Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer
File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer (raw, json)
Hash identifier: RdwVPqyGpZtCSCYACDrRjUlbjufLsOoxH9LIy6TwkDY=
Subject key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0257E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Jul 2025 08:37:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 153792
IP: 163.227.98.0/23
IP: 2001:df5:6140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153571 (0x257e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 25 08:37:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0e:09:b7:c3:28:b9:86:e6:01:76:96:15:80:
a8:10:25:48:50:9d:14:6a:c6:4f:70:6d:69:4b:a3:
a7:5b:b0:d2:e8:3b:61:51:46:d3:1c:c0:18:28:d2:
2b:65:36:16:4f:44:44:80:ef:ea:71:ca:da:0d:41:
2d:58:71:eb:92:d8:40:3e:d5:7b:c7:9c:c8:63:4b:
2b:63:9d:e9:e6:d1:a0:e9:af:4f:98:a0:29:84:05:
18:67:d7:cc:06:4e:af:87:0a:e8:2c:8c:74:db:dd:
c3:06:40:f0:a9:02:d9:2e:39:42:6f:bc:f7:ed:65:
0c:3c:59:99:d5:b7:a7:8b:7b:87:03:98:e8:ee:b7:
74:fc:30:9a:56:28:5c:16:6c:b8:5c:0d:5d:b7:40:
9b:83:89:0e:60:b1:89:82:a1:c1:6d:88:1c:8a:30:
ce:0f:9d:38:33:41:93:54:d3:1c:41:39:41:1a:6a:
c7:51:d9:b6:1e:b9:ad:d8:ef:23:7e:3d:c2:da:66:
db:5c:f3:5a:8c:00:46:2f:aa:8d:25:fa:42:20:df:
ec:24:32:d8:6f:ee:36:c8:1a:a5:59:13:62:26:a6:
05:d4:95:53:c8:cc:bf:28:d6:24:34:06:a8:56:53:
b0:76:4a:9b:45:e5:66:39:c8:2c:54:4b:46:d8:53:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153792
sbgp-ipAddrBlock: critical
IPv4:
163.227.98.0/23
IPv6:
2001:df5:6140::/48
Signature Algorithm: sha256WithRSAEncryption
28:b9:d4:83:ac:e3:5d:63:d4:6a:ce:32:00:a0:c8:68:07:e3:
0a:59:f9:20:1e:41:76:3f:7f:d4:63:85:a1:90:72:39:fb:b0:
56:14:9f:08:3c:e5:79:9a:f0:49:b4:2d:5c:2a:f9:26:dc:c4:
a5:4e:0e:b9:aa:91:84:ac:62:d9:4c:a5:de:d7:f4:7d:a8:c3:
ba:c4:11:4b:80:9c:12:a7:e6:a3:cf:34:2a:ca:06:2c:e0:8c:
ed:7d:13:40:dd:9e:14:76:8a:4d:73:03:a5:48:7c:eb:63:0c:
c3:e8:5f:96:eb:03:b2:3d:2b:00:ff:90:e0:a7:93:5e:b8:44:
36:b1:ae:1d:9a:16:42:96:d6:49:be:e9:09:b9:9c:94:b5:f1:
7e:72:4a:21:e1:13:13:49:fd:a2:58:a7:dc:86:8a:96:13:03:
ad:90:47:2e:76:53:43:e5:56:c7:56:79:55:b4:7c:93:e3:c4:
68:20:2e:05:c1:55:d4:7e:13:55:07:08:99:6f:a1:77:74:5c:
98:fe:a3:64:87:01:89:51:01:48:2a:41:40:21:97:dd:26:42:
e9:ba:a1:52:93:01:de:8d:40:37:a7:62:a6:f5:e9:9e:fe:06:
06:86:c5:5e:56:98:67:25:3c:73:50:ff:6b:06:95:c8:74:29:
00:0f:f5:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:35 2025 by rpki-client