Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer (raw, json)
Hash identifier: kiztVQ7BNWOk9zv6P6rwNEQYGDusYLmwWxBciQ0bMg8=
Subject key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027188
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Nov 2025 04:02:44 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 36.50.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160136 (0x27188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 1 04:02:44 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:ed:15:0b:ec:cf:5a:b6:3c:79:38:8f:70:
f7:25:82:13:9f:83:a5:8b:4b:32:94:56:20:b0:a4:
4a:ca:28:2c:7e:68:f2:dc:96:6c:3c:83:ef:23:dd:
5a:c1:4b:75:95:f1:fc:04:39:bd:1d:3e:b8:4b:09:
37:b2:13:6e:be:ac:c2:3d:c8:76:49:e0:e3:10:74:
e1:96:e6:b1:13:16:9f:56:e6:5f:59:35:b3:d6:a9:
33:51:ff:e8:1d:ba:af:0e:2b:2d:18:ab:db:ad:2d:
cf:fe:7e:f9:e1:49:51:47:0d:fd:c6:08:1d:fb:f2:
d0:06:19:16:32:92:59:df:1b:80:b2:db:c1:1a:74:
e2:df:db:cf:9f:60:49:44:54:c2:95:54:8e:ec:9d:
cc:b6:48:74:22:4b:25:a2:7d:db:13:72:1d:33:05:
cb:dd:35:61:f2:a9:03:45:7f:d5:f8:4f:bf:b3:14:
0e:0b:36:ee:22:6e:09:cd:0c:ea:d6:ae:b4:9b:16:
e5:ef:6a:64:6e:93:36:86:48:f8:cf:68:e2:2b:c8:
a4:36:e6:d0:fb:99:ca:74:42:cb:be:0b:15:0b:7b:
76:ce:01:ea:a7:1a:63:b0:4d:2b:06:c2:08:ad:28:
2b:34:27:85:d0:88:44:4d:a6:14:cc:af:1e:0f:06:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.32.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:28:a6:5c:35:fa:96:bc:a6:d4:87:12:64:fc:0c:1d:e0:40:
e1:a3:46:68:94:08:f7:b2:da:77:99:b3:8d:9d:9f:ef:28:61:
54:df:b3:c8:20:db:45:65:8b:50:09:48:b6:e0:0a:d5:e7:7c:
ed:4b:d6:ae:bb:cd:89:a0:43:d0:0f:ba:7f:4b:67:e7:60:03:
a8:8e:ca:3b:44:3a:63:0e:77:02:f8:20:12:0e:fb:c5:19:df:
50:96:bc:7e:05:35:69:d0:57:04:2b:90:42:8e:5c:23:2b:c3:
7a:9e:01:b4:da:13:f3:23:65:08:2a:6d:0d:c3:63:f4:34:33:
36:15:b6:4b:4b:6c:f4:b2:00:55:82:a2:47:70:b6:91:cd:91:
76:6d:be:aa:7b:77:e7:00:2d:e4:5b:9d:bc:71:a2:cc:15:91:
2c:15:42:fe:51:88:73:71:6c:19:c3:24:fb:59:70:69:82:ca:
2e:b1:3a:35:78:c8:5b:ee:6f:fb:5a:87:d6:b7:35:6c:24:ca:
39:a6:f5:72:5c:79:40:e0:a0:96:e8:b6:e1:6c:ea:71:64:11:
e9:70:44:87:3c:38:a4:2b:73:79:55:11:44:da:fc:ac:23:d1:
34:8e:36:6b:1f:f8:c7:70:0e:52:88:dd:c2:cd:8c:01:c8:7b:
6b:fd:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:29:46 2025 by rpki-client