Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer (raw, json)
Hash identifier: uIHd1JGZkmEYwSmAoXklMvrVAMff5rK4ftXiyz4kf7M=
Subject key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025221
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Jul 2025 14:50:14 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 2402:4680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 18:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152097 (0x25221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 14:50:14 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:23:8d:5d:6b:c7:d8:10:1d:fc:c5:02:89:
17:99:22:a0:12:3b:5b:b3:44:92:93:92:dc:70:ac:
3e:23:1c:c6:9c:b2:63:54:10:13:62:34:25:5e:7f:
d4:71:22:af:4f:cf:cd:2c:36:4f:6d:cc:56:a0:18:
cd:a4:99:47:15:56:7f:e6:40:a7:68:91:57:ee:41:
17:b8:47:e8:0a:4e:52:3a:1a:ca:91:4d:ca:3d:3a:
51:16:4e:d3:7b:95:03:90:dd:5a:a2:b8:51:a4:54:
2e:1b:ad:9d:c8:e2:8b:a9:01:64:41:38:1d:61:35:
43:ae:43:3c:ff:5d:46:83:10:6d:03:70:1e:16:1f:
08:f1:69:54:eb:a8:de:c2:3f:52:d0:8a:68:4d:4f:
58:37:7e:0a:fe:d8:5b:b9:02:58:94:8b:fd:e0:a8:
88:b8:79:96:f1:e3:c3:f2:19:4d:a7:e6:c5:56:46:
4c:9b:a9:cf:ea:d8:d1:c9:92:6d:e7:58:1c:dd:fb:
67:ee:9c:87:a0:49:cb:7e:03:9c:c2:19:21:7b:95:
fa:a8:af:c6:c7:3a:fb:05:6b:e5:11:a2:9f:11:3d:
d5:07:c6:8a:ee:c6:e1:ff:b8:b1:79:f2:eb:bd:85:
50:57:20:01:f7:c8:c1:6a:4c:38:4f:f7:3e:a5:1e:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4680::/32
Signature Algorithm: sha256WithRSAEncryption
6c:f0:cd:09:7b:d0:bd:46:cd:0f:a4:61:a8:89:ce:2a:f1:f2:
db:35:ff:3b:aa:0d:8e:b5:66:21:27:89:ed:63:50:5f:7a:05:
5e:dd:6f:34:b3:dc:a3:61:9b:a4:91:cf:44:e0:b6:f7:9c:34:
8b:a0:c1:b6:a8:d6:eb:c6:72:5c:ef:ee:89:8f:77:56:0d:7e:
3b:7a:8b:c6:06:cc:6a:26:06:39:70:90:14:ab:cb:22:d9:0a:
62:44:82:d1:ea:d1:80:a6:35:b3:a6:f9:49:4a:f1:e5:a6:f1:
88:e8:4d:1a:07:5b:4b:6c:ba:fa:63:80:02:eb:42:3a:fd:86:
a0:fb:9a:43:ce:97:4c:81:08:f5:1d:15:02:27:68:80:c2:05:
18:93:c0:20:df:e3:33:8a:9f:23:76:4d:45:36:bf:e0:46:82:
0e:cd:09:1e:69:40:11:d9:14:a0:ae:04:bc:28:bd:8b:d3:47:
64:e6:4d:9f:0f:04:a9:4e:a5:d8:38:f8:25:d0:f2:8d:0f:35:
a7:65:c9:8c:3e:e5:07:45:38:c5:08:ee:32:18:fe:3d:e0:3e:
6f:c5:a8:50:40:b5:06:1a:74:32:71:dc:3f:e2:91:2b:0e:4d:
37:c6:90:03:e8:fc:76:82:9a:0b:bb:b1:4d:70:df:89:f2:12:
6e:2b:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:29:50 2025 by rpki-client