Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
File: bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer (raw, json)
Hash identifier: CG8NNPV2hKSQKEI0RYF6S95scmLbDaoVayCQjNvrSXc=
Subject key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0250C6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Jun 2025 10:24:47 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 153989
IP: 2001:df5:c640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 19:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151750 (0x250c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 27 10:24:47 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:34:b8:c4:7e:15:5a:fd:0b:ad:10:14:74:
41:6b:6d:03:11:5d:e9:cb:55:02:50:d7:90:61:51:
f9:4a:54:a7:47:15:c9:5f:f5:be:3b:f2:c1:74:17:
27:d7:e4:7b:2c:e0:02:49:98:91:d9:68:21:df:48:
4b:9a:91:db:73:c0:1a:57:09:cd:bd:18:5e:59:ee:
79:3a:b8:d0:92:f2:4c:77:fa:9a:40:7a:64:57:51:
a4:a2:8a:47:90:cf:d4:b4:94:50:09:d1:a7:57:e9:
8c:7c:0a:b7:81:d1:dc:3a:99:c3:d2:90:d6:90:52:
f6:56:9a:aa:b6:e3:1c:33:d3:26:16:73:1b:23:7b:
55:32:6b:ef:2d:61:1b:53:2f:a4:9c:f3:bd:11:30:
c3:98:43:6e:83:55:60:01:92:56:ce:8b:08:04:84:
01:51:ee:0d:c6:c9:1b:b0:3b:bc:96:b8:07:dd:23:
5b:3a:ab:5a:70:41:c5:30:98:aa:89:9b:0e:20:43:
cd:af:d9:67:11:8c:db:7e:e9:5a:1f:77:5e:cd:5b:
d0:ef:51:56:82:a2:11:4b:9a:27:01:77:8d:cf:ec:
74:4a:e1:65:79:bc:2e:2b:61:c8:25:9a:2c:75:5d:
5f:1c:bf:92:21:7c:47:22:ce:4c:ce:05:01:35:99:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153989
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:c640::/48
Signature Algorithm: sha256WithRSAEncryption
3d:b8:31:db:6e:08:5c:a4:24:84:52:81:c2:7f:1b:c7:80:3a:
1e:50:f5:73:de:2d:2d:67:d5:84:4a:e0:13:97:d3:1d:46:ce:
e8:92:9b:81:73:60:0a:44:50:27:1d:cd:d9:f7:a9:3e:b9:95:
48:83:f4:4c:aa:84:ca:86:9d:e7:75:3a:f0:a4:85:8e:90:22:
2b:ac:d2:1f:42:e8:97:2b:d8:59:3f:de:cc:15:bc:8e:7a:33:
a1:ec:15:d5:23:9f:3e:43:26:ef:f1:53:f4:f5:76:34:41:b7:
ac:db:ef:e3:dc:82:a4:37:3e:a6:67:76:76:3d:37:e3:04:76:
d4:54:eb:f7:67:3e:d7:c3:a8:31:fc:f5:1f:db:86:9f:4a:35:
fa:4d:40:de:27:b4:79:c9:86:74:92:cc:e5:1c:66:3c:58:18:
9d:82:27:81:7a:0d:e4:ce:75:28:9e:1f:3e:0a:8e:c8:1d:d3:
24:07:8b:80:c4:85:3c:05:da:85:dd:9c:da:71:b6:1e:bf:ea:
d8:49:a2:7a:5a:86:50:d1:c1:4b:f0:19:4b:4c:ca:c6:94:d5:
bb:fa:ae:71:28:34:5d:a2:1a:9d:ba:d6:a3:a7:b8:05:2a:62:
7b:b4:7e:db:79:10:fe:c7:b8:56:34:b9:04:2d:bf:c6:af:bd:
c1:d1:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:45:18 2025 by rpki-client