Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer (raw, json)
Hash identifier: LHh/ljrh5kZDmgVuKQgZf7H7iIw+5QERbdbGiQ+d5k4=
Subject key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025768
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Jul 2025 04:41:16 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 140698
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 13:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153448 (0x25768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 04:41:16 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:12:97:9f:a9:c3:e9:b6:3d:19:4f:29:14:
dc:18:ff:2f:9e:a8:f1:58:58:6c:e9:5c:ca:f7:99:
99:80:d4:d8:de:c1:c6:60:1d:6a:93:83:40:cc:ad:
4b:f4:52:8a:8a:d8:4b:42:3b:bb:c9:43:90:4a:56:
c5:bf:b2:12:3c:f3:f0:75:ac:f9:3f:45:6e:51:94:
5c:45:da:8a:1c:61:e8:d3:5e:c6:aa:3e:1d:82:31:
25:5e:b1:90:a9:8e:47:f3:35:bd:34:b2:90:ba:e7:
af:6f:48:d2:bc:f5:be:d1:5d:49:cb:0c:dc:90:35:
a5:35:ec:fc:c9:2a:0c:bd:a9:5a:b6:aa:b3:3d:11:
8d:c8:e8:7b:f8:b7:18:18:7a:2e:b1:06:e1:fb:d1:
25:c9:a5:0c:b8:7d:0b:f0:f2:d9:ae:93:36:37:58:
76:76:f0:95:76:97:a9:ee:67:ee:9a:ca:7d:22:38:
19:34:87:f3:19:d5:00:71:b6:b4:2d:51:04:f9:0d:
62:29:dd:8e:e1:ae:b6:ad:ef:19:dd:ce:6e:28:2a:
79:67:bc:99:e2:f1:4e:72:23:73:a6:99:20:38:15:
84:70:1c:e1:d5:77:4c:dd:e7:33:de:08:ef:8e:6e:
28:d0:c4:8e:31:b3:ff:8a:53:17:4c:77:d3:b3:ad:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140698
Signature Algorithm: sha256WithRSAEncryption
a6:8b:27:c7:cc:0d:fe:23:09:62:f2:88:60:1d:9b:50:75:e4:
d4:ff:fd:1c:44:df:d4:4d:da:37:47:a7:b3:af:97:9d:e8:be:
20:41:3d:d7:44:cc:45:23:49:48:44:d0:b0:ea:72:ec:c8:28:
10:7e:e7:7f:ef:8f:69:71:d2:81:52:e1:8c:c4:ef:c0:9c:b0:
35:c4:5b:a1:44:cb:31:e6:4f:e1:07:cd:73:11:a5:cb:06:57:
89:b7:a6:31:9d:13:55:9e:4e:c2:f6:27:81:8b:54:9c:5e:d2:
11:23:96:0e:ed:e0:8b:6e:a1:f1:40:27:80:2f:61:52:49:2a:
74:36:2f:25:b8:42:55:19:3e:3f:a3:08:8d:78:4e:70:3a:ca:
df:a7:b5:76:0c:63:34:46:c4:dd:4b:9e:7c:7b:e2:09:8b:5c:
95:35:82:60:00:db:c6:03:40:39:3e:e2:93:dc:df:00:59:39:
d4:b0:36:9a:88:65:a6:d2:60:bf:d8:2a:bc:d3:dd:0f:91:0d:
36:65:c9:94:e0:0e:49:19:e9:c6:0d:5d:f5:8d:c2:ed:d8:df:
d8:f8:d8:1d:62:45:4b:d4:e0:da:a2:40:6a:6c:17:67:8b:bb:
f4:11:3c:73:79:b0:32:86:cb:77:9a:86:b3:48:4e:e6:14:40:
6a:3f:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:46 2025 by rpki-client