Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
File: lAiiAfAOWP6SWY7gOTkHi673d5U.cer (raw, json)
Hash identifier: f8PJwDQPEM64dqHF9/FseDSeNVsT2M4MRElwBHcURdw=
Subject key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4E2E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Nov 2025 19:50:31 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 50049
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20014 (0x4e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Nov 3 19:50:31 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:6f:e8:81:2d:a5:9c:cc:d8:32:5f:fd:5b:
bb:29:fe:16:55:f6:91:6c:17:a1:b0:90:6d:bc:5f:
6d:cf:ef:46:d0:97:f5:45:7a:b0:29:cc:a3:e0:59:
52:0e:51:c2:53:81:4f:7a:6d:d5:bc:87:12:ca:b0:
9a:a8:8d:fa:b9:eb:0b:e6:33:e1:15:41:16:1a:34:
cd:dd:53:a1:6d:fa:bc:a5:88:be:65:30:20:63:f2:
11:f2:0a:72:c1:93:ee:d5:e1:dd:db:58:6f:98:8d:
0a:ba:1a:f2:23:cb:7d:9f:0e:96:1d:4a:03:e3:9d:
29:8a:de:ca:c5:92:63:0f:94:a9:4c:db:c0:06:a1:
51:0f:28:5d:e3:57:43:a5:0b:1a:68:67:be:9a:c9:
f7:09:91:bb:e9:5a:42:93:14:b1:41:eb:68:b2:b7:
77:d3:d3:82:c7:81:88:68:7e:a2:86:c2:ae:ee:d9:
70:b1:9e:17:62:5a:ae:a7:69:34:03:86:fb:56:e2:
43:40:1a:87:fa:50:e9:7a:47:ca:6f:66:d3:a5:81:
b1:da:e6:1b:24:e3:84:f6:10:bd:16:c8:70:9b:8b:
93:70:94:24:5d:52:0c:a7:ba:dc:1f:fe:ad:65:9a:
99:02:fe:45:15:4e:a8:c6:c2:4c:37:3a:4c:9f:b7:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50049
Signature Algorithm: sha256WithRSAEncryption
c5:43:75:0c:ff:56:18:61:9e:c6:d9:59:25:b9:78:6e:b8:c6:
8b:91:4f:33:0f:e9:67:13:2e:de:4a:c1:2f:b9:86:69:e2:39:
28:11:7d:56:25:1b:bc:89:8d:7d:51:a2:8b:bc:9b:90:d5:79:
5c:c9:af:96:30:80:3d:f5:ad:ef:78:29:af:eb:99:92:0c:4d:
13:ba:51:5f:3b:3d:37:e3:cb:73:e6:fb:32:47:22:f5:9a:ae:
65:39:11:1e:f1:be:77:88:88:5b:c3:64:63:96:cf:7b:36:04:
31:78:da:ce:32:97:4b:f4:cf:6f:e5:b1:5c:71:75:18:0a:ef:
fd:35:9e:23:eb:62:4a:d9:8d:9d:76:5a:f3:52:7e:a5:fc:e8:
a9:f5:eb:cf:12:d6:1a:67:f5:22:eb:28:f4:e9:97:52:a5:cc:
f5:f5:f9:c3:16:be:53:60:6e:e4:5c:93:83:5e:f2:9a:94:60:
90:04:e3:3c:3c:c5:52:b0:cb:cd:f2:b6:4e:43:d3:1a:52:b8:
d9:26:b6:eb:0a:19:49:bb:6e:0e:0f:ee:aa:43:48:70:e7:74:
b7:a9:5f:40:ac:a1:a1:c4:fe:40:da:ba:06:93:67:7e:1a:23:
38:34:af:5e:c9:9b:0e:df:ba:93:e7:9b:33:71:13:b6:9d:50:
67:1f:9e:98
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgICTi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjUxMTAzMTk1MDMxWhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBNkY2ODExMC8GA1UEBRMoOTQwOEEyMDFGMDBFNThGRTkyNTk4RUUw
MzkzOTA3OEJBRUY3Nzc5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AN9ub+iBLaWczNgyX/1buyn+FlX2kWwXobCQbbxfbc/vRtCX9UV6sCnMo+BZUg5R
wlOBT3pt1byHEsqwmqiN+rnrC+Yz4RVBFho0zd1ToW36vKWIvmUwIGPyEfIKcsGT
7tXh3dtYb5iNCroa8iPLfZ8Olh1KA+OdKYreysWSYw+UqUzbwAahUQ8oXeNXQ6UL
GmhnvprJ9wmRu+laQpMUsUHraLK3d9PTgseBiGh+oobCru7ZcLGeF2JarqdpNAOG
+1biQ0Aah/pQ6XpHym9m06WBsdrmGyTjhPYQvRbIcJuLk3CUJF1SDKe63B/+rWWa
mQL+RRVOqMbCTDc6TJ+3fcECAwEAAaOCAu4wggLqMB0GA1UdDgQWBBSUCKIB8A5Y
/pJZjuA5OQeLrvd3lTAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTZGNjgvQkE1NjVGNUNERjIxMTFFRjgzM0Y0RjJDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE2RjY4L0JBNTY1RjVDREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL2xBaWlBZkFP
V1A2U1dZN2dPVGtIaTY3M2Q1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMAw4EwDQYJKoZIhvcNAQELBQADggEBAMVDdQz/VhhhnsbZWSW5eG64xouR
TzMP6WcTLt5KwS+5hmniOSgRfVYlG7yJjX1Roou8m5DVeVzJr5YwgD31re94Ka/r
mZIMTRO6UV87PTfjy3Pm+zJHIvWarmU5ER7xvneIiFvDZGOWz3s2BDF42s4yl0v0
z2/lsVxxdRgK7/01niPrYkrZjZ12WvNSfqX86Kn1688S1hpn9SLrKPTpl1KlzPX1
+cMWvlNgbuRck4Ne8pqUYJAE4zw8xVKwy83ytk5D0xpSuNkmtusKGUm7bg4P7qpD
SHDndLepX0CsoaHE/kDaugaTZ34aIzg0r17Jmw7fupPnmzNxE7adUGcfnpg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:36:01 2025 by rpki-client