Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
File: 5NzsWVobtnOJciNlasY5uVNS3XM.cer (raw, json)
Hash identifier: V+zoOB+5YmGBWnZhOXmGMS9rFr7awOqcG/Lu7kbwMjE=
Subject key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025F38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 24 Aug 2025 17:29:41 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 135517
AS: 149297
IP: 2400:f8c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155448 (0x25f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 24 17:29:41 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:b1:bf:ed:2a:ba:69:5f:c5:ec:2b:57:87:
18:f6:06:6f:84:0a:8e:c5:16:95:47:27:85:26:a4:
2c:12:f3:5b:48:9d:f3:a5:ee:29:2a:82:de:c1:0a:
42:0b:78:63:a5:92:f1:83:cf:37:ed:76:c1:b3:19:
c7:9a:3b:0b:47:88:a2:6c:99:fa:a5:ee:31:81:fd:
d9:06:d6:8b:e6:3b:13:fa:4c:96:78:97:5c:9c:07:
c4:70:83:15:ea:6e:7d:77:03:0d:c1:bd:54:a2:7f:
a9:19:50:6b:7d:e2:b9:2f:dd:dc:31:fc:15:81:a6:
e4:bb:37:5e:d1:8a:e8:86:b4:ab:13:01:c0:d5:80:
b9:39:fb:3b:58:ba:20:1a:d1:cf:8f:3a:10:59:18:
11:6b:f5:c5:ba:96:a6:16:61:4f:44:6e:c2:03:cf:
71:ea:6e:f4:52:ff:e1:d3:04:48:b2:2e:c6:6c:93:
80:8a:70:70:11:e6:9b:f7:d7:04:73:ff:2c:5f:27:
23:de:b1:3f:cc:3d:81:48:8c:33:91:42:76:29:17:
38:55:20:2a:7b:4c:bb:19:1e:21:ed:fc:19:e5:78:
9b:11:f1:c2:1b:a2:50:cd:13:76:88:75:cf:9a:32:
a8:d0:65:16:2a:94:6f:d5:78:97:93:1b:fc:d7:9f:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135517
149297
sbgp-ipAddrBlock: critical
IPv6:
2400:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:4f:71:12:7b:04:87:ef:e0:de:f5:0c:56:d4:05:e1:1c:62:
88:36:7c:04:63:86:36:86:6b:14:b4:19:bb:62:f4:96:54:79:
b2:cd:75:6b:8b:eb:eb:30:9e:d6:00:e9:c7:0c:88:81:d1:70:
ca:1b:59:33:a5:d4:92:ad:f1:2a:b8:28:de:d1:f1:c4:91:6b:
fc:e4:97:4d:43:f9:b5:6e:be:30:ec:74:12:88:ce:04:9d:6b:
77:66:c0:55:f2:58:05:e0:f8:1a:95:01:97:88:89:64:0d:ae:
f9:5b:ba:76:12:2c:8c:43:aa:b5:69:69:41:a2:67:97:5d:a7:
e8:8e:7f:ef:45:1f:06:95:f9:e1:cf:f0:2c:ae:ed:83:a5:42:
5d:f0:b9:51:44:78:41:7a:e1:63:9c:45:b1:53:4b:5e:1e:25:
1e:f9:96:a9:ba:91:b9:01:6f:57:c1:e0:f2:b3:42:39:25:ed:
d1:44:c7:81:ce:c3:f0:e2:cd:0b:1d:f2:bd:98:5f:7d:77:29:
40:7f:17:29:54:3b:7e:c7:52:22:a5:c0:84:ed:3e:78:87:13:
dd:d6:eb:55:e9:e9:82:be:ff:65:19:e2:b6:67:41:68:31:e8:
16:3e:d6:0e:65:f0:d1:1d:59:88:e7:73:17:28:fe:58:c1:06:
21:71:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:21 2025 by rpki-client