Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
File: 2OL6sVCi_VePZ-GbApZTmzdSyak.cer (raw, json)
Hash identifier: YmJzJUqB/VoJpUdG7IPWc3Pu+YFTDk+OTxd6VNI8MoY=
Subject key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025795
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Jul 2025 22:37:07 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 2405:4b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 12:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153493 (0x25795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 22:37:07 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:8e:39:fc:3d:a4:8b:99:85:e0:f0:0c:ed:
bd:eb:7b:d8:47:2c:c4:b5:ec:83:21:53:86:76:ad:
30:26:46:58:03:92:66:fb:f9:75:10:1b:1a:65:45:
fd:45:ca:a9:ce:53:e4:fc:f9:1e:84:2f:95:a9:84:
da:fe:37:d0:97:e8:39:69:6c:d9:e8:b8:92:f4:26:
3b:c2:75:cc:3f:7d:95:a8:f9:47:7c:77:64:07:aa:
b2:97:81:da:1d:60:84:dd:ca:25:85:c0:38:e3:45:
f4:ff:3a:22:35:e8:e5:2a:59:68:67:ae:f7:96:6a:
fc:cb:9e:55:43:19:5e:31:e9:74:11:a4:b7:12:6d:
44:c5:7d:e3:49:a9:5f:71:ae:a2:96:1e:e2:00:4f:
16:54:bd:b7:1f:2a:ee:2d:61:9f:58:c6:39:17:22:
b2:12:ba:ee:58:91:af:f6:49:c7:71:91:c2:c6:2e:
9b:31:2c:e8:a3:6d:02:94:e3:a6:3a:5d:f5:d0:10:
ef:f5:fd:92:a8:8c:c9:44:25:1a:7f:c5:aa:04:c5:
4a:21:0c:2e:0a:80:7a:47:37:71:4e:a4:70:2b:c0:
fa:53:cd:d1:7f:c5:d2:03:f2:af:7b:d5:5a:84:7d:
d5:80:39:f8:3d:70:0c:a1:f2:88:73:3c:76:e2:64:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:4b40::/32
Signature Algorithm: sha256WithRSAEncryption
8b:e9:b1:f6:b3:3a:91:ee:bc:85:fd:de:1e:5a:57:54:ee:ce:
e9:59:8b:a8:48:e0:65:3b:fc:15:cf:43:71:32:49:67:90:05:
53:a3:82:98:6a:71:dc:6a:9c:73:59:85:56:10:e5:11:9a:58:
f1:af:5e:bc:fc:a0:f1:73:94:8d:37:f8:48:16:0b:60:09:50:
04:8a:f6:ff:a1:88:b8:bd:34:17:4a:99:cd:ac:42:8a:8d:af:
0a:fa:19:8c:4f:0e:06:1a:a0:0d:fe:90:5b:9f:b6:0e:5c:e9:
09:1e:ed:30:06:60:3a:59:32:25:21:6d:e6:c3:90:f0:ca:9e:
1b:f9:74:84:70:4f:aa:4a:ed:a6:f9:3c:15:61:5a:af:4e:c6:
5e:d9:c2:92:56:b8:42:23:cb:0d:32:76:98:65:41:97:4f:68:
57:9d:84:ee:36:f0:0a:3b:71:43:3f:63:7b:e8:67:45:9b:96:
4d:56:9a:63:27:28:dc:1f:22:1f:fe:de:c0:71:54:9d:56:c0:
85:49:3d:3f:15:bc:46:53:e0:5a:d8:e8:5c:35:1f:1b:8f:37:
b7:aa:02:5e:d4:1f:2d:46:1f:72:9e:66:7c:bd:71:27:90:9f:
64:ea:b5:f8:32:4b:86:64:b1:87:1a:a8:d4:0d:63:2f:1f:a1:
9f:29:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:07 2025 by rpki-client