Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
File: 9yY4deggn7olR_uOOH2AP3WAvtY.cer (raw, json)
Hash identifier: 7RBxFw5RlpfsDHFPUa5rc8rcon6fCax1REH5xgyPmSg=
Subject key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024D8F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Jun 2025 12:58:27 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 10033
AS: 10074
AS: 10138
AS: 10211
IP: 202.63.0.0/19
IP: 2401:d980::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150927 (0x24d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 11 12:58:27 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:5a:67:4a:41:60:01:31:a8:01:48:70:f1:
71:92:da:7f:64:14:1a:e0:e5:9e:d7:ec:75:1e:14:
86:8a:53:19:96:fd:2a:55:6b:e6:f2:a0:44:de:62:
3a:65:63:a8:97:de:9d:34:a4:98:fe:45:43:d9:a4:
e6:04:5e:93:b8:e9:28:a3:e9:2b:76:94:39:cc:39:
1a:fb:23:04:f1:be:9c:87:e8:66:15:72:9d:fd:a5:
cb:59:59:50:f5:aa:9e:f9:c2:00:db:dd:a9:e5:98:
ce:82:d8:4d:63:b6:e0:2f:fe:87:63:68:d9:7e:43:
80:fd:09:24:73:9f:25:42:4a:0f:c9:10:9b:f4:89:
d7:e9:a2:2a:37:a9:8e:0d:00:56:9d:4e:8a:11:c8:
e9:67:e8:91:31:d8:f6:18:97:ef:a6:89:9d:cc:91:
4c:e7:f9:c7:7e:ca:09:d8:57:51:e3:c7:c2:13:7f:
86:49:d0:be:44:3b:5c:36:7b:c6:17:78:8a:ac:fb:
a4:8f:7e:b5:bb:f4:8b:65:4b:f1:12:3b:04:f7:36:
0e:d0:dc:64:b6:c9:65:f0:67:ed:32:9e:48:14:7c:
6d:f6:5e:72:0e:a5:43:6c:43:a3:5d:87:d9:0e:22:
53:fa:1a:0e:5e:b0:48:3e:e0:d2:1a:15:a6:69:32:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10033
10074
10138
10211
sbgp-ipAddrBlock: critical
IPv4:
202.63.0.0/19
IPv6:
2401:d980::/32
Signature Algorithm: sha256WithRSAEncryption
22:e1:9d:23:91:f9:a7:46:ab:d2:44:d1:ba:f7:d3:3f:dd:d5:
6d:4d:a7:39:78:fd:34:bc:ff:36:9e:c0:b7:55:6b:c4:49:72:
b9:c0:86:4a:4d:43:07:2c:45:c1:f7:b9:9c:bc:5c:00:12:bb:
8d:05:94:b5:0b:f2:fe:5b:5d:c3:06:76:14:9c:c7:e2:fa:d3:
64:67:5d:37:80:00:4e:e3:cb:66:aa:fb:56:0a:a4:94:69:5b:
b7:5a:e4:f0:6a:11:7f:7c:9d:7a:86:5b:d9:90:a2:0a:42:47:
fb:6a:08:29:11:22:05:6a:3d:f6:e6:7a:8b:d1:af:f8:b2:41:
dc:d8:43:4e:8e:0a:42:aa:69:71:1d:84:e5:36:4d:1a:aa:75:
77:33:bd:c5:33:8a:eb:50:18:3b:ab:7a:53:d9:11:3e:3b:dc:
09:19:af:b0:65:df:2c:83:27:4a:e5:5c:30:8b:37:71:f9:08:
8d:c5:99:0a:64:b4:76:6d:dd:d1:74:ad:13:ec:75:42:4b:68:
b6:9e:c0:d5:60:9e:40:b6:0b:54:10:51:78:d2:08:00:8b:5f:
78:f3:ca:45:bc:8a:f1:f9:6d:89:e7:5e:7a:ce:fa:5e:7a:09:
85:9f:6e:6c:43:16:f7:5f:ed:86:9a:a7:f7:dd:23:ab:46:e2:
0b:d2:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:37:10 2025 by rpki-client