Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
File: WatjEmbskGVhP9Z3y9tP8TvvZEE.cer (raw, json)
Hash identifier: LCN2qvT7JcwlAIbxvjwIK2w3bFXHbH8XupqmGV+zFto=
Subject key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026A32
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Oct 2025 19:42:36 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 23765 -- 23766
AS: 132802
AS: 133902
AS: 135424
AS: 149302
AS: 151975
AS: 151980
IP: 2407:5880::/29
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158258 (0x26a32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 3 19:42:36 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:bb:f3:e4:1d:0a:b7:80:78:01:1e:fc:fc:
89:5d:07:4b:c9:e8:57:04:e7:5e:f9:4f:83:49:90:
84:00:af:7f:63:b2:dc:c1:ef:81:4d:58:a1:9d:35:
40:62:23:47:e5:cb:d7:f1:04:4d:ed:af:00:7e:f5:
e0:88:c4:09:62:20:f7:d5:ad:f5:3e:ff:9b:9a:b6:
63:92:4c:d5:a3:6f:f3:19:20:15:17:92:00:48:16:
9c:d7:4b:e5:b2:00:85:70:a8:5b:9b:45:eb:de:11:
be:c8:c6:cc:0f:c8:ec:07:37:9c:26:f9:e1:dd:f4:
7d:83:71:12:8f:12:e1:c0:3c:47:13:34:e2:1f:56:
b2:fa:de:01:f1:21:1a:31:de:44:d8:4b:ee:d8:e0:
5a:c6:87:8d:1e:ab:3f:d4:b5:d3:95:5c:2b:92:88:
36:80:01:44:bb:7d:66:47:e6:c2:9d:f8:5c:3d:61:
98:ff:9e:dc:ab:89:62:fc:fa:a6:68:e2:93:ca:6c:
07:2e:59:36:1d:b0:3a:3b:4c:b2:84:2c:b6:5a:fc:
18:f3:65:36:97:19:b0:1a:66:1d:08:2a:c4:b7:09:
96:94:da:62:8d:ff:75:df:41:1d:6a:b5:17:c2:8c:
a5:7c:62:8b:d8:23:40:ee:81:b6:f9:e0:18:b6:ba:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23765-23766
132802
133902
135424
149302
151975
151980
sbgp-ipAddrBlock: critical
IPv6:
2407:5880::/29
Signature Algorithm: sha256WithRSAEncryption
91:91:56:82:be:02:0f:e3:e6:46:75:5a:fa:bb:78:68:80:e8:
ef:49:d6:34:54:e5:31:14:3a:b2:ef:b9:8c:c5:d6:23:ec:20:
72:41:c4:b4:78:a7:cd:d0:a4:35:3a:c2:a6:22:2c:b3:d1:c6:
53:22:c6:28:d3:50:83:ab:96:e7:b7:d7:b7:d4:69:91:bb:f7:
7a:28:6a:e5:cf:70:79:35:09:0a:9c:fa:63:20:5f:43:bc:93:
c7:78:11:8b:fd:de:7c:00:6f:69:eb:e3:15:d1:2f:7d:61:10:
10:f9:42:ad:43:80:ca:fd:aa:1d:9a:dc:50:f5:67:d9:63:d4:
57:13:f4:2d:c8:2d:1e:54:a5:86:e5:dc:02:ff:de:ca:f5:95:
e2:ef:5d:e9:6d:45:f5:72:f9:81:be:d4:60:47:e5:6e:0b:ff:
50:82:da:ca:e9:d6:16:ff:28:cb:8e:59:a7:e6:64:fa:dd:ff:
25:e7:f6:c0:a0:e2:80:05:d0:2c:f8:c3:cd:d8:21:0a:36:4e:
e9:a1:23:06:8f:52:2b:59:34:b2:d0:b6:92:f4:97:f5:4f:90:
2c:0d:ff:eb:b4:1d:df:d5:e9:95:7a:d3:20:18:87:a7:72:3a:
91:38:84:d1:5b:96:fa:7a:11:12:8a:c9:3c:c6:95:85:a0:62:
b2:c5:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:49 2025 by rpki-client