Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
File: cV0939fSp5kTexOT1KjPorHU02Q.cer (raw, json)
Hash identifier: ZMk2H9VHrBwiP2DoWWCcP/y32+s/KtPzyFyNpVpg2Uw=
Subject key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0268B2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Sep 2025 19:53:01 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 140244
IP: 2001:df4:3540::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157874 (0x268b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 19:53:01 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:b9:b0:60:12:61:e3:df:f1:2a:82:b2:c9:
c8:46:5f:30:bd:27:bf:1b:c1:40:18:98:3f:8f:dc:
30:3c:b2:da:68:79:f2:5e:2a:0e:c0:63:6a:4f:c2:
ba:7f:79:e4:56:30:0b:eb:5d:2b:e2:5b:d7:c2:6d:
d5:c1:9c:4f:f4:4b:f5:07:6b:d7:d0:98:86:a7:f0:
e8:bf:c2:14:91:9a:b1:8b:ac:45:99:2a:e7:44:40:
74:ba:f2:86:50:78:04:44:45:f1:00:e3:aa:81:62:
eb:b8:ef:ce:1b:0a:ba:41:d9:24:34:61:37:a4:5b:
87:23:0e:a5:66:21:47:57:18:06:51:95:c3:6c:a8:
b3:9e:19:22:6b:c1:7d:0b:77:71:c6:5f:a8:bf:4c:
67:71:06:91:67:9b:01:d5:64:04:15:eb:22:9b:4c:
00:a5:47:da:22:95:8d:bb:b7:dc:33:f4:59:9f:a7:
8f:a9:9a:a9:e7:70:4c:10:ba:c8:a2:05:fc:f7:06:
42:cd:d2:8c:ef:f1:a2:fe:71:a4:0f:40:97:59:7a:
92:af:cb:34:87:5b:0f:43:27:a9:cb:61:c0:4c:a7:
5b:e9:16:d3:e8:f6:9f:1e:79:4d:08:f8:4a:9a:5d:
ae:b2:84:2f:bb:77:10:e1:4f:f8:2c:56:a0:0f:dc:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140244
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3540::/48
Signature Algorithm: sha256WithRSAEncryption
26:fa:51:dc:ba:6e:5f:f8:e8:0a:fd:bc:f3:ba:d2:00:23:c1:
ad:d2:41:36:71:a1:43:07:41:aa:b1:92:84:6b:66:a1:22:67:
c2:47:1f:ae:8d:96:37:16:79:0d:ab:d3:b2:3e:ee:8c:10:3e:
8c:44:c2:8c:ce:72:0c:50:71:be:21:58:57:39:4e:b1:53:33:
d2:ab:45:da:2c:85:e0:31:48:35:5c:73:39:5a:cc:f2:99:93:
e6:66:b6:31:93:40:8f:4a:e3:ea:aa:04:b8:b2:e8:8a:6f:13:
5f:12:24:70:5b:13:bc:b2:1a:ec:18:54:6e:01:f9:4d:66:84:
6a:da:dc:da:44:6b:66:df:76:9b:1b:15:2b:8b:2a:97:ac:a2:
db:dc:c8:e9:d5:f8:af:a4:91:31:95:e9:7d:b7:97:2e:72:d8:
6a:f6:a9:10:8d:20:35:e6:24:5b:5f:aa:20:ce:0d:34:16:96:
48:8f:c1:0f:79:68:34:56:d7:a1:08:59:6b:22:a6:d2:d9:46:
d7:20:66:20:a3:d5:2c:91:14:db:8f:67:5a:fc:38:f4:e7:28:
0b:13:e1:6a:d5:32:30:73:f1:9f:5f:d3:dd:e1:8e:ad:39:22:
23:5e:4f:16:be:23:00:03:61:1c:0c:a2:0d:69:f1:7f:cd:50:
db:40:8c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:22 2025 by rpki-client