Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
File: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer (raw, json)
Hash identifier: oLwNqqy/ql6OvhL8dchIHqka7G7xTntrndo3wBrzDAw=
Subject key identifier: B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025FD1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Aug 2025 04:23:09 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 203.14.116.0/23
IP: 2001:df0:ea::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 08:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155601 (0x25fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 27 04:23:09 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9176E5A, serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:d1:39:08:60:04:6f:60:06:22:0d:f4:ac:
55:ac:4b:e3:f3:1e:5e:4e:36:7e:c7:28:ad:18:e0:
1d:aa:0e:03:4c:51:b2:aa:ce:b9:09:b5:28:5c:61:
4c:12:81:02:e4:1a:90:08:7c:c2:a1:83:c0:8a:f4:
b4:27:81:d3:d1:2a:a5:c7:c7:0a:f9:3f:bd:7a:ab:
3b:04:bb:cd:f5:b4:f0:9d:b7:9f:d2:43:d7:d3:de:
9c:6c:0c:00:38:1e:81:58:95:bc:c2:b1:a1:60:48:
d0:a6:b8:5b:bf:0a:8f:22:bf:de:8b:1e:8e:fa:e5:
b7:90:5f:ef:49:5b:4b:56:e8:5f:68:04:08:22:88:
e5:1e:0c:6e:91:ef:42:73:09:1f:6d:e3:bb:d8:f4:
45:61:80:96:6c:48:cb:2c:05:67:95:8c:6e:10:95:
9a:e7:df:49:fc:47:17:f4:83:1d:2f:88:00:89:4f:
54:ba:22:87:4b:7b:24:cd:37:5a:b0:d8:32:2d:4f:
d1:8a:c7:ca:c9:6e:47:53:de:83:9f:38:c5:b1:cb:
00:72:c1:17:f2:15:ce:e8:2a:83:a1:db:5e:3e:3c:
b1:de:a4:ff:bd:81:69:1c:11:3e:ff:4f:17:bf:28:
57:15:b3:81:e0:f9:ad:85:e6:4f:29:26:8c:6a:64:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.116.0/23
IPv6:
2001:df0:ea::/48
Signature Algorithm: sha256WithRSAEncryption
7b:02:0d:dc:61:6d:13:2a:3e:d3:f1:bf:8b:10:f8:02:62:65:
c8:d2:00:af:2d:4b:a5:d5:c4:06:8c:c3:ec:b0:5c:db:7e:49:
c9:f7:42:aa:e1:74:0d:24:41:74:57:af:f8:f4:f0:96:15:c9:
0c:ad:a8:3b:af:cc:e6:62:89:a7:09:94:da:83:1f:a2:57:a2:
0a:53:8f:da:6f:a2:31:ce:c8:26:f0:18:74:48:df:ee:b5:81:
11:5e:34:29:14:a2:38:5a:53:7d:c0:0f:8f:17:13:95:08:35:
dc:e4:7a:30:5f:93:35:80:78:db:97:32:ff:16:7e:db:d4:83:
37:90:f3:a6:83:2d:96:c3:ee:b8:2f:79:92:c2:d1:67:de:58:
9e:0a:77:f1:ff:8c:c5:58:5f:c4:e5:c3:f8:85:0b:78:88:c0:
2b:fa:b5:43:77:85:7f:13:a0:d8:42:eb:23:31:29:79:cd:5b:
9c:92:43:60:01:f7:54:62:42:09:d8:8a:90:a6:29:a6:10:d7:
57:9e:b7:54:40:5f:f5:ad:ac:cd:eb:90:51:d3:dc:41:ec:02:
45:ae:3f:c5:be:af:5d:a8:3b:c3:c2:04:96:ff:2a:13:81:27:
c5:c5:ef:28:6a:fe:47:1b:23:88:c4:2c:71:20:9f:29:a0:f5:
e9:0a:97:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:32:04 2025 by rpki-client