Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
File: hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer (raw, json)
Hash identifier: TNi+i6RyjVp/TitFeq24tYssKfVjjlEHhCc/SgkzKRc=
Subject key identifier: 86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026702
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Tue 23 Sep 2025 06:17:52 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154155
AS: 154185
IP: 49.213.62.0/23
IP: 2001:df6:40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157442 (0x26702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 23 06:17:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A916FC1D0000, serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:f1:fa:f2:51:40:0a:27:f4:8e:93:6a:bc:
5c:8d:41:84:92:f3:d4:f6:20:65:fe:02:db:36:67:
63:ef:e2:a7:c5:78:10:99:cf:64:37:50:45:6e:7f:
5f:91:ca:fb:a8:23:dd:65:5b:3f:24:83:36:40:d8:
15:47:22:f9:65:e2:fa:3e:74:21:d3:66:09:bd:61:
94:02:b5:ab:8f:69:6c:d4:c8:0f:60:d2:0f:2f:b2:
5c:22:37:02:61:d3:4e:be:a5:17:fd:2a:da:c3:f5:
32:15:ef:e8:29:83:98:6e:54:79:9b:51:05:b7:88:
23:19:e7:1e:65:35:ca:2d:0d:46:3c:44:d7:4c:76:
55:87:3c:ee:e3:a1:fd:d3:b8:ea:4b:d0:9b:f7:63:
af:8c:0f:61:eb:8f:de:cb:c3:c6:56:4d:10:58:59:
22:64:6d:6a:7f:7a:3a:08:1a:e7:a9:bf:f9:db:8c:
c0:bb:e2:17:33:db:69:a0:f6:89:7f:16:9f:13:35:
6d:34:24:62:c0:50:03:46:af:74:1a:a4:4d:bd:b2:
ab:d6:27:00:bf:0e:ad:9d:75:70:ee:13:bc:dd:91:
73:34:cc:0a:16:f8:ea:d0:66:b8:0a:ff:8d:91:43:
85:12:08:56:74:e3:4f:b1:31:0b:e8:87:de:30:35:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154155
154185
sbgp-ipAddrBlock: critical
IPv4:
49.213.62.0/23
IPv6:
2001:df6:40::/48
Signature Algorithm: sha256WithRSAEncryption
5f:17:f4:39:e1:90:90:5b:13:84:e2:c6:43:fc:93:fd:b5:74:
4c:8a:25:3d:e5:77:fb:92:fa:ac:de:96:22:0c:62:be:37:97:
e1:7e:87:ac:ff:1a:94:ca:23:4e:5e:d2:bc:99:26:03:d6:1e:
98:e8:c4:b8:d6:bd:5c:28:ce:de:92:f7:57:c3:a5:f9:13:34:
03:7d:2a:a4:58:cd:0d:85:1e:5f:d4:b1:2a:67:a1:2c:f1:aa:
2f:65:b0:4d:0e:de:01:19:3a:37:1d:8e:75:e9:8c:27:02:ec:
c5:b9:c1:d0:e5:5e:48:71:9f:5d:e7:03:d5:a1:94:de:75:d2:
fa:9e:91:59:8c:44:44:91:ef:54:6d:12:1c:ff:93:45:20:18:
8b:8c:40:04:b0:d5:9e:44:a6:af:e8:14:ea:a0:37:28:fd:32:
f0:9f:50:2e:23:c5:a5:29:69:61:b0:b3:6f:58:2e:6d:04:1e:
c9:6e:29:a6:7d:69:71:93:ba:3e:32:46:0f:b9:6a:23:06:0b:
ea:48:01:ea:ec:d0:27:dc:cf:ec:e9:45:e8:fa:0b:13:3d:b1:
6e:d5:a5:ac:3e:e0:91:84:98:52:23:06:a6:68:5d:54:a9:c3:
95:2b:c0:24:ce:94:7d:c3:79:91:0a:0d:20:97:b3:15:34:be:
91:c0:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:33 2025 by rpki-client