Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
File: asoRKbI4x6HxeRt1zUmta9at-nc.cer (raw, json)
Hash identifier: V+yct4WEj48NmLFwpse+iUyFueGFvq0iUixZdH/1Cgc=
Subject key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0259FA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Aug 2025 03:35:32 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 153529
IP: 2001:df4:efc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154106 (0x259fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 03:35:32 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:4e:98:34:bd:e8:27:3a:0e:d9:fd:e4:48:
89:ca:ff:b3:c3:0e:f4:bd:ec:c0:52:52:24:e0:04:
0b:f5:3e:f3:19:fc:4b:d5:42:3f:c5:61:39:ab:01:
a9:ee:ae:b1:13:d5:f8:1e:54:54:71:a4:e7:e4:c0:
51:67:98:74:10:04:9a:3a:95:c7:26:d8:bc:ad:68:
9f:f1:b6:27:89:95:66:81:8e:c3:ef:9c:74:e6:0f:
cf:8a:cf:e5:3c:10:44:06:50:c5:75:21:2a:76:98:
22:62:ec:43:23:4d:9b:41:40:08:69:dc:7c:47:6b:
d1:63:1e:a1:fa:6f:c5:63:1d:21:b0:fd:b1:08:08:
11:22:ec:77:4c:88:cc:1b:7b:81:b2:b5:5d:d0:76:
7e:f7:6d:e2:29:63:bc:be:95:81:74:95:1a:73:07:
91:58:a2:9f:63:de:5b:ef:92:66:6e:46:6c:0c:99:
e8:27:3c:08:0b:4d:9d:c0:dc:38:63:c9:66:c4:5b:
ae:7e:74:ce:61:c6:95:f2:c6:4e:91:21:13:a1:2e:
42:fb:b0:b7:26:81:3c:28:3f:03:86:e1:a8:5f:f5:
31:9f:ed:f3:09:48:3e:e3:c8:86:0e:c1:dc:09:ae:
75:c4:be:74:04:ca:c0:1f:ce:2f:39:87:e5:85:ad:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153529
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
d6:63:50:18:49:f6:ab:69:a0:48:2b:62:02:12:92:89:77:53:
49:51:b9:86:66:c0:31:66:8d:b5:90:10:b8:1d:e5:25:c1:e9:
e1:3a:a6:9d:68:42:2e:ff:95:4f:f6:78:a6:91:9c:3c:f1:b2:
d6:70:75:23:bc:c3:2e:9e:f5:8c:47:87:70:ff:7a:d8:0f:cd:
2e:1e:fb:20:af:6f:09:18:f7:6a:c5:03:f5:4d:a0:6f:b6:d5:
5e:83:98:b2:10:86:04:5f:aa:38:a9:d7:bb:38:30:52:19:d2:
4f:54:a9:df:7b:bf:34:15:d4:7f:74:76:40:27:7a:05:97:28:
64:0b:81:d6:40:33:1a:83:1a:d3:53:15:fd:e2:61:65:bf:3b:
68:f5:f2:50:dd:ca:3c:ea:54:9d:4c:a3:34:ea:cc:93:d2:a5:
d7:69:ee:28:ca:8b:3f:ed:0c:8e:4e:26:e3:24:a2:01:b5:3c:
06:53:0e:0f:27:a7:7d:07:b1:80:7b:ba:3a:bc:ea:15:0b:5a:
2a:e8:d2:cf:b8:f7:b3:5b:8b:e4:7e:a9:a3:fa:76:22:39:84:
64:1d:ef:73:28:61:e8:07:f3:85:08:b2:f6:24:34:8f:40:52:
6a:1f:0a:58:80:40:df:76:85:2d:bc:41:9b:45:a8:6f:68:e4:
fc:65:9f:3d
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAln6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgwMTAzMzUzMloXDTI2MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTZGNTYxMTAvBgNVBAUTKDZBQ0ExMTI5QjIzOEM3QTFGMTc5MUI3
NUNENDlBRDZCRDZBREZBNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDU906YNL3oJzoO2f3kSInK/7PDDvS97MBSUiTgBAv1PvMZ/EvVQj/FYTmrAanu
rrET1fgeVFRxpOfkwFFnmHQQBJo6lccm2LytaJ/xtieJlWaBjsPvnHTmD8+Kz+U8
EEQGUMV1ISp2mCJi7EMjTZtBQAhp3HxHa9FjHqH6b8VjHSGw/bEICBEi7HdMiMwb
e4GytV3Qdn73beIpY7y+lYF0lRpzB5FYop9j3lvvkmZuRmwMmegnPAgLTZ3A3Dhj
yWbEW65+dM5hxpXyxk6RIROhLkL7sLcmgTwoPwOG4ahf9TGf7fMJSD7jyIYOwdwJ
rnXEvnQEysAfzi85h+WFrf4LAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUasoRKbI4
x6HxeRt1zUmta9at+ncwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE2RjU2LzkxM0NBNkU4NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNkY1Ni85MTNDQTZFODZFODgxMUYwQUQ1RDFBMTJDNEY5QUUwMi9hc29SS2JJ
NHg2SHhlUnQxelVtdGE5YXQtbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAle5MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9O/AMA0G
CSqGSIb3DQEBCwUAA4IBAQDWY1AYSfaraaBIK2ICEpKJd1NJUbmGZsAxZo21kBC4
HeUlwenhOqadaEIu/5VP9nimkZw88bLWcHUjvMMunvWMR4dw/3rYD80uHvsgr28J
GPdqxQP1TaBvttVeg5iyEIYEX6o4qde7ODBSGdJPVKnfe780FdR/dHZAJ3oFlyhk
C4HWQDMagxrTUxX94mFlvzto9fJQ3co86lSdTKM06syT0qXXae4oyos/7QyOTibj
JKIBtTwGUw4PJ6d9B7GAe7o6vOoVC1oq6NLPuPezW4vkfqmj+nYiOYRkHe9zKGHo
B/OFCLL2JDSPQFJqHwpYgEDfdoUtvEGbRahvaOT8ZZ89
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:51:33 2025 by rpki-client