Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer
File: s8jMSc2pmXofeyj1RvyRIdqhkzw.cer (raw, json)
Hash identifier: 3Dly14/1SNdHkePVx/jWJW+kYrHEitDugtV1aJXoif4=
Subject key identifier: B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0251E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Jul 2025 04:15:04 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 153999
IP: 2001:df5:ca40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152038 (0x251e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 04:15:04 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A913E83E, serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:1d:73:8b:ff:ed:0a:5e:21:cb:31:b9:6b:
9b:97:03:df:57:b5:7d:81:84:24:8c:53:56:1c:c1:
4f:9c:89:3c:fd:08:fd:41:60:9d:45:4c:be:f4:61:
68:bd:b9:5a:3e:17:0b:5a:b7:8e:a3:ba:c2:09:4d:
56:8c:50:ed:17:62:cb:0d:85:bd:67:80:a8:50:50:
02:b7:07:3d:c4:af:4d:b9:52:de:07:a0:88:39:83:
17:96:64:26:2a:35:7e:78:27:46:59:cb:9d:f5:44:
75:4a:5b:f3:1c:e7:7c:ef:ed:4f:4c:da:7a:32:b7:
05:ab:cc:8e:c4:9a:85:b4:c5:95:4e:ba:a4:d6:0b:
a9:cf:bf:61:92:09:2a:6e:95:be:e4:56:e1:b4:a1:
3f:0c:dc:70:a4:f3:47:b4:bf:45:05:62:79:0d:9c:
5c:a4:25:6b:8d:25:f8:12:c5:14:72:ee:e7:b3:22:
03:44:e9:cb:b6:29:e1:94:f3:09:56:21:27:a4:1a:
00:9a:6c:77:3a:8f:eb:87:18:b2:33:d7:ab:99:fa:
81:aa:a9:3c:e2:14:21:1c:01:65:f0:b6:a1:b6:b2:
83:73:25:92:88:99:01:e2:53:bc:8e:9a:7c:95:89:
12:be:bd:43:98:84:7e:3b:82:ed:b6:d9:1c:f3:9a:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153999
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:ca40::/48
Signature Algorithm: sha256WithRSAEncryption
d7:e9:2c:07:88:a0:e8:e8:47:dd:b4:94:e3:aa:69:22:a4:1f:
74:b9:1c:9d:c7:85:8d:61:33:90:ee:11:cb:c6:7c:72:a4:ff:
e3:0b:b2:27:46:8c:72:3a:ce:a3:c5:5a:ad:10:f3:61:f3:39:
58:20:73:25:b0:60:0d:1e:ab:de:70:a7:f3:3e:3e:e3:b3:32:
71:88:7c:28:4a:53:eb:d6:f5:a9:7f:63:a1:fb:39:8a:5d:de:
e2:b5:8c:58:b2:06:ec:54:6c:be:b0:23:8b:ac:92:a7:78:fa:
21:b3:48:1e:88:5a:d6:44:45:78:c9:f7:24:42:cb:c7:99:b5:
b1:a3:0b:b2:b4:84:7d:87:3d:0c:53:b7:b6:23:cb:21:5e:ae:
ee:3d:c5:f6:58:0e:cd:e1:25:56:c4:e1:4a:2a:92:ca:1c:42:
06:33:87:ba:c0:be:8f:06:69:3e:7a:a9:80:89:45:76:2e:6e:
ed:3d:0d:18:d4:ca:ff:4e:c8:6f:87:a2:c0:60:04:b1:86:6a:
72:c8:1b:99:24:32:8b:79:b4:1d:48:dc:b1:5a:ea:df:f6:60:
56:8e:3f:d8:7a:d3:95:a3:33:7e:f2:8b:50:2f:57:f4:c7:f7:
d0:e2:73:90:56:a7:2d:cb:03:1a:b6:a2:01:87:58:27:95:0f:
64:7c:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 05:02:02 2025 by rpki-client