Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
File: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer (raw, json)
Hash identifier: HqRnH+QtC6zgtYX0Nxa4m5CRiQSE7BhfxuC0BCALI7s=
Subject key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026F78
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Oct 2025 14:54:53 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 123.253.4.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159608 (0x26f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 27 14:54:53 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:71:75:2b:22:a6:bc:34:2a:1d:b4:fa:65:
fb:11:bf:ff:31:0e:16:9f:e6:e6:94:18:3f:e3:77:
98:dd:8c:34:aa:33:2b:4c:9b:53:56:ff:36:86:0c:
34:9f:2f:e2:8b:e6:b6:f1:55:99:d5:bd:65:30:f1:
13:cf:d7:d6:2f:e6:fc:8f:fb:4f:2b:5a:35:96:9d:
62:21:ed:59:dd:60:b4:d8:78:cf:9d:8f:66:6b:42:
46:77:1c:51:95:55:87:86:58:b0:2a:1f:a6:bf:db:
14:d3:9a:3c:61:c1:2c:dd:fe:75:1b:f3:c4:d3:61:
8a:57:e6:df:36:7f:69:76:cb:09:60:60:30:e3:14:
d6:e0:03:e6:59:65:57:ec:60:d6:a7:9c:4d:40:7a:
4c:21:b9:c0:42:c4:4d:83:df:c4:6f:66:a6:5f:12:
f6:e5:8d:56:1d:68:9b:2a:11:15:90:1f:7a:ad:85:
1b:93:4b:c5:92:3a:84:a3:eb:11:34:29:8a:03:b4:
63:56:3c:52:cf:81:8c:a5:81:ea:88:85:1e:e2:af:
ee:27:54:b4:a0:b0:2c:49:b9:2f:9f:4b:8d:b6:44:
57:1c:d3:3b:6d:4a:a3:89:33:0d:2c:ad:bc:ba:bc:
ba:13:8d:96:44:d1:5f:71:d0:39:42:44:55:ea:ee:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.253.4.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:73:7d:7f:17:65:72:82:38:72:b8:53:3d:0f:19:85:1e:5a:
1a:f0:84:f6:32:ab:ce:1b:97:89:af:fe:d9:52:cc:68:2b:e2:
75:f5:2f:a5:96:fc:38:00:75:e0:74:f8:68:b5:0f:6a:0c:85:
5a:4a:10:f9:70:28:d2:1b:f3:6c:97:05:92:00:34:8b:a7:46:
f7:21:d7:34:af:ef:5f:1c:b7:82:a5:aa:e7:33:73:27:af:ec:
b7:87:5c:13:4a:5b:90:d6:d8:26:08:4f:bc:b6:49:c9:4f:41:
2e:b2:99:58:fa:09:8f:86:ac:01:f2:39:7c:2f:00:c1:56:b8:
81:b7:97:29:19:af:3f:52:8b:f8:e1:6b:42:13:53:f4:22:e1:
fe:55:9f:86:90:db:c9:d7:48:2d:13:01:49:c5:0d:60:d1:cc:
e2:51:0f:3d:0a:fe:38:1a:b9:98:f4:44:4c:08:3f:18:04:6a:
99:85:72:96:74:16:7d:32:24:61:f5:0c:d1:81:2e:e6:ca:24:
4d:81:55:81:92:57:be:d5:8e:1d:f3:f8:94:c3:aa:d7:d5:f6:
f5:f8:97:34:8d:d7:65:e3:d3:3c:2b:08:a1:05:e2:01:01:03:
b5:f4:e4:d3:c6:9a:63:c9:2f:98:57:4d:af:2d:11:92:8b:69:
f8:ce:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:08:53 2025 by rpki-client