Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer (raw, json)
Hash identifier: vcqgu5nLVJb6zYSo2n/vzbe3CqIgKApS2HYFSLCi7dc=
Subject key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027343
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Nov 2025 11:10:47 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 154334
IP: 2001:df6:4440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160579 (0x27343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 11:10:47 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:28:75:fb:90:81:e4:52:f2:48:75:40:26:ec:
a2:ae:b3:48:00:34:8a:ba:54:41:65:d2:46:77:7e:
a4:4a:93:0d:b6:95:28:34:fe:5d:89:e4:dc:9a:a7:
e6:61:6e:15:dd:72:1d:6e:84:8b:84:3b:43:bc:4c:
b8:ab:55:da:a5:18:94:5f:54:b4:ed:41:8d:ba:39:
8c:fc:cb:d4:6b:14:a0:bc:95:29:12:74:32:da:b7:
28:5a:85:97:a8:4b:8d:9c:b1:ab:72:24:fd:9d:b3:
8f:6e:d3:51:4f:a3:82:81:6b:69:12:e7:f3:22:85:
5f:a1:ed:98:3f:51:03:f9:5b:36:3d:95:57:c9:bd:
6e:b5:e2:dd:0a:6b:05:5b:b8:af:8d:15:8f:b0:a3:
1b:fb:10:03:88:27:71:40:70:fa:ab:b3:fd:cb:1c:
36:46:a9:66:27:c7:44:2d:c0:22:f9:20:72:be:2a:
4a:b1:22:e1:ba:34:ee:17:d2:84:f1:07:24:a5:e0:
b4:47:32:3c:55:6f:21:a6:30:45:3a:72:18:c9:29:
d3:b5:d9:c1:76:94:58:c7:2a:5d:eb:ac:e4:37:eb:
37:cf:b0:b6:c6:fb:6a:a7:0f:3c:16:88:03:44:d8:
f3:d2:3a:29:7d:7e:b0:0a:48:5e:85:c6:25:ea:04:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154334
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:4440::/48
Signature Algorithm: sha256WithRSAEncryption
17:2e:c7:ed:28:6d:66:7c:76:81:36:38:8f:ea:40:53:0f:f7:
54:0e:e2:5c:d5:67:3e:f4:a7:22:b5:43:0e:c9:f4:9c:26:2c:
ec:0d:96:5b:38:bb:f9:48:c7:30:5d:a5:0d:18:16:72:4e:b1:
80:a5:f0:29:d6:07:ba:44:b4:be:62:16:29:8a:03:d6:34:5d:
86:a2:e7:27:51:87:90:37:e2:ae:d7:58:5d:4b:27:b2:86:ec:
04:e2:1a:65:6a:a2:9e:4e:c6:a8:5e:89:bf:94:c4:99:d7:42:
61:fe:3a:10:48:11:12:c0:be:ad:c9:81:93:e1:f5:0d:25:11:
b5:0f:a9:79:24:46:b2:04:8c:3c:1c:c1:88:69:94:0d:61:9a:
ee:f5:50:84:1c:7c:d3:21:e2:75:61:13:05:90:3a:78:55:cf:
5e:23:52:e9:6e:59:d9:7e:52:9f:ee:01:69:8a:16:a6:b5:70:
15:6a:38:a0:a1:7c:53:ab:56:f0:03:53:41:5a:9a:cf:ca:52:
e8:23:4f:b6:87:14:c0:1d:66:69:5a:3a:e3:50:a0:1a:8f:87:
3b:a6:91:95:7e:cf:bc:cb:f3:ec:1f:8e:aa:4a:87:ce:98:3e:
4f:ac:5b:2d:95:bd:b1:f9:2e:64:2a:cd:82:f0:be:77:11:b6:
fe:fc:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:01:23 2025 by rpki-client