Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer (raw, json)
Hash identifier: efnutUPxyjAXIV8Yo3OKgfEPYf9SpH4gJN8fxSwi/hw=
Subject key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02700C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Oct 2025 05:34:31 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 154324
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159756 (0x2700c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 29 05:34:31 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2b:a8:e2:e5:25:cc:a5:28:95:24:23:0f:0c:
bb:1c:49:53:c3:80:fb:63:eb:70:ed:24:84:0a:50:
68:a1:20:7e:19:58:29:90:7a:9e:0a:45:f3:85:66:
a0:ca:76:b5:fb:38:50:1e:84:ce:d7:9f:27:c2:0f:
6b:b2:bd:d2:8f:a3:e4:f8:86:f5:8c:af:f0:1a:3d:
cd:a7:be:aa:cb:cb:0b:24:52:a2:40:91:e3:0c:17:
83:f4:0d:8f:9d:76:c4:97:b7:27:4b:9e:74:b7:70:
75:d8:09:12:5a:6b:15:c9:eb:bf:f7:02:7a:43:d1:
9e:18:5a:b3:ec:e9:93:6b:c5:f5:0a:1e:4a:2a:94:
04:73:9f:97:56:9c:37:27:4e:28:1f:4b:98:74:f9:
12:9f:7a:d5:f6:db:18:b8:4b:3b:c1:0d:23:12:63:
2b:5e:d8:53:5c:c2:cc:b4:e2:db:2d:de:f4:8a:88:
3a:d7:e7:92:fa:c0:6e:25:03:ed:74:67:a4:5a:4a:
65:7d:ba:32:d2:46:26:69:22:c9:bc:d5:53:28:e0:
15:23:bf:43:8c:e6:59:29:05:97:c3:07:f8:27:79:
e6:5f:79:e4:4b:b1:29:c2:91:97:4d:53:6b:ed:07:
83:7d:58:b7:08:7c:ac:3b:0d:a1:bc:a5:92:71:ca:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154324
Signature Algorithm: sha256WithRSAEncryption
47:b6:ad:10:1f:6c:c0:d2:04:a6:80:cf:9d:b9:2e:c7:4e:24:
a4:8c:fc:68:80:10:ba:89:3f:53:c9:db:95:66:ee:a0:11:99:
8e:85:33:f1:1d:06:6d:c5:b2:d3:05:f4:05:e5:83:8f:a6:9a:
d2:9c:1e:df:87:88:f8:5f:cb:f3:6c:62:6f:55:95:b0:79:2e:
cd:82:85:73:e0:d8:f6:de:47:2a:11:aa:aa:8b:c0:05:ed:43:
d1:9a:d6:da:d5:8a:bc:a8:26:ad:75:5a:f3:0f:ec:78:eb:06:
95:35:66:2d:24:e3:b6:8f:6b:53:71:42:82:ff:6c:d7:62:34:
03:61:86:f2:98:a6:17:d3:51:ad:77:a1:be:cf:c0:af:11:a4:
9a:44:3d:ed:40:3a:70:67:f3:d3:1d:ca:cd:b4:95:90:2d:ca:
66:2d:32:4f:23:5d:c7:aa:6f:28:3a:57:12:79:c0:01:ef:24:
6a:ab:f0:4e:02:65:43:71:06:5a:92:4b:e8:67:1f:4e:25:49:
16:94:c5:85:f2:5d:c9:9e:e0:5d:4e:7a:c3:a2:59:fa:42:62:
43:96:5d:2a:3d:9a:79:2f:2f:95:8c:39:a6:b3:8f:08:7e:ae:
7f:3c:fa:7f:dd:48:ff:2c:7d:62:82:64:52:1b:32:26:0b:16:
c9:a3:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:45 2025 by rpki-client