Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
File: tOfjRK3ONthPHzq8zRSyTBUSu6o.cer (raw, json)
Hash identifier: zZzGa933HSj79Fh5UZX23e1kyc9/oK8J2SUe5dRvtlM=
Subject key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025AE0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Aug 2025 12:41:55 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 153169
IP: 2001:df4:13c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154336 (0x25ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 4 12:41:55 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:66:30:40:f1:6d:87:46:90:ee:ea:f1:63:
71:13:2d:f0:a1:2d:69:ce:9b:0f:f5:84:60:23:7e:
67:2c:48:74:39:2a:e7:af:92:91:c9:d2:cf:fa:50:
13:c8:0a:00:b3:3b:73:77:59:d2:2b:84:26:75:d4:
a8:41:cb:9e:a8:8d:d0:70:45:48:7a:61:d0:56:3c:
28:35:c9:5c:68:6c:7c:f1:70:d3:55:6c:e1:3b:27:
0c:6a:18:8d:5e:17:e0:bc:83:da:46:f2:98:33:86:
cb:ce:e1:dc:bc:e8:26:16:93:d2:eb:51:69:e6:98:
97:24:f4:90:7a:87:f7:4f:5d:da:85:42:26:d8:b7:
84:31:20:6c:16:8a:31:34:74:43:81:08:d1:3f:7a:
d3:95:34:93:ab:3b:0e:bf:69:3e:f5:e3:dc:52:1a:
84:14:aa:9a:82:b4:66:33:c0:47:37:0b:b8:6f:56:
fb:05:aa:97:05:ac:c4:94:50:a9:cd:40:93:cd:d0:
0d:96:b1:4e:cc:09:31:8c:9a:54:62:2b:e4:93:7f:
6e:01:4b:77:20:bd:6f:50:e1:e5:d2:55:75:5e:95:
8a:61:ef:77:cf:ea:44:de:c7:b1:38:5b:01:8f:64:
18:36:b6:c2:92:82:22:2a:86:3a:be:c2:58:a3:80:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153169
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:13c0::/48
Signature Algorithm: sha256WithRSAEncryption
1c:01:e3:81:d2:31:c3:44:8b:c8:52:63:b4:58:6d:9f:e9:4c:
75:9d:dc:a8:f7:bd:bf:53:c6:cd:83:0a:2e:72:4a:7f:b2:89:
56:6a:d3:fe:81:79:07:1b:7a:39:46:6c:1a:05:9c:f6:8d:2e:
bb:0f:73:90:a1:2d:07:0e:b5:10:f5:87:77:4e:9c:db:b0:7b:
7b:3b:bd:0d:fd:c0:9d:39:89:07:de:ef:54:72:c1:eb:19:81:
87:dc:c3:b0:08:f5:ef:a0:fa:a8:04:64:eb:2b:7f:f8:f5:7d:
2c:90:9b:d8:59:52:ed:fa:ac:ec:b6:76:db:ea:29:c3:cd:77:
78:be:12:53:f8:bb:bd:72:ee:b5:02:b4:bc:84:85:f7:a7:24:
2a:de:b6:45:d1:ff:ac:06:82:87:82:5e:85:6a:19:5f:39:ae:
74:7a:71:fd:d4:46:9b:fc:98:5f:08:41:cf:d8:22:54:6b:ba:
ae:5c:cd:cc:83:fe:9f:b8:da:f7:cb:fd:0b:b3:21:cf:19:56:
e9:cd:61:ed:5a:f0:10:f7:cc:11:37:6f:c5:64:ff:de:02:ae:
a6:0b:2d:4b:4d:48:15:55:bb:4b:86:2a:9c:81:15:c0:7b:43:
09:92:1e:15:70:58:ed:57:4d:93:25:07:52:20:c7:da:13:25:
a2:a5:c1:ae
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAlrgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgwNDEyNDE1NVoXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FC
Q0NEMTRCMjRDMTUxMkJCQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/tmYwQPFth0aQ7urxY3ETLfChLWnOmw/1hGAjfmcsSHQ5KuevkpHJ0s/6UBPI
CgCzO3N3WdIrhCZ11KhBy56ojdBwRUh6YdBWPCg1yVxobHzxcNNVbOE7JwxqGI1e
F+C8g9pG8pgzhsvO4dy86CYWk9LrUWnmmJck9JB6h/dPXdqFQibYt4QxIGwWijE0
dEOBCNE/etOVNJOrOw6/aT7149xSGoQUqpqCtGYzwEc3C7hvVvsFqpcFrMSUUKnN
QJPN0A2WsU7MCTGMmlRiK+STf24BS3cgvW9Q4eXSVXVelYph73fP6kTex7E4WwGP
ZBg2tsKSgiIqhjq+wlijgKj1AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUtOfjRK3O
NthPHzq8zRSyTBUSu6owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFCREE5LzM2QTUzMEY2NDRCRDExRUZCNzNEQjc3QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExQkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUksz
T050aFBIenE4elJTeVRCVVN1Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlZRMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9BPAMA0G
CSqGSIb3DQEBCwUAA4IBAQAcAeOB0jHDRIvIUmO0WG2f6Ux1ndyo972/U8bNgwou
ckp/solWatP+gXkHG3o5RmwaBZz2jS67D3OQoS0HDrUQ9Yd3TpzbsHt7O70N/cCd
OYkH3u9UcsHrGYGH3MOwCPXvoPqoBGTrK3/49X0skJvYWVLt+qzstnbb6inDzXd4
vhJT+Lu9cu61ArS8hIX3pyQq3rZF0f+sBoKHgl6FahlfOa50enH91Eab/JhfCEHP
2CJUa7quXM3Mg/6fuNr3y/0LsyHPGVbpzWHtWvAQ98wRN2/FZP/eAq6mCy1LTUgV
VbtLhiqcgRXAe0MJkh4VcFjtV02TJQdSIMfaEyWipcGu
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:35 2025 by rpki-client