Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer (raw, json)
Hash identifier: uQVClEigMLPLpHePQnDiE8RTr56yyjquJ37u1+lyXA8=
Subject key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0262AA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 16:29:58 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 140698
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 16:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156330 (0x262aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 16:29:58 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:12:97:9f:a9:c3:e9:b6:3d:19:4f:29:14:
dc:18:ff:2f:9e:a8:f1:58:58:6c:e9:5c:ca:f7:99:
99:80:d4:d8:de:c1:c6:60:1d:6a:93:83:40:cc:ad:
4b:f4:52:8a:8a:d8:4b:42:3b:bb:c9:43:90:4a:56:
c5:bf:b2:12:3c:f3:f0:75:ac:f9:3f:45:6e:51:94:
5c:45:da:8a:1c:61:e8:d3:5e:c6:aa:3e:1d:82:31:
25:5e:b1:90:a9:8e:47:f3:35:bd:34:b2:90:ba:e7:
af:6f:48:d2:bc:f5:be:d1:5d:49:cb:0c:dc:90:35:
a5:35:ec:fc:c9:2a:0c:bd:a9:5a:b6:aa:b3:3d:11:
8d:c8:e8:7b:f8:b7:18:18:7a:2e:b1:06:e1:fb:d1:
25:c9:a5:0c:b8:7d:0b:f0:f2:d9:ae:93:36:37:58:
76:76:f0:95:76:97:a9:ee:67:ee:9a:ca:7d:22:38:
19:34:87:f3:19:d5:00:71:b6:b4:2d:51:04:f9:0d:
62:29:dd:8e:e1:ae:b6:ad:ef:19:dd:ce:6e:28:2a:
79:67:bc:99:e2:f1:4e:72:23:73:a6:99:20:38:15:
84:70:1c:e1:d5:77:4c:dd:e7:33:de:08:ef:8e:6e:
28:d0:c4:8e:31:b3:ff:8a:53:17:4c:77:d3:b3:ad:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140698
Signature Algorithm: sha256WithRSAEncryption
3c:98:f8:60:7b:ec:23:e3:07:99:28:80:04:03:88:9c:9b:fd:
52:df:11:dd:fd:12:64:ff:36:4c:47:58:6d:32:2c:44:cd:60:
76:f3:c3:21:9a:35:a0:1b:4c:bf:29:10:44:15:91:f4:7e:17:
8b:79:65:29:11:7b:30:75:54:00:d8:62:d1:74:bf:54:6a:7d:
5d:02:32:e9:4e:99:9f:aa:2c:b9:eb:68:d9:63:9f:cc:c8:fb:
d2:72:99:67:6f:0a:08:53:36:3e:98:43:e8:c7:04:eb:8f:44:
75:b8:3e:bf:e7:18:22:ab:7f:f8:65:8d:9d:16:67:c4:1e:c3:
45:63:64:14:78:c1:b6:ab:39:5e:49:8e:88:39:cb:67:4a:a7:
f5:ce:b6:8c:46:3d:cb:67:52:d4:67:59:5a:c5:e9:6f:96:b2:
b0:eb:72:51:50:5a:47:7f:79:49:37:83:29:27:63:16:19:ee:
bc:8e:18:f9:17:4b:9a:af:e8:38:9f:6b:de:90:90:60:a3:a8:
70:0e:0b:df:85:34:7a:1c:e8:b2:a3:7e:86:55:1c:b3:68:68:
32:1f:c4:52:8e:05:ac:1e:25:51:24:8c:35:0b:a5:cd:12:36:
79:bb:b2:6f:98:b9:13:27:c7:c9:59:41:d1:33:4f:19:a7:b0:
17:7f:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:18:09 2025 by rpki-client