Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer
File: 8O-KITM_UQdy8x7aMkGe3iQXrTk.cer (raw, json)
Hash identifier: HR1WlHILNUi5avVgNq6M1gaIPU9l8d0qKypo8Tw4dOc=
Subject key identifier: F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C01D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Jun 2026 03:24:54 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 152589
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180253 (0x2c01d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 29 03:24:54 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91F352B, serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:f3:49:27:da:2d:02:e7:01:23:c3:dc:27:
cf:ea:1c:a0:01:63:6e:cd:69:ff:70:e6:a6:a5:bf:
9c:0a:4f:23:de:08:48:1e:2b:4f:b9:5e:f4:53:e6:
e5:56:6c:e1:4d:8c:b8:dc:7c:bf:bd:21:91:51:6a:
7c:64:0c:63:e2:6d:12:3c:58:d1:07:a1:bc:ac:8d:
88:f0:c3:ca:7f:73:08:64:39:94:39:56:56:63:14:
c1:6e:53:bb:e6:16:e0:fd:e1:59:45:76:0f:61:ee:
0d:1d:eb:de:82:76:fa:af:98:57:c2:15:1e:f2:4a:
28:fb:9d:69:6e:93:c6:33:fc:3e:3d:c9:c5:ac:4a:
62:1a:79:03:43:45:e2:3b:bf:e7:54:15:cc:5b:1c:
ee:5f:1b:2a:cc:c1:b8:fd:38:90:48:3a:7a:3f:c6:
7c:03:99:c1:17:db:4e:52:ee:23:b9:78:74:eb:15:
4e:ad:82:3e:6d:ef:23:0c:ac:36:66:35:5e:cc:7d:
56:20:4c:10:f1:4b:f3:f4:63:0d:08:6a:3c:aa:2f:
c9:46:d0:26:3e:78:31:4a:f3:75:98:f1:96:a8:b1:
c3:07:b0:26:90:86:e9:b1:2c:7c:06:0f:70:e9:02:
11:7a:b2:5c:da:64:f4:d2:a8:a5:a3:e0:1f:30:31:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152589
Signature Algorithm: sha256WithRSAEncryption
08:c7:18:1a:a6:98:f4:af:f5:04:7f:18:a5:21:08:19:75:e1:
5e:73:59:17:b6:6e:84:a9:87:13:b1:c4:46:5b:fd:e2:95:c1:
02:43:80:60:db:0a:92:c5:5b:75:a3:72:42:24:84:04:4c:9f:
e5:9e:d3:27:ed:ab:89:f6:a0:99:6e:c4:c6:6a:f6:3f:56:11:
4e:e6:33:1b:2e:60:a3:49:b6:97:e6:05:42:d8:1c:54:9a:ca:
8b:01:b3:4c:96:ac:72:d7:7f:d3:e2:34:17:cb:37:d9:b5:55:
dc:3b:16:7e:37:a0:40:06:4d:36:2d:f8:b2:18:c1:b5:47:0d:
ec:4e:41:4a:92:1e:56:10:27:88:f8:53:04:a8:2e:81:d0:b2:
78:47:25:a5:33:48:44:60:ab:b5:9f:5e:1a:94:7f:e6:30:9b:
39:f8:0e:bb:b8:8c:7e:c4:61:ec:0f:c4:cf:a4:50:4a:6f:4e:
e9:92:e3:65:98:4a:48:fc:10:d6:a8:6b:f3:84:36:8c:0e:40:
4a:be:75:bf:94:f7:75:22:ac:32:1c:b3:94:d1:6b:38:ad:64:
61:51:28:83:ed:44:a8:ab:5f:b5:1c:2c:b2:e3:b3:54:71:bb:
54:14:0a:49:68:cd:2c:08:3d:d2:10:c6:fe:ab:90:04:a2:57:
c7:e1:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:48 2026 by rpki-client