Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer (raw, json)
Hash identifier: anXSITv05uTGw2Y07Dyqf2ABRuCpMWhAmKnpUkVXfSg=
Subject key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02589C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Jul 2025 07:08:19 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 153832
IP: 163.227.202.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 12:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153756 (0x2589c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 07:08:19 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:a6:4b:ca:7d:71:85:2c:30:67:f8:3d:cf:
57:2a:c1:30:89:42:0e:54:b7:53:92:74:df:2c:ca:
2e:56:a1:32:f9:84:f5:1c:a4:2c:7f:2a:e5:68:47:
23:c7:ec:ac:57:28:fb:bd:bb:fe:df:3c:a5:0f:4e:
ad:98:a2:d1:b8:32:d0:a1:8a:0c:55:ea:c8:67:91:
49:6c:0c:e4:10:18:f0:18:29:4b:57:ba:2b:00:79:
94:b1:68:0c:87:36:10:43:82:12:3d:3d:04:5c:7d:
96:73:18:2c:81:bb:9e:51:c4:5a:d2:00:df:4b:c5:
8a:83:7b:1d:7a:a2:0f:c2:a8:c7:58:a7:3b:95:81:
8d:2f:48:05:31:4c:7f:4e:40:90:25:1b:c7:48:eb:
be:9d:63:51:83:66:36:c7:6d:98:5c:93:ac:32:1a:
a9:bf:73:55:4a:69:80:09:d1:27:21:0b:b6:21:eb:
20:fd:04:cf:52:b1:21:d4:35:a2:d1:9a:a3:c0:ac:
89:41:4f:9b:e3:fa:f2:da:78:3a:1b:fa:f5:f3:b6:
dd:ae:43:e3:5f:37:ee:51:05:79:05:86:f9:c5:ab:
4b:77:c0:6f:0e:c7:76:31:08:c3:b9:c9:ca:0c:c6:
d5:e0:06:09:48:4b:fc:48:b7:b3:d6:09:73:c5:f5:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153832
sbgp-ipAddrBlock: critical
IPv4:
163.227.202.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:cf:60:b6:6d:8b:d8:94:1e:e6:95:17:fe:f6:0a:b5:a9:ed:
25:44:cb:44:7f:6a:20:d3:33:a7:3d:94:c5:9e:c2:73:6b:fa:
f3:0b:e4:9a:36:88:22:e6:ae:25:99:ee:8a:5b:e0:69:00:d6:
91:ee:fb:75:fe:03:f9:12:37:26:1d:c5:2f:74:b8:6d:af:09:
6e:82:ab:b5:8e:cf:33:fc:9c:2d:46:60:37:12:30:80:34:16:
7b:b6:ed:46:66:00:44:19:f1:ff:f1:d8:65:1c:64:2c:4a:f8:
66:06:fd:5d:7a:a0:e1:80:aa:e6:4c:8b:8d:53:7f:59:9c:b0:
ce:64:60:fd:98:3c:22:ca:df:5b:d9:0a:1c:f3:35:7b:12:2a:
3e:b1:f6:e4:23:87:a4:ea:a4:aa:a5:c3:9a:86:47:97:44:9f:
84:2c:38:20:d3:d4:e1:a6:4e:57:ed:82:da:55:aa:b7:35:a5:
99:39:bc:90:ad:14:de:9f:47:3e:0f:8f:35:6a:ed:06:3b:1f:
4f:c2:a8:9c:68:4a:c8:52:1c:7a:1a:fd:1f:92:14:28:22:ba:
98:db:13:63:ce:76:7e:10:3f:81:a5:d3:64:b0:5c:35:17:17:
62:07:43:fc:d6:94:dd:cd:97:c0:27:67:a0:6a:3c:da:d6:25:
e5:1c:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:33 2025 by rpki-client