Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer
File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer (raw, json)
Hash identifier: KlfIHCuAPGybz8C8CM4P6A2BF66m7EyIXHdhYCAZKt0=
Subject key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026BD5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Oct 2025 15:37:09 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 38036
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 20:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158677 (0x26bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 15:37:09 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:64:da:57:5f:61:a8:0a:b0:08:c0:53:4d:
ee:d6:16:12:71:66:2f:47:a0:d0:9e:e1:97:52:c6:
1b:65:b2:0f:2b:6d:2d:d0:dd:ac:20:58:98:8b:64:
ba:eb:87:d3:1e:c4:d6:8c:3c:38:f6:ff:44:87:56:
3b:f0:26:6e:c9:11:dc:c0:72:f8:35:52:e7:fc:50:
2c:3e:22:e1:ca:ba:95:d9:c3:17:3f:29:33:ea:c4:
d3:52:dc:2b:dd:f8:18:d6:92:f7:9f:57:e7:e1:1c:
60:35:b0:83:98:92:38:b1:cb:bb:42:75:1a:9f:df:
a4:0e:96:90:40:a4:4f:ba:f5:08:c1:93:9e:77:15:
75:a9:46:bc:56:e4:66:81:eb:2e:a9:b4:0f:c1:89:
57:8c:3f:42:1b:2f:5d:a5:78:d7:b6:ac:b4:c2:ab:
03:22:f2:3a:af:bb:25:68:7a:1c:8a:3a:98:d8:76:
cc:d4:b3:d7:30:05:4c:b8:cd:62:27:c0:0c:32:12:
bf:25:a5:46:a8:d2:20:a3:4d:1a:40:3e:50:38:f4:
a3:66:7b:51:81:26:ba:7f:7e:1c:cc:03:b0:1e:26:
37:0d:7d:0b:10:df:d8:4a:ba:7b:a6:30:c0:28:ef:
1e:14:dd:af:1c:45:17:0d:1b:47:43:06:f5:3e:b1:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38036
Signature Algorithm: sha256WithRSAEncryption
29:df:7f:c7:6f:40:22:27:69:d7:df:24:80:a0:ac:d4:38:5e:
b3:3e:1b:40:c2:df:39:e1:16:7b:32:a4:01:0e:2b:92:38:f6:
b9:37:43:f3:51:bd:53:be:63:cc:f4:e7:12:20:1a:86:b2:83:
71:82:3f:5a:76:d9:f0:f5:de:80:18:e4:5b:fa:e7:73:1a:85:
6e:47:62:21:dc:21:ab:4d:2a:39:f7:da:f4:d5:e4:b9:fe:67:
50:bd:39:6a:61:02:83:99:5c:16:39:8a:e7:30:1f:6a:96:9f:
19:73:eb:d3:c1:4d:29:f7:ce:af:86:94:5c:81:c2:7d:74:1b:
d3:37:ba:e7:b4:78:45:70:78:bf:34:86:ae:fc:e2:d4:0c:d5:
19:ce:fb:1c:a0:27:9a:86:0b:fa:2e:ce:23:3a:69:d2:c8:6d:
e7:95:46:67:fc:63:09:97:f0:bd:e6:f7:eb:2b:dd:fa:7b:2b:
5c:7b:95:e7:e9:f7:71:60:a1:b3:ff:b8:9f:25:87:d5:c9:88:
ab:34:75:d3:71:da:62:11:43:d9:d4:b1:3f:2d:04:d4:fd:a8:
96:df:33:19:0d:a7:df:ae:a1:09:60:17:3b:d8:50:d8:34:65:
2c:64:2b:19:f8:a9:9a:a2:76:e3:b3:e5:0e:08:ac:85:79:48:
e9:47:38:ba
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAmvVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTAxMDE1MzcwOVoXDTI2MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJE
MzQ0QzNFQkJCRDU2RkU0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyc2TaV19hqAqwCMBTTe7WFhJxZi9HoNCe4ZdSxhtlsg8rbS3Q3awgWJiLZLrr
h9MexNaMPDj2/0SHVjvwJm7JEdzAcvg1Uuf8UCw+IuHKupXZwxc/KTPqxNNS3Cvd
+BjWkvefV+fhHGA1sIOYkjixy7tCdRqf36QOlpBApE+69QjBk553FXWpRrxW5GaB
6y6ptA/BiVeMP0IbL12leNe2rLTCqwMi8jqvuyVoehyKOpjYdszUs9cwBUy4zWIn
wAwyEr8lpUao0iCjTRpAPlA49KNme1GBJrp/fhzMA7AeJjcNfQsQ39hKunumMMAo
7x4U3a8cRRcNG0dDBvU+sboDAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUcazs8aGt
lwhWVdvTRMPru9Vv5HQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE3NTlGLzBBNkYyNjM0NjlDNTExRTI4NTkwMDI0NTI5NzlCQjIwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFH
dGx3aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJSUMA0GCSqGSIb3DQEBCwUAA4IBAQAp33/Hb0AiJ2nX3ySAoKzUOF6z
PhtAwt854RZ7MqQBDiuSOPa5N0PzUb1TvmPM9OcSIBqGsoNxgj9adtnw9d6AGORb
+udzGoVuR2Ih3CGrTSo599r01eS5/mdQvTlqYQKDmVwWOYrnMB9qlp8Zc+vTwU0p
986vhpRcgcJ9dBvTN7rntHhFcHi/NIau/OLUDNUZzvscoCeahgv6Ls4jOmnSyG3n
lUZn/GMJl/C95vfrK936eytce5Xn6fdxYKGz/7ifJYfVyYirNHXTcdpiEUPZ1LE/
LQTU/aiW3zMZDaffrqEJYBc72FDYNGUsZCsZ+Kmaonbjs+UOCKyFeUjpRzi6
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:02 2025 by rpki-client