Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
File: It6TcViumN6iIR-bvJp10O0NRDY.cer (raw, json)
Hash identifier: DjZzs6qqFGOi54YRYT9XOWOY05VYvuiyiNmHdqQDY64=
Subject key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026787
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Sep 2025 06:13:33 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 153304
IP: 2001:df4:31c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 09:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157575 (0x26787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 25 06:13:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:24:fb:d6:bc:95:cc:c0:16:1a:30:0a:70:
8e:93:9c:c1:7b:9d:be:74:32:83:ff:ea:6d:0e:be:
84:c0:e6:11:ff:56:a2:62:a2:d8:f2:04:27:14:17:
c8:3d:68:3d:9d:8c:53:86:f9:6d:1c:ff:e9:81:a1:
94:2f:93:71:11:74:72:ba:53:d1:a3:76:89:b1:79:
79:dd:3e:5d:30:b7:7f:fd:9d:31:04:03:08:76:68:
3b:af:a1:29:26:4c:bc:ba:fa:f6:29:d5:62:41:c5:
f7:79:6f:ab:66:3b:99:7f:39:57:c5:1d:e0:81:37:
49:39:8f:b9:c6:bf:3f:84:19:4a:a3:67:f0:48:f8:
f4:d2:6c:38:87:09:75:b3:36:b3:08:af:28:e8:84:
17:e9:e2:99:a2:59:96:ff:dd:02:8c:ad:8c:87:1c:
c2:6a:d9:e2:1d:47:23:42:69:3c:fb:5a:9b:2a:1d:
08:a1:80:2f:48:35:f1:2a:28:26:18:ff:58:40:ff:
0b:d3:60:d1:44:60:04:08:ba:b8:a8:81:5b:56:c4:
e7:fc:56:46:fa:b5:0a:84:d0:3f:d0:2e:64:8f:9c:
b0:ef:e6:54:e8:93:45:6c:76:8b:83:55:e1:18:08:
31:86:ef:02:22:60:42:87:0f:ca:1b:79:77:3d:44:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153304
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:31c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:89:f8:32:c6:e5:93:80:83:c9:af:a6:0a:45:e2:16:39:83:
a0:fa:8b:cb:55:19:cc:fd:60:02:ab:45:5d:40:e5:8b:53:78:
be:b4:4f:45:53:0a:af:4a:6b:a6:0d:40:e9:8e:f0:02:d8:21:
5a:fb:98:06:bb:4e:7b:b8:9b:ac:1a:55:d5:db:b0:c0:ef:d4:
e8:33:b9:cd:5d:ff:58:4d:82:7f:7c:39:9b:32:be:d5:4a:07:
ac:72:3f:57:ab:13:d0:0d:84:70:ca:8b:10:22:76:53:17:b5:
ee:5b:25:cb:b4:3f:bd:d6:48:72:c0:69:02:49:fa:37:80:1f:
ea:5b:98:63:97:03:c2:03:84:15:87:24:da:87:26:dc:36:50:
21:44:9a:2a:2b:c1:30:0d:cd:88:49:74:fa:e0:a7:7c:a5:a9:
3c:9d:e3:48:da:51:72:01:11:cb:8a:76:98:cf:ae:8b:1b:1b:
86:c8:a7:0b:4e:bd:13:5d:b5:72:23:6f:e8:38:ed:a0:d4:14:
74:ba:3c:50:be:1a:d8:4b:b7:9b:56:25:21:8d:87:8f:83:a2:
59:c3:1f:a7:ea:05:40:d9:bc:3e:38:b4:51:30:9f:ac:2d:8f:
93:e8:8a:7b:ac:ab:dc:c9:ec:a1:d1:54:b9:37:7d:69:1f:65:
4c:73:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:43 2025 by rpki-client