Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer (raw, json)
Hash identifier: YPElVAPHiai6COGHky9LWKb8FrBhSLqlUKJs2mjBiTk=
Subject key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02650F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Sep 2025 12:49:09 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 153200
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156943 (0x2650f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 12 12:49:09 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:4f:0d:f6:2f:f3:3d:8c:e5:48:fe:e4:38:
2c:68:38:b9:2a:b3:94:04:9f:24:93:50:90:b7:38:
7e:2a:f1:e9:2f:c9:a6:c7:8d:43:b9:8f:47:12:8b:
5a:8d:fc:63:18:61:1e:2b:a5:26:b1:98:3a:51:37:
f0:de:62:d7:0d:46:68:89:fd:f8:03:c7:84:55:68:
09:e9:5f:ca:f4:aa:bd:e9:dd:38:42:35:05:f6:6a:
7f:f3:53:e9:76:24:ab:a6:3b:44:e6:84:20:4e:2f:
fc:79:c8:2c:a3:9a:45:d2:58:37:a7:3d:c9:be:6e:
41:b6:63:4a:b9:ea:b7:5f:e2:9d:53:54:40:b9:d4:
3b:13:42:fb:bc:d0:3d:06:3c:65:1c:91:53:57:7a:
a5:93:77:4f:a6:6c:62:86:b5:2c:4e:ac:0c:a7:eb:
9a:63:aa:7f:f7:26:be:c4:e7:5c:ce:c8:8a:0c:08:
3d:5c:96:2c:f7:6e:1b:d5:2d:c7:f5:23:11:d5:64:
fb:18:51:ab:7f:dd:18:09:93:5a:f2:aa:e4:70:9a:
a2:d1:ad:5a:16:11:70:88:4b:b6:fc:5a:1a:a9:95:
9f:13:a0:c8:16:ce:ef:9d:a2:57:89:51:53:f9:d8:
2c:0a:c6:fa:08:a3:56:a4:bd:07:34:25:3d:98:be:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153200
Signature Algorithm: sha256WithRSAEncryption
78:64:b6:4e:79:b8:48:a0:52:f4:c0:ac:59:40:85:f1:67:e5:
7c:2b:b2:84:65:31:1e:e3:93:7b:fb:57:79:45:e9:8c:f2:1d:
99:e4:eb:8d:ea:fb:70:d5:4c:93:cb:4f:11:fd:4a:e4:75:6f:
a4:20:8a:a5:96:f8:a4:10:7f:c6:99:6f:50:d5:11:84:9e:9a:
26:2c:57:22:79:6b:1d:c1:52:b4:42:6b:14:3d:eb:65:d6:8f:
ae:e0:40:a4:81:50:b2:a2:85:19:a1:bd:d2:76:7b:98:32:61:
c1:4f:3d:96:02:f4:55:7f:3c:6c:55:79:43:a7:1a:ef:be:ed:
27:8b:fc:87:16:34:ad:0b:6d:d8:ec:83:08:ac:fa:d8:73:dc:
ab:fd:b0:dc:a8:f0:ab:6b:be:d8:2a:6e:5a:fd:12:37:e9:22:
15:f5:d6:f1:49:26:08:41:9c:f7:7b:af:93:6a:b4:84:13:61:
5b:00:9b:24:d5:ad:a2:c1:64:60:c0:64:e0:fe:02:e9:6c:9d:
81:37:91:73:f6:70:27:da:ee:27:e8:ee:92:ee:70:2b:25:c7:
16:99:62:a9:6c:1f:f2:e6:e0:37:cb:b4:3d:c9:96:83:90:12:
5b:88:d4:6e:dd:0f:b0:b4:9a:48:97:e9:5f:2e:da:95:7a:e0:
cc:0d:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:16 2025 by rpki-client