Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
File: F6o5LAz_dU9iSQBtiThvhxuWk_o.cer (raw, json)
Hash identifier: mArh/4hZI2ftj4L0Gi4kt6bPrEiehdqOPHyl7FGs/2A=
Subject key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025E7B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Wed 20 Aug 2025 03:22:22 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 153346
IP: 2001:df4:5140::/44
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 08:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155259 (0x25e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 20 03:22:22 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:f5:52:22:49:0d:73:3b:4c:cd:59:e0:7a:
e7:f5:52:02:b9:dd:39:19:83:cd:0c:66:1c:ec:fb:
82:17:0f:8c:2e:16:0e:fb:6c:6b:83:89:ab:5c:f6:
38:5a:2d:31:c8:a7:a6:60:8f:b9:49:74:64:b5:24:
5a:b7:0e:1a:13:50:71:09:e3:61:48:df:1c:ff:29:
41:13:e1:cd:1c:55:b5:f9:9d:d8:90:fc:24:03:1d:
2c:1a:0b:73:ec:30:5c:af:2f:18:19:a0:ea:3b:a7:
20:c8:28:16:89:6b:26:f5:56:a9:49:05:64:c3:d7:
30:e0:68:c1:3b:d4:f3:b8:88:04:36:72:c6:19:46:
07:8a:3c:ef:be:71:20:d8:ff:f5:f3:9f:1b:f9:ab:
02:cb:2b:b4:8e:cc:c0:a7:16:57:39:9d:4f:e4:ae:
40:41:48:56:74:ce:e0:e5:11:c7:a4:04:5c:53:fe:
bc:a7:92:e7:75:f1:2e:ed:d3:f6:40:d3:35:f6:bb:
00:e9:f4:df:e1:2b:19:09:81:d7:99:b1:57:e5:99:
40:5d:8f:0d:b8:ca:1f:56:0c:f5:a5:43:d3:ef:a8:
27:50:bb:ed:3c:a4:b6:ac:41:97:13:ed:be:ae:73:
c3:5d:8a:18:37:25:3a:b3:12:be:0f:ac:18:77:58:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153346
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:5140::/44
Signature Algorithm: sha256WithRSAEncryption
99:54:69:9a:4c:bc:d1:44:d2:3b:d0:43:22:c0:9a:bc:c9:b1:
9d:e3:69:58:7f:65:a2:20:09:f5:0a:85:62:66:f0:39:38:e9:
64:20:96:7c:07:b8:c4:29:84:a2:2f:8f:7b:24:91:7d:f8:7d:
c9:ce:08:ce:31:8f:19:de:d5:c0:43:4f:99:10:3c:06:f4:7c:
7b:4a:4a:9e:ad:b4:9b:2b:5a:bb:1f:35:26:a2:8c:80:ab:50:
38:ac:3b:2a:37:e8:d3:82:25:6f:b9:0b:8d:a0:fe:b0:a1:7a:
3d:75:2d:58:28:81:6f:d2:a3:f8:04:4b:bd:27:c6:5a:e4:4d:
28:a3:61:c4:d1:8f:79:04:ee:5b:71:4b:4e:56:0d:8f:91:e7:
fb:d8:c5:83:66:7e:de:a4:e7:c8:92:a5:ba:3a:3c:6f:e7:5a:
a5:d6:48:49:06:89:5a:38:da:85:e0:c4:b0:c5:b9:d0:56:42:
f5:e6:44:41:30:f3:e7:61:e5:0e:fb:a2:71:4e:a8:e9:ca:1f:
ea:f7:02:e4:f4:8a:1d:4a:38:83:3e:c5:49:a3:95:25:b5:f7:
cd:93:5d:34:f1:18:d5:fc:2f:fa:ba:4d:6f:ff:a6:b6:89:c9:
9a:79:62:31:33:ef:3e:87:df:9a:9c:f2:97:21:33:ad:1b:74:
6b:ad:01:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:46 2025 by rpki-client