Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
File: Ex72LhIbEd5hBCw-Il5xa7lHniw.cer (raw, json)
Hash identifier: CxbZzxLgZ8c70rGmp77PyLz3DiC41gy05uJ8Gr0FQdA=
Subject key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025207
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Jul 2025 06:42:43 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 152909
IP: 2001:df3:ebc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 06:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152071 (0x25207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 06:42:43 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:5a:fa:f4:b3:bf:77:06:d9:98:d5:84:99:
95:9e:92:90:b2:78:21:cc:7c:e1:f8:73:08:0a:b7:
4e:b9:05:ca:b7:f1:bd:c9:ff:4c:f3:10:76:fa:3f:
c3:41:ba:c8:89:47:dc:91:d6:44:77:dc:27:48:a6:
0f:cd:9a:3d:df:62:b1:8b:79:e4:61:81:b6:45:1f:
86:11:14:4e:16:f1:89:63:84:3a:12:6b:73:96:91:
c3:6e:68:d1:6d:9d:bf:28:59:4a:ab:60:48:a8:f0:
ee:d0:be:ab:91:c2:24:41:24:80:27:99:43:5f:1f:
8c:f5:f8:0a:a0:e1:83:c7:1b:5b:2f:7e:c1:c3:f4:
78:fb:ae:27:e9:3c:b7:fb:bc:13:9c:a3:e5:08:2e:
9e:f8:99:61:89:8b:55:70:84:9b:ef:fe:10:b5:c1:
92:e3:3d:0f:ed:a8:12:17:24:8e:ad:cb:f4:bf:30:
9a:4b:41:27:bb:a7:df:2f:3e:28:5d:1b:38:82:5a:
2d:ff:45:85:d0:ce:4d:02:00:a2:0d:49:1d:7e:f9:
c0:88:dc:be:d0:70:0d:33:13:3a:8b:0a:4f:b2:68:
ab:9d:f6:03:09:a0:8d:55:90:72:9c:4a:32:e1:a1:
15:62:6b:fa:6b:a9:ec:c4:40:f4:94:f6:7d:44:51:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152909
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:ebc0::/48
Signature Algorithm: sha256WithRSAEncryption
92:a9:a6:9f:c5:13:73:8b:9e:ee:d1:38:87:c6:87:31:b6:b0:
6d:78:2d:ae:b3:54:e3:39:49:54:a7:fb:0c:95:f8:7a:00:13:
8c:5f:93:ea:93:f7:89:12:62:56:41:be:0f:10:8c:ae:74:b5:
75:ee:1f:3f:fe:74:81:87:1d:df:c7:92:d3:ec:9d:18:b1:8b:
f5:f1:3f:3a:cb:46:f9:ca:eb:70:e5:84:0f:41:26:4b:17:8e:
4c:fd:23:ea:95:34:5c:a2:02:35:c7:89:46:3b:c5:0b:b4:ce:
c9:03:fe:b7:86:84:ba:9e:a7:5b:43:c1:38:2e:28:d5:93:73:
af:32:19:ce:44:1f:1e:b0:e0:1a:e9:65:20:32:bd:29:9e:03:
95:20:0f:5b:8b:1b:bc:a8:3f:ca:41:92:2b:69:de:56:8f:9c:
96:94:97:f3:e2:8b:b6:0c:c3:68:67:14:51:8f:f9:cd:ca:48:
9b:52:47:4e:66:40:6c:14:44:05:82:07:47:de:2b:39:4f:4c:
72:d8:03:9b:89:4e:23:60:c2:a4:ed:77:2d:f1:a8:96:f1:f0:
6b:99:05:5c:c9:e0:2c:63:12:b6:27:f3:bc:18:87:cf:fb:88:
68:8d:36:88:3f:cd:a4:01:dc:13:7e:c7:1c:2d:26:72:cd:9d:
a5:ca:ce:00
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAlIHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcwMTA2NDI0M1oXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMz
RTIyNUU3MTZCQjk0NzlFMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzpFr69LO/dwbZmNWEmZWekpCyeCHMfOH4cwgKt065Bcq38b3J/0zzEHb6P8NB
usiJR9yR1kR33CdIpg/Nmj3fYrGLeeRhgbZFH4YRFE4W8YljhDoSa3OWkcNuaNFt
nb8oWUqrYEio8O7QvquRwiRBJIAnmUNfH4z1+Aqg4YPHG1svfsHD9Hj7rifpPLf7
vBOco+UILp74mWGJi1VwhJvv/hC1wZLjPQ/tqBIXJI6ty/S/MJpLQSe7p98vPihd
GziCWi3/RYXQzk0CAKINSR1++cCI3L7QcA0zEzqLCk+yaKud9gMJoI1VkHKcSjLh
oRVia/prqezEQPSU9n1EUUjJAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUEx72LhIb
Ed5hBCw+Il5xa7lHniwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNEM0NFLzFDMTM3QzIwNDk1RTExRUZCRThGMjA3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJ
YkVkNWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlVNMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8+vAMA0G
CSqGSIb3DQEBCwUAA4IBAQCSqaafxRNzi57u0TiHxocxtrBteC2us1TjOUlUp/sM
lfh6ABOMX5Pqk/eJEmJWQb4PEIyudLV17h8//nSBhx3fx5LT7J0YsYv18T86y0b5
yutw5YQPQSZLF45M/SPqlTRcogI1x4lGO8ULtM7JA/63hoS6nqdbQ8E4LijVk3Ov
MhnORB8esOAa6WUgMr0pngOVIA9bixu8qD/KQZIrad5Wj5yWlJfz4ou2DMNoZxRR
j/nNykibUkdOZkBsFEQFggdH3is5T0xy2AObiU4jYMKk7Xct8aiW8fBrmQVcyeAs
YxK2J/O8GIfP+4hojTaIP82kAdwTfsccLSZyzZ2lys4A
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:11:25 2025 by rpki-client