Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
File: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer (raw, json)
Hash identifier: TWKr9XySRf3s9W/WojpfEE8XOkH20uS/BHdmFCpc/Zk=
Subject key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026A70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 04 Oct 2025 19:59:46 +0000
Certificate not after: Fri 30 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 123.253.4.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 06:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158320 (0x26a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 4 19:59:46 2025 GMT
Not After : Jan 30 00:00:00 2026 GMT
Subject: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:71:75:2b:22:a6:bc:34:2a:1d:b4:fa:65:
fb:11:bf:ff:31:0e:16:9f:e6:e6:94:18:3f:e3:77:
98:dd:8c:34:aa:33:2b:4c:9b:53:56:ff:36:86:0c:
34:9f:2f:e2:8b:e6:b6:f1:55:99:d5:bd:65:30:f1:
13:cf:d7:d6:2f:e6:fc:8f:fb:4f:2b:5a:35:96:9d:
62:21:ed:59:dd:60:b4:d8:78:cf:9d:8f:66:6b:42:
46:77:1c:51:95:55:87:86:58:b0:2a:1f:a6:bf:db:
14:d3:9a:3c:61:c1:2c:dd:fe:75:1b:f3:c4:d3:61:
8a:57:e6:df:36:7f:69:76:cb:09:60:60:30:e3:14:
d6:e0:03:e6:59:65:57:ec:60:d6:a7:9c:4d:40:7a:
4c:21:b9:c0:42:c4:4d:83:df:c4:6f:66:a6:5f:12:
f6:e5:8d:56:1d:68:9b:2a:11:15:90:1f:7a:ad:85:
1b:93:4b:c5:92:3a:84:a3:eb:11:34:29:8a:03:b4:
63:56:3c:52:cf:81:8c:a5:81:ea:88:85:1e:e2:af:
ee:27:54:b4:a0:b0:2c:49:b9:2f:9f:4b:8d:b6:44:
57:1c:d3:3b:6d:4a:a3:89:33:0d:2c:ad:bc:ba:bc:
ba:13:8d:96:44:d1:5f:71:d0:39:42:44:55:ea:ee:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.253.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:74:14:12:51:d8:b6:66:d9:cf:02:b7:6d:a1:28:6c:7e:38:
96:6f:32:83:ba:47:ea:c0:b7:48:92:a0:fe:c0:ce:d8:ec:d0:
b1:27:d9:21:bb:44:73:48:e8:91:21:55:c7:15:03:6e:9d:05:
5d:55:f7:83:83:f1:2b:c2:a2:81:b0:45:ce:0e:cd:f6:bf:92:
f5:0e:28:2d:ae:c9:a9:43:3b:26:fd:d5:65:bf:bd:ca:b1:f5:
b0:8f:fe:37:d9:26:5b:1f:a2:ab:9e:40:28:68:cc:b7:62:79:
d9:43:99:96:fd:eb:22:79:c7:05:47:5a:96:71:35:bd:8a:18:
49:e2:95:da:04:ee:9e:e7:50:5d:a8:66:e7:91:95:31:40:af:
29:81:7c:94:65:cc:89:48:b7:de:11:13:16:4a:ca:dd:8a:b2:
f2:e5:15:a6:69:f1:3c:b0:3e:3c:ce:36:04:f4:6a:13:c4:d7:
6d:a7:6a:ec:d7:d8:07:9c:10:1b:15:74:75:7d:60:2d:5e:0c:
92:22:dd:09:4a:fc:84:f8:c7:a4:97:4e:fc:54:7a:73:28:cc:
70:83:65:2b:65:86:21:9e:ed:35:6f:9b:64:28:9c:f6:64:37:
0d:47:c8:b3:fa:62:c1:9f:3b:7b:08:29:7e:c2:69:13:b0:dc:
45:31:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:31 2025 by rpki-client