c7:86:e7:07:e5:
c9:1b:32:c4:c2:05:ce:15:14:f1:2b:70:b7:d2:aa:
23:0b:f7:30:00:75:1f:12:aa:fd:1a:25:33:38:c8:
4e:cd:a4:58:b8:cb:df:99:c8:c5:16:c4:1e:19:3b:
77:bf:e1:8c:f6:7f:0e:d8:48:02:a5:94:93:c6:9d:
67:f6:31:b2:2f:42:58:d4:34:4c:4d:ff:30:9e:1b:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151351
sbgp-ipAddrBlock: critical
IPv6:
2402:1760::/32
Signature Algorithm: sha256WithRSAEncryption
96:26:7b:50:a7:4a:59:4b:9c:76:12:e0:60:c3:3d:2f:b3:42:
21:82:e6:29:cf:3e:5a:52:b5:96:94:dc:08:e4:b2:ad:96:87:
28:2e:5d:8b:11:b0:b5:39:42:91:8a:4f:36:f5:a2:eb:07:af:
53:bd:58:d8:b6:8a:38:5b:b6:bf:9f:e2:ad:c9:ca:58:af:5e:
fa:3a:ae:e2:d2:96:d0:db:c4:93:68:50:aa:46:ab:bf:43:fe:
7c:d9:23:5a:df:31:ff:95:f0:45:53:65:c7:02:71:07:14:9b:
26:52:05:6d:1b:ca:58:cd:18:6c:75:1b:d9:75:ce:5a:49:c2:
ed:4f:c5:b8:d6:0d:aa:30:a8:e4:66:b5:d0:44:cc:bf:32:b2:
06:97:cd:cc:d8:f8:b5:97:9d:12:b7:bb:12:37:a3:af:73:92:
1e:ff:53:6e:80:0f:8b:81:41:d9:54:68:25:c2:5f:b5:3b:3d:
b1:87:74:04:0d:66:33:10:51:e1:c3:b1:bd:ee:51:cc:0c:69:
96:98:91:7c:02:2c:60:66:cb:d0:43:27:57:68:fd:3c:91:47:
97:c3:e9:9a:0b:ed:9d:bc:64:70:40:c1:cf:2c:fa:06:cb:af:
f4:ef:20:56:c8:8d:46:f4:9b:2c:3b:5d:81:af:9f:b1:99:ba:
03:58:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 20:37:10 2025 by rpki-client