Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
File: MkzIe8yExoFRzDczpQjHilxbSYo.cer (raw, json)
Hash identifier: 0ghAfF3upLBe5UUb8dGiF+4layluvPNEN/kQFU+9rBo=
Subject key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025845
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Jul 2025 12:22:41 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 55422
AS: 133554
IP: 182.23.212.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153669 (0x25845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 12:22:41 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:7c:e8:17:4e:fc:bb:8d:29:32:c0:2a:62:
b8:9d:35:4b:37:0a:40:49:92:0b:29:62:52:52:2a:
03:d9:32:8d:16:72:c1:ad:04:4b:8a:64:15:43:b3:
d2:c7:3b:5a:02:ba:fd:84:4a:eb:25:fa:fa:14:fb:
15:15:d1:3e:96:30:70:a7:87:a3:ba:b5:c4:8c:3e:
17:a1:f2:b5:e3:84:60:a7:3d:94:ae:64:06:47:3b:
1e:ad:5e:e6:ee:55:90:0c:b2:3d:0b:42:13:df:fb:
86:da:33:b2:db:fb:7a:b0:83:e4:7d:7d:8f:42:8d:
72:74:24:16:39:e6:79:21:8c:6d:6f:78:87:18:be:
34:59:52:96:48:26:29:0a:8a:7f:a0:3c:c8:7f:4a:
ce:54:7a:d6:fb:7b:49:a0:a8:01:8f:94:30:3a:26:
87:96:cf:9a:0d:a6:42:f2:0b:c4:93:04:2a:62:c0:
fd:b1:f2:f9:71:e1:3e:f5:53:3b:3b:2f:a4:72:ee:
1f:1a:2d:a6:fc:c3:cf:e0:52:25:08:81:f3:6c:44:
97:df:09:8d:28:92:7c:93:da:fa:9f:aa:08:bc:c0:
84:74:9b:33:7b:de:05:ad:c5:7d:08:4a:45:22:d1:
3a:0e:90:e3:30:66:9f:dd:64:44:57:14:1d:de:d6:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55422
133554
sbgp-ipAddrBlock: critical
IPv4:
182.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
56:db:d7:60:97:78:b2:3e:52:66:0f:ef:03:42:e3:42:d6:24:
35:6a:ed:53:39:3a:29:e2:c8:3c:fa:68:d1:1a:c8:e6:a8:86:
37:25:79:cf:3a:a2:d2:ac:98:c7:87:c0:c5:57:ad:11:f2:74:
6d:6f:b3:5c:97:03:98:9f:8e:8f:e3:1f:72:a2:27:b5:6a:21:
45:d4:b4:88:72:25:b7:55:89:18:01:9e:2b:d7:e3:5c:67:fc:
4b:67:12:16:5b:8e:ca:d2:3b:7b:00:39:3b:19:61:e1:a6:bd:
0c:85:f5:8e:8b:fb:e8:46:33:2b:62:52:8e:b0:ef:95:83:1a:
93:bb:b4:c9:63:bd:14:15:b5:a3:4c:bc:e2:9b:72:4e:67:26:
f6:9f:fb:e7:0d:9b:f7:3c:7a:eb:d6:4f:fe:3e:a8:40:e8:ca:
f2:6f:36:ad:b5:7b:e7:b1:58:4d:29:3b:e2:70:81:61:c1:83:
75:b1:b4:a4:84:52:0a:a6:0e:54:34:6f:22:98:8a:df:04:a9:
e6:cf:d1:70:9c:08:ef:b3:b7:b0:f8:8a:44:c7:d7:93:a1:33:
c8:19:52:09:89:20:a1:a6:35:2e:26:77:d5:55:49:77:ee:06:
3f:53:99:8a:05:d3:78:f2:53:53:f2:21:0f:5c:0e:2f:29:80:
9c:21:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:19:10 2025 by rpki-client