Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer (raw, json)
Hash identifier: ZgzbLuCch/bntKOnjfR/yXpHBVHVt1mnkn2DaJ3bvp8=
Subject key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026F8E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Oct 2025 20:05:03 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 153340
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159630 (0x26f8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 27 20:05:03 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:1c:a5:08:08:c6:90:4f:ca:ec:75:fe:93:
fa:e7:84:ce:f5:aa:f6:40:1a:f3:b7:42:21:08:99:
5b:38:bd:6d:c8:5a:38:59:8a:cb:ce:ff:50:f2:4b:
19:2c:17:62:db:f9:14:75:8e:ad:34:2c:f6:df:ca:
e4:6d:45:93:11:dd:4c:80:91:f0:2b:f9:ab:61:f4:
9f:2e:cb:ae:1e:52:b0:f4:17:d3:be:fa:64:eb:61:
99:e1:41:64:27:11:37:d5:49:2f:ee:da:33:86:be:
fe:94:cb:dc:a0:1e:35:5c:4d:86:61:9f:f2:55:bd:
b7:a8:c9:f8:fe:65:0e:51:21:e9:89:3f:2b:47:b7:
1d:ab:54:a8:06:f8:3a:f7:29:4d:f9:59:c2:1f:d9:
b4:43:b6:eb:0c:bc:54:f0:ab:73:81:99:21:c8:40:
7e:9c:ba:fe:8b:48:55:f2:4f:55:41:91:1b:f0:d9:
dc:a3:a7:9d:f3:c5:7a:8f:cb:93:36:16:2f:32:bf:
4c:fe:fa:27:f8:33:4c:34:09:8e:1c:90:d4:f0:b5:
46:83:8a:24:73:04:19:f2:ca:f3:aa:54:c5:16:29:
cc:3f:70:58:42:24:3a:2c:ea:c5:62:ad:e3:d7:e4:
4b:d6:41:59:c6:56:89:08:66:12:41:7f:93:e9:a7:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153340
Signature Algorithm: sha256WithRSAEncryption
d4:e3:8f:38:30:af:16:d7:ed:8b:c2:41:f8:cc:01:09:0f:8c:
8c:42:70:3c:8e:e0:c9:5f:33:21:f5:92:95:3f:6f:ec:37:08:
0f:1d:fd:9f:71:e0:65:9d:28:00:2a:7a:71:f0:5d:c0:99:e0:
55:20:7b:0d:0a:c8:5d:a9:0e:d3:4c:c1:25:fb:cd:6d:5e:2e:
f9:6f:a7:16:6c:9f:d8:42:d7:e0:22:4a:27:d3:4d:c9:74:86:
b2:36:2e:94:5a:5e:34:40:e4:c9:61:9c:89:db:8e:37:71:27:
5b:4a:f1:26:c4:99:0d:f8:62:69:ae:81:6c:32:e2:68:72:1a:
33:74:8f:42:15:45:3e:d2:9b:b0:c6:2d:4e:1f:fa:d7:25:54:
8a:eb:f5:d8:b2:9f:59:2d:51:3c:f9:9f:c0:3f:0b:2f:12:e1:
54:d5:a6:4e:dc:38:05:49:09:3f:a7:b7:da:93:1f:35:07:8a:
76:1f:5b:9b:04:51:28:e8:a2:90:a8:1c:af:4b:3e:84:ae:fc:
76:71:f5:89:78:a7:62:0f:44:b5:2b:99:af:db:35:fe:7e:7b:
37:84:5b:34:37:0b:bf:7d:da:64:8f:20:25:ee:02:6e:ac:c6:
2e:6b:10:1f:58:a5:ae:95:15:df:75:09:ae:3f:92:72:5a:5a:
ab:d1:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:15:11 2025 by rpki-client