Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
File: -swzUrzjgChT2_SwQFJc_B4VLmA.cer (raw, json)
Hash identifier: 0KpvZ2jWlNhyneWaDpPZVM49VaThhXzc32BTsXf1Q1g=
Subject key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025847
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Jul 2025 12:40:29 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 152932
IP: 2001:df3:f940::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153671 (0x25847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 12:40:29 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A911B22E, serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:1e:3e:cd:8d:89:40:d7:05:77:ae:3b:eb:
2a:b4:17:e8:a9:50:b6:b0:76:fe:14:32:ae:59:5d:
75:b7:bc:8d:6f:0c:ed:2c:c7:1b:4b:1d:b4:8f:df:
53:66:a2:14:35:c0:d4:c0:db:b1:87:5d:ae:38:7c:
70:e6:21:66:77:23:be:f1:3c:49:13:8d:d7:3f:06:
55:f6:88:1b:a0:bd:14:ce:0c:50:60:ea:a5:17:5f:
31:30:7e:f1:59:8d:13:76:39:0a:69:c5:a2:c7:58:
56:b1:36:1f:94:b0:be:40:e0:19:2a:a2:d0:d0:06:
35:f1:4c:06:a5:ba:a1:d2:51:de:c0:b8:fc:3c:54:
ba:aa:d2:05:0d:11:ca:4e:f9:cd:07:c5:b9:7e:9b:
3b:02:92:cd:75:42:c5:4a:39:0a:45:fa:17:16:a4:
12:ab:14:e8:97:0c:da:d9:7a:b5:cc:db:93:0d:0e:
1a:56:ee:a6:ce:46:3a:ff:18:25:f1:92:ac:f4:00:
7c:07:3d:87:a8:85:b9:18:77:8c:8e:95:ba:6d:d9:
7e:40:f9:b0:81:f9:76:19:16:74:4d:55:a2:45:84:
17:5e:e4:da:1c:d3:16:cf:e4:76:bd:bb:b0:56:3e:
9d:15:8a:7f:7e:00:58:22:67:45:53:2c:bd:1d:be:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152932
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:f940::/48
Signature Algorithm: sha256WithRSAEncryption
be:f0:e4:f3:87:94:dc:41:90:ab:ed:91:0f:cb:c4:0a:51:27:
f4:de:3c:17:71:55:2e:32:b5:e9:9a:fa:7f:a9:aa:fe:97:6a:
d4:b4:8f:48:98:d6:14:fb:02:ad:31:5a:55:c2:46:73:be:05:
5f:9d:bc:ae:2e:c8:3b:c0:28:01:35:38:4c:e6:f1:f2:d9:a9:
0f:24:a6:13:d7:8b:06:4d:6d:7b:01:3e:1b:b4:34:ad:1e:f5:
d0:d3:d1:2e:70:59:08:e7:21:f2:46:50:9e:72:af:71:d3:c5:
f6:10:ac:2c:9d:7a:a5:42:4c:84:57:c0:ad:e4:1e:dc:eb:f4:
3d:56:25:ba:65:80:fc:05:75:f2:e2:b9:b9:00:7a:b8:bb:8c:
39:8f:48:24:bf:ec:1d:50:47:88:a1:87:ba:42:b8:ed:dc:69:
9f:fb:f6:a2:4a:25:22:1a:bf:67:7c:ad:bd:17:33:70:e4:76:
23:37:11:ed:cf:09:f5:4c:0f:8b:46:11:dd:36:87:02:a7:21:
f1:3e:69:f7:a5:90:7c:ab:ae:6e:7a:40:1a:29:22:7d:15:23:
fe:56:ac:40:d1:76:ae:55:bf:31:2a:7d:31:9e:51:19:a8:f6:
8d:ba:c9:3c:07:9f:c7:4f:80:88:80:d2:c5:60:89:50:bc:7c:
b2:5d:dd:a0
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAlhHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcyODEyNDAyOVoXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUIyMkUxMTAvBgNVBAUTKEZBQ0MzMzUyQkNFMzgwMjg1M0RCRjRC
MDQwNTI1Q0ZDMUUxNTJFNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQch4+zY2JQNcFd6476yq0F+ipULawdv4UMq5ZXXW3vI1vDO0sxxtLHbSP31Nm
ohQ1wNTA27GHXa44fHDmIWZ3I77xPEkTjdc/BlX2iBugvRTODFBg6qUXXzEwfvFZ
jRN2OQppxaLHWFaxNh+UsL5A4BkqotDQBjXxTAaluqHSUd7AuPw8VLqq0gUNEcpO
+c0Hxbl+mzsCks11QsVKOQpF+hcWpBKrFOiXDNrZerXM25MNDhpW7qbORjr/GCXx
kqz0AHwHPYeohbkYd4yOlbpt2X5A+bCB+XYZFnRNVaJFhBde5Noc0xbP5Ha9u7BW
Pp0Vin9+AFgiZ0VTLL0dvtnfAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQU+swzUrzj
gChT2/SwQFJc/B4VLmAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFCMjJFLzhCRTEwMDg0Mzc5NTExRUY4N0NGRDY0QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExQjIyRS84QkUxMDA4NDM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi8tc3d6VXJ6
amdDaFQyX1N3UUZKY19CNFZMbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlVkMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8/lAMA0G
CSqGSIb3DQEBCwUAA4IBAQC+8OTzh5TcQZCr7ZEPy8QKUSf03jwXcVUuMrXpmvp/
qar+l2rUtI9ImNYU+wKtMVpVwkZzvgVfnbyuLsg7wCgBNThM5vHy2akPJKYT14sG
TW17AT4btDStHvXQ09EucFkI5yHyRlCecq9x08X2EKwsnXqlQkyEV8Ct5B7c6/Q9
ViW6ZYD8BXXy4rm5AHq4u4w5j0gkv+wdUEeIoYe6Qrjt3Gmf+/aiSiUiGr9nfK29
FzNw5HYjNxHtzwn1TA+LRhHdNocCpyHxPmn3pZB8q65uekAaKSJ9FSP+VqxA0Xau
Vb8xKn0xnlEZqPaNusk8B5/HT4CIgNLFYIlQvHyyXd2g
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:30:09 2025 by rpki-client