Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer
File: PeqLG7hy3RJspkfMN1wgdgJAw4U.cer (raw, json)
Hash identifier: oWUhhuvYdqiLcxbbfSsJGZ+SYZa+aA1ld7znVbXYIBc=
Subject key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026A02
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Oct 2025 06:34:28 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 149506
IP: 2001:df4:4ac0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 01:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158210 (0x26a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 3 06:34:28 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:41:fe:8c:e0:df:bb:01:36:13:1f:a4:bf:
41:2d:ce:03:59:b1:57:35:d4:ed:ab:a7:01:16:28:
76:45:bb:43:a5:4b:b1:af:57:76:a4:8b:f7:fc:49:
fc:bd:93:1c:b4:62:62:53:6c:46:ab:1e:b9:f0:7e:
a6:63:e3:df:1b:cc:0b:0c:56:84:8c:0e:bd:d1:91:
83:68:69:19:15:7f:7d:d0:65:26:2a:62:da:70:69:
e2:d8:1e:1c:2d:15:5d:a2:00:c8:4a:b3:fb:bf:c4:
c1:31:f6:c8:9f:75:68:e2:2e:cc:74:2c:41:56:40:
f7:be:da:25:be:75:b5:36:f4:4e:a7:69:07:c7:7b:
57:50:42:05:df:56:b4:ad:bc:f2:59:13:46:16:e8:
05:b3:fb:7f:bd:ae:79:34:b9:fc:73:08:e9:70:20:
68:c5:64:03:d4:e3:30:8f:b9:d4:15:47:b8:05:c9:
84:b6:25:f1:cb:9f:fd:7f:5b:86:a8:2a:05:51:3f:
a8:80:9a:07:75:47:98:16:9d:f5:41:e4:ee:79:58:
4d:c3:26:5a:eb:5d:30:ef:34:cd:d3:28:67:e8:6e:
e2:09:1d:e2:92:2e:57:20:02:0a:45:ae:a6:ee:6b:
70:a7:6e:2c:e4:2c:8b:bd:4a:90:4f:c7:cc:35:fb:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149506
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:4ac0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:ce:f4:e9:75:1d:41:3a:9c:e5:9d:70:75:12:53:2b:39:a6:
d2:d6:11:85:26:f7:3b:b8:70:9c:77:ce:9e:f3:26:1f:07:a0:
09:df:54:79:3c:1d:5a:fd:95:6b:4b:36:25:00:09:f0:52:4b:
b0:9b:db:89:88:02:5f:0e:3d:43:32:eb:65:4a:b8:f1:84:a3:
80:f0:01:2a:48:46:f2:b6:b1:22:7e:ae:91:44:f4:99:b5:6c:
90:47:29:58:4b:4c:96:1d:ff:2e:d5:55:2c:5a:1f:8b:a3:b2:
57:0d:38:66:de:d9:ca:ba:d5:d5:ff:f2:00:fe:1a:e0:34:3c:
e7:16:eb:d5:a2:e8:9c:81:06:ef:f5:8e:b5:44:a7:dc:06:71:
ad:a5:67:22:cd:ca:5a:d7:93:37:a5:e1:9c:d0:7b:4c:a0:bb:
be:de:17:89:a4:9c:fa:f2:85:52:68:0e:c3:86:a7:ee:53:83:
d4:58:d7:40:82:09:45:1d:9f:bf:a7:92:2d:9b:99:58:42:b3:
eb:b0:52:49:04:b1:9a:be:75:2f:67:92:ee:00:26:e8:b8:c1:
6e:8b:af:70:27:4e:09:25:cf:38:76:d1:d8:e0:e2:8e:13:55:
b6:d9:5d:fd:83:bf:69:92:e8:83:2d:46:a8:fe:65:ea:d4:34:
c6:c7:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:03 2025 by rpki-client