Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer
File: eE7A8P-dbYDcn33OORSfxg-WFJk.cer (raw, json)
Hash identifier: 8jCURcJBzdJiyXwjZw9FI04B0SSBRteLoySlpCO+6WE=
Subject key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025756
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Jul 2025 02:01:26 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 153037
IP: 2001:df3:fa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153430 (0x25756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 02:01:26 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:03:dd:e6:5a:d5:3b:74:f8:62:61:4a:d4:
eb:70:3c:bd:a9:a7:dc:e1:de:b6:9e:a8:82:5c:10:
3f:52:ef:d4:72:72:d0:38:0b:e8:f1:68:b0:ea:01:
47:c6:c1:4a:80:19:95:34:3f:0c:bb:1b:4e:f6:e1:
9a:5f:df:71:f3:b2:6f:6a:b5:c0:6a:5a:d4:f1:e3:
fc:42:f9:d2:e1:e7:0a:c8:63:bc:4f:ad:f5:d6:15:
72:99:fc:c5:4b:72:f7:ac:d4:ab:fc:fe:49:fc:fe:
21:5d:27:72:9d:df:cf:86:96:7d:47:1d:57:bc:fd:
24:d0:76:da:9e:f0:03:61:76:c5:65:9b:28:f4:5e:
9a:66:7f:17:f8:74:44:b0:3c:3c:cc:54:70:83:87:
99:97:2d:3b:94:90:12:f3:6f:60:cf:23:0b:d2:30:
1f:d8:37:6c:c8:26:9f:89:9a:6c:83:17:a5:4a:ff:
69:a3:31:75:0f:36:f6:07:91:b1:27:1f:21:7a:24:
f5:04:ab:e4:d5:26:ed:14:68:7d:89:e8:d5:44:c0:
8b:63:01:f4:78:03:f7:cc:f1:c6:4c:2e:95:7f:43:
5b:39:08:54:79:54:a6:0d:d7:4b:f5:0b:7b:5f:ff:
83:11:df:f1:bc:21:43:62:43:51:66:e0:b4:c5:45:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153037
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:fa40::/48
Signature Algorithm: sha256WithRSAEncryption
6d:0b:00:57:c2:6b:9c:05:96:3d:b5:10:71:4a:76:38:53:39:
cb:38:34:52:5b:13:94:1b:4f:3c:7f:a2:e9:dc:cf:fc:00:d5:
03:bd:92:7e:43:c9:31:79:03:ef:cd:12:2d:c2:2e:c2:cb:74:
43:7b:d8:e7:b0:c6:f2:10:80:70:30:cd:71:54:bc:b6:66:3d:
0a:9d:f6:71:ca:39:fb:91:51:6d:77:57:03:6a:9d:2e:4b:52:
89:9b:d7:68:99:47:82:d7:83:bc:b4:26:2c:6d:68:02:30:4d:
32:8e:36:b7:a3:66:2f:bd:36:f3:43:23:2a:00:cb:98:fd:d2:
af:b5:79:25:bf:f6:36:dd:29:58:9e:85:67:0e:fa:77:13:27:
c5:a2:2e:50:6f:9f:e7:ef:21:0e:bd:e0:0a:b2:9d:31:1d:27:
88:f2:01:99:91:4f:c7:44:d5:ed:1f:ed:a4:52:b0:29:ac:54:
3f:32:b9:e9:a9:24:6c:2f:6e:15:8a:78:1c:6e:e6:07:5b:b7:
ed:b3:e9:e2:d1:28:78:9e:18:9d:43:e9:5b:59:93:31:6b:b0:
00:25:14:d2:a6:73:9e:d9:d5:9c:da:b3:13:fa:84:57:40:bc:
ac:5f:b9:a4:9a:96:7b:54:f1:51:6a:2c:e1:9e:1b:b9:d0:94:
6e:d4:79:7c
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAldWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcyMzAyMDEyNloXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RD
RTM5MTQ5RkM2MEY5NjE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF4QPd5lrVO3T4YmFK1OtwPL2pp9zh3raeqIJcED9S79RyctA4C+jxaLDqAUfG
wUqAGZU0Pwy7G0724Zpf33Hzsm9qtcBqWtTx4/xC+dLh5wrIY7xPrfXWFXKZ/MVL
cves1Kv8/kn8/iFdJ3Kd38+Gln1HHVe8/STQdtqe8ANhdsVlmyj0Xppmfxf4dESw
PDzMVHCDh5mXLTuUkBLzb2DPIwvSMB/YN2zIJp+JmmyDF6VK/2mjMXUPNvYHkbEn
HyF6JPUEq+TVJu0UaH2J6NVEwItjAfR4A/fM8cZMLpV/Q1s5CFR5VKYN10v1C3tf
/4MR3/G8IUNiQ1Fm4LTFRac7AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUeE7A8P+d
bYDcn33OORSfxg+WFJkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZBNjlGL0M2NjVERjIyMzNBMzExRUZBNUI0OUIyM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGQTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAt
ZGJZRGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlXNMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8/pAMA0G
CSqGSIb3DQEBCwUAA4IBAQBtCwBXwmucBZY9tRBxSnY4UznLODRSWxOUG088f6Lp
3M/8ANUDvZJ+Q8kxeQPvzRItwi7Cy3RDe9jnsMbyEIBwMM1xVLy2Zj0KnfZxyjn7
kVFtd1cDap0uS1KJm9domUeC14O8tCYsbWgCME0yjja3o2YvvTbzQyMqAMuY/dKv
tXklv/Y23SlYnoVnDvp3EyfFoi5Qb5/n7yEOveAKsp0xHSeI8gGZkU/HRNXtH+2k
UrAprFQ/MrnpqSRsL24VingcbuYHW7fts+ni0Sh4nhidQ+lbWZMxa7AAJRTSpnOe
2dWc2rMT+oRXQLysX7mkmpZ7VPFRaizhnhu50JRu1Hl8
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:05 2025 by rpki-client