Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
File: tbNfkk61wy-7QYZ9OhZuSpa77KI.cer (raw, json)
Hash identifier: RjVHYZgAx4T72OxlAUZuVkO118HbHW5/5+O1GKK46QI=
Subject key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026706
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 Sep 2025 07:31:44 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154251
IP: 2402:2ce0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157446 (0x26706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 23 07:31:44 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:b5:6d:19:ef:92:59:66:1f:cb:9e:b3:82:
b1:24:1e:25:d9:a4:9b:93:4b:04:7d:6c:64:a9:f1:
56:34:9d:c3:6e:8d:ea:3b:59:a9:8e:b8:ac:b7:45:
ec:e6:d4:13:96:f9:54:2e:16:7b:44:c3:52:da:ae:
94:59:15:0a:9a:2b:b3:df:d7:59:bb:04:eb:be:54:
5b:09:80:7d:42:2b:39:bc:d1:5c:b0:ad:e0:dd:27:
9f:3f:27:fd:91:87:0b:63:74:cb:63:c7:81:ea:48:
fb:4a:49:25:13:93:ac:63:22:b4:12:7c:e7:dd:02:
a4:b8:47:86:d1:2b:87:52:6d:4a:95:86:5e:46:c7:
69:0b:01:a0:0d:6f:29:dd:98:90:fc:04:ef:4c:8b:
0f:82:97:f1:c9:d4:2b:e8:98:af:75:4b:ff:11:fd:
c3:e8:23:55:f5:3e:2f:7b:62:0f:1d:9f:6b:7c:49:
79:98:ea:34:5e:6c:77:51:10:de:c5:2f:f5:1e:5a:
54:c4:9a:db:37:a1:d4:ff:0f:41:66:a5:9d:49:b2:
04:bf:86:0d:b5:7f:c5:54:6e:f9:92:2e:3b:d1:14:
bf:ae:ca:e8:98:3d:cd:5a:50:e2:14:f9:07:2b:b0:
a1:ca:70:27:89:4b:d5:8f:ee:4d:4b:22:f5:a7:16:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154251
sbgp-ipAddrBlock: critical
IPv6:
2402:2ce0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:53:1f:d2:7e:e7:02:4d:85:37:f0:55:a9:88:1f:e5:e0:ce:
8f:b0:9b:bf:f1:1f:7c:b0:88:99:fa:55:18:74:4c:98:ed:c0:
88:ea:e6:4b:df:3a:27:e9:19:ca:c0:b1:1c:72:04:9d:9e:c6:
47:dc:00:8e:6c:27:46:b8:b5:c9:32:f9:eb:78:a1:56:bf:a9:
9e:8f:b7:69:5c:40:99:2f:44:0f:07:77:63:8c:8f:f4:4f:06:
db:ba:b9:82:ee:8f:a6:8d:d4:fc:bc:ec:0f:ca:53:00:55:3a:
99:66:63:a4:97:85:13:60:40:ea:71:a9:90:6b:32:6b:ca:0c:
8f:13:0f:fd:83:3f:cc:4b:83:21:c1:44:35:60:d0:9a:d8:8b:
18:91:59:c2:89:89:d3:aa:e1:ed:b4:43:f9:27:4e:0a:73:b3:
dc:44:fe:b3:b8:7f:9a:8a:bb:9b:53:da:1a:8d:65:c6:92:eb:
fc:11:64:b6:93:e6:a4:90:28:42:bb:05:4b:fd:21:0c:79:f8:
60:1a:55:ac:b9:6f:28:75:24:ca:11:9f:ed:5b:b2:41:e3:25:
1b:ad:c4:40:86:26:53:af:d3:43:a7:31:dc:94:43:86:c0:ec:
46:f3:52:3b:fe:18:0a:22:e9:8a:f9:23:4c:32:81:9c:7b:b4:
62:e7:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:52 2025 by rpki-client