Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
File: GHkad7eTMW9ffev2Atp8TmnIvGs.cer (raw, json)
Hash identifier: LBhBTjo6N/BJeq6aZR8hF3Ls/QSiqQ0ROEtsvCklG9c=
Subject key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026822
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Sep 2025 05:56:29 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 154022
IP: 2402:14a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157730 (0x26822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 29 05:56:29 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:dd:de:44:74:48:96:c2:37:42:52:ab:ba:
ae:9e:ec:96:36:7c:13:29:b9:eb:46:1c:93:70:87:
9e:7a:b2:3f:b8:44:e0:b8:3f:8d:d7:3b:0f:36:38:
09:8c:8f:71:4d:45:66:6f:0d:73:fe:ba:f7:d0:ba:
dc:5d:92:49:88:ed:9c:8e:3a:dc:b1:a3:be:dc:a6:
be:7b:06:8d:3c:4a:fb:6f:71:1d:aa:d3:38:62:0b:
e4:91:3d:58:c9:38:0e:37:a2:42:82:d7:0f:80:80:
d7:81:36:3a:58:ed:53:49:7a:32:cb:2d:d7:0c:2c:
fd:81:bd:b2:b9:83:f5:b9:52:c7:07:f4:af:62:83:
28:0b:2b:5f:5c:92:6d:44:dc:6d:d2:be:e4:56:b6:
52:9b:12:50:db:c8:46:68:57:4d:e6:78:54:66:df:
c7:56:d7:1e:70:d7:0f:53:5d:5e:f2:f2:bb:6e:a6:
ca:4b:ea:b1:4f:95:93:6d:0b:65:8f:a4:5e:1a:00:
a8:2d:37:bc:a6:2c:44:ac:bb:0e:9d:38:59:e2:d9:
05:c4:45:75:06:86:91:6b:98:f6:1f:ce:46:09:7c:
b5:fa:fc:d6:ff:3a:10:58:a9:2a:16:31:3e:96:dd:
e6:04:a4:66:28:d6:6f:00:57:96:5f:08:34:84:d1:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154022
sbgp-ipAddrBlock: critical
IPv6:
2402:14a0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:17:88:c4:3a:6c:bc:6d:3b:c7:77:84:8e:65:ba:3d:63:f0:
5f:d3:0a:4e:7f:e9:1e:58:35:e9:69:46:fb:f3:e3:c6:b5:2e:
dc:94:fb:ef:48:bd:1d:71:d1:bf:d4:44:e0:02:93:a3:8e:32:
08:3d:57:d9:74:23:15:62:c9:2d:fc:48:9f:d7:6e:09:65:78:
fe:c2:1f:28:50:c1:8a:af:92:e3:1c:db:53:8b:de:01:12:47:
4f:d6:a1:71:09:14:5b:1d:10:d7:0c:9d:8c:06:ed:7c:0d:73:
8b:c1:fe:a6:2c:15:26:07:a7:01:2b:9b:98:ec:47:95:49:14:
19:b1:0b:54:ec:75:4e:37:ad:c5:1e:aa:36:27:4e:8b:1c:0f:
6c:f2:18:6f:93:5a:1a:26:33:c5:56:4d:75:c6:a1:26:e7:da:
8f:74:56:55:e1:a1:c4:eb:fe:7a:33:d3:c7:8b:db:a0:04:c5:
99:12:b7:09:6d:d0:b2:35:01:4d:25:42:65:43:19:85:db:e9:
c4:5e:69:df:f0:27:47:72:d5:61:61:6f:87:e9:2e:b1:1e:ce:
6a:e3:45:f9:a3:13:6c:bc:bc:af:f4:48:31:7d:ef:5c:8c:c2:
46:f4:48:28:12:25:65:fe:ed:6b:aa:97:fb:67:3a:9d:7f:73:
bf:82:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:55 2025 by rpki-client