Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
File: uesVSGZ3c32yc5_WVGKu55BhaMI.cer (raw, json)
Hash identifier: jjcrslZsBZPPAnjMmVvxxKS1k9raHceO2108uhFxBBk=
Subject key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025D6E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Aug 2025 18:53:55 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 45276
IP: 115.69.208.0/21
IP: 2400:1020::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154990 (0x25d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 14 18:53:55 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:fd:93:96:83:eb:a7:aa:66:6e:ef:0e:f3:
2d:bf:4d:9e:2b:ad:7e:e7:c0:e2:23:1e:ba:7a:04:
a3:7f:4c:fa:70:9a:d1:9e:21:d8:de:13:90:b3:25:
4f:f3:87:45:91:5f:eb:3f:a0:80:b3:1d:b1:3e:03:
37:7a:0a:ca:73:01:bb:ee:22:b1:5c:64:35:fa:f9:
6c:3e:6d:cf:d2:93:02:bf:b7:c3:3d:96:f4:c6:b6:
6a:aa:c5:ac:68:83:6a:ba:8f:a3:b5:8e:9d:6c:0e:
00:0e:2e:77:cf:c8:f3:01:39:0a:2e:cb:0f:05:74:
3a:44:28:8e:2c:55:ed:9c:db:e3:07:ee:7d:0b:18:
1f:ac:30:e4:7d:82:37:1a:58:54:81:e6:a0:4c:ab:
1c:47:9b:1d:02:4c:d1:9f:72:42:9f:71:81:cb:e9:
5a:d2:80:cf:d0:74:f1:80:b7:89:55:a8:ae:b9:7c:
35:f1:0f:e6:63:fc:4c:ed:f1:dc:e2:40:d4:9c:a5:
25:f8:cd:7b:84:6a:b0:27:71:aa:c2:64:b0:06:54:
ca:dc:ac:d4:ef:10:a7:7e:ed:3e:cb:a9:7c:f4:99:
fe:2d:5a:72:e0:59:6a:04:30:77:74:3f:cf:e9:f7:
aa:1d:76:c0:7a:40:ba:21:99:2c:33:53:f4:93:c9:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45276
sbgp-ipAddrBlock: critical
IPv4:
115.69.208.0/21
IPv6:
2400:1020::/32
Signature Algorithm: sha256WithRSAEncryption
23:ba:da:a0:39:ed:84:3a:bb:f1:fb:a2:1d:6f:ba:ab:4b:f8:
2e:36:7e:51:8a:64:09:ca:2a:6b:50:65:a1:80:1d:3e:4a:1e:
2e:9c:3b:d6:36:77:e8:69:2a:76:5f:f6:1b:be:02:e7:ac:50:
35:76:04:d1:c5:e1:33:a7:89:5d:a4:75:ed:84:57:6c:2a:8d:
f6:c0:5d:60:e3:1a:8e:21:fc:89:33:0b:f9:67:9f:1f:a8:70:
ce:68:76:ef:59:5e:f0:6d:60:b7:87:18:31:2c:93:f0:6c:38:
a9:6a:8d:07:3c:e7:6f:ec:78:e1:59:14:0f:6d:11:ea:f5:5a:
f5:ea:27:0c:41:c9:5d:55:e0:f3:b0:e2:7d:32:3a:ef:13:db:
9e:3e:c7:56:9f:15:f5:8e:aa:a1:00:c8:9c:ef:6b:c0:71:f8:
27:51:51:26:57:e6:36:53:eb:ca:cf:2f:64:82:a3:70:35:25:
39:45:0e:7a:42:c3:69:7b:63:cc:2c:a3:c2:90:d9:60:e0:04:
72:59:76:5f:a0:38:52:3b:f7:e1:92:86:d8:d8:47:e8:d8:14:
b9:67:28:5a:02:80:66:02:13:89:98:a8:36:a9:a6:79:bc:90:
3d:fc:d2:48:69:98:c7:3d:03:bf:8a:35:90:c1:02:02:72:13:
f1:5a:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:23:21 2025 by rpki-client