Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.cer (raw, json)
Hash identifier: m3PXocbLAVZd8/27T8w+4a7TBOYzKpcsxc9cNqwBVcc=
Subject key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025C89
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Aug 2025 06:44:36 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 135426
AS: 138416
IP: 2401:bd60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 06:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154761 (0x25c89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 11 06:44:36 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:d2:5a:46:68:ac:7a:f2:f7:b9:f4:1b:d7:
36:4e:0f:4a:ca:a1:73:f5:36:ac:1d:25:67:83:d0:
23:1d:2e:6f:40:2d:77:02:68:2d:42:73:6e:80:b0:
20:61:78:95:6c:41:0d:0b:91:89:c8:f0:50:c9:ca:
a5:ef:ab:34:57:87:6d:e9:85:f8:a7:c0:31:56:9a:
f8:60:c0:c0:c7:bc:23:c5:ab:31:b5:4c:32:fb:a4:
46:c5:fc:3a:19:ff:ed:61:51:d0:36:b6:c2:3f:15:
85:d7:b9:1c:67:fb:4d:93:01:62:5a:0a:53:f8:34:
aa:b5:2d:ec:95:c7:2f:73:00:b3:a8:1b:e6:f3:74:
3e:7a:57:54:16:13:33:fd:14:7e:1f:7a:d4:8e:25:
02:6a:0d:cd:bd:36:e7:71:e3:0e:58:b2:0c:49:e5:
2f:d8:af:54:c9:c3:3b:63:87:4c:4e:d0:45:32:aa:
15:55:3c:0a:17:41:5c:b6:db:42:1a:9b:b0:85:8d:
56:89:f8:b1:ec:25:58:dd:a2:ca:ab:97:bf:02:33:
53:4a:23:95:d9:24:07:2c:74:3d:9a:52:aa:74:a5:
83:47:76:1f:1c:f0:45:57:4d:f2:da:32:77:62:eb:
0a:7f:02:93:d5:bb:ad:8c:b3:13:a8:05:5b:f0:e8:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135426
138416
sbgp-ipAddrBlock: critical
IPv6:
2401:bd60::/32
Signature Algorithm: sha256WithRSAEncryption
6f:f2:ea:7b:45:66:69:95:9b:d6:98:61:4f:c8:e6:66:85:d8:
56:63:db:47:44:68:56:be:81:42:96:77:33:aa:a0:05:3b:9b:
52:75:2b:00:fa:36:81:d0:cc:ff:be:12:aa:5a:9c:6e:34:a9:
0a:15:f6:8f:dc:b7:36:39:73:8c:34:55:66:2b:21:b7:da:d3:
25:ab:0a:3c:42:e7:03:05:96:b6:df:0a:fb:18:66:b3:62:84:
98:62:5b:c4:ba:f2:e3:58:3b:c1:dc:33:f1:1e:1e:4b:07:0c:
5a:f5:cc:d9:b0:8f:86:ad:26:c4:35:72:25:ad:4d:e9:28:72:
50:2d:71:5c:f5:ac:61:b9:f8:3d:db:91:b0:09:53:0c:83:e1:
ed:ab:7e:2b:f0:77:ea:03:f0:25:7e:a0:bb:49:f4:59:27:db:
22:01:21:2d:f0:3b:ae:e2:18:2e:be:d6:c1:f9:e6:74:fb:7c:
4d:d4:5b:bf:35:3e:67:01:44:49:6f:3b:86:cf:15:41:10:57:
98:6b:ae:9b:25:da:d5:81:04:ee:f0:15:d0:04:61:d9:b0:d7:
44:53:b9:cb:04:1c:11:e6:d3:e9:a6:40:02:9d:7e:8f:b2:bd:
58:31:f6:ef:9c:85:28:b3:7b:1e:5b:ae:80:e9:e9:81:8f:fe:
b3:8e:fe:63
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAlyJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgxMTA2NDQzNloXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgx
MDRCOTRERTBGQTQ3NTIxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkKNJaRmisevL3ufQb1zZOD0rKoXP1NqwdJWeD0CMdLm9ALXcCaC1Cc26AsCBh
eJVsQQ0LkYnI8FDJyqXvqzRXh23phfinwDFWmvhgwMDHvCPFqzG1TDL7pEbF/DoZ
/+1hUdA2tsI/FYXXuRxn+02TAWJaClP4NKq1LeyVxy9zALOoG+bzdD56V1QWEzP9
FH4fetSOJQJqDc29Nudx4w5YsgxJ5S/Yr1TJwztjh0xO0EUyqhVVPAoXQVy220Ia
m7CFjVaJ+LHsJVjdosqrl78CM1NKI5XZJAcsdD2aUqp0pYNHdh8c8EVXTfLaMndi
6wp/ApPVu62MsxOoBVvw6HN7AgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUcxfXd72q
YzPNlqgQS5TeD6R1IRMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJBOTQxLzlCM0QyNTQ4QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcy
cVl6UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAhECAgMCHLAwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAb1g
MA0GCSqGSIb3DQEBCwUAA4IBAQBv8up7RWZplZvWmGFPyOZmhdhWY9tHRGhWvoFC
lnczqqAFO5tSdSsA+jaB0Mz/vhKqWpxuNKkKFfaP3Lc2OXOMNFVmKyG32tMlqwo8
QucDBZa23wr7GGazYoSYYlvEuvLjWDvB3DPxHh5LBwxa9czZsI+GrSbENXIlrU3p
KHJQLXFc9axhufg925GwCVMMg+Htq34r8HfqA/AlfqC7SfRZJ9siASEt8Duu4hgu
vtbB+eZ0+3xN1Fu/NT5nAURJbzuGzxVBEFeYa66bJdrVgQTu8BXQBGHZsNdEU7nL
BBwR5tPppkACnX6Psr1YMfbvnIUos3seW66A6emBj/6zjv5j
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:33 2025 by rpki-client