
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vW8yJwkswpQOGkXy4_RJHw3c26I.cer
File: vW8yJwkswpQOGkXy4_RJHw3c26I.cer (raw, json)
Hash identifier: OpfmdsKUIW+OK7tjPM5nFx/Sa4I45MMUj9ys9yWDrX0=
Subject key identifier: BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025710
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Jul 2025 13:48:42 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 133959
IP: 2402:5080::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153360 (0x25710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 13:48:42 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9130D77, serialNumber=BD6F3227092CC2940E1A45F2E3F4491F0DDCDBA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:ff:4e:a1:20:fe:19:26:8e:2c:cf:c8:69:
68:95:9f:e0:25:00:33:f9:6e:6d:1c:37:6c:3a:85:
3b:95:7f:46:ca:17:9e:6a:16:9a:dd:83:ef:5d:1f:
9c:f4:84:5b:2a:8b:b0:89:35:99:5e:75:27:7e:e8:
8a:dc:f9:8a:bd:a2:23:67:c2:7c:da:07:e4:1b:03:
4f:8c:e0:94:74:bb:6c:a2:58:df:b1:ac:f7:7b:64:
9b:ec:ef:b4:d6:96:e3:85:05:cc:75:85:a8:97:76:
3e:d2:52:2a:8b:f7:c1:b9:f6:22:e1:00:a2:8f:76:
a5:94:ff:77:65:be:24:48:ff:2e:99:89:7c:2a:d3:
a5:4d:d7:1a:6b:bf:42:88:09:89:c8:a9:2b:21:3e:
ce:d1:dc:4f:49:f7:7b:a9:e4:1f:bb:d8:ac:74:75:
bb:58:1e:2f:41:81:85:ec:f0:8c:f8:a0:90:1d:eb:
2e:25:6c:82:11:1f:4c:68:4f:b8:1c:14:9d:ad:b8:
b7:42:15:13:08:09:d5:f3:06:06:4c:5e:bb:40:f8:
04:7d:4e:ef:ad:56:50:21:12:9c:c1:e0:60:ea:48:
ed:31:03:85:e1:f0:08:5d:d8:f7:79:e3:fd:2e:83:
77:bd:ad:df:6b:45:50:48:36:88:8a:21:23:52:8e:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133959
sbgp-ipAddrBlock: critical
IPv6:
2402:5080::/32
Signature Algorithm: sha256WithRSAEncryption
8c:ee:f8:76:02:66:b3:07:f3:97:dd:d0:82:91:c4:e3:59:bf:
59:54:c6:9d:b7:14:37:f5:26:4d:c2:c4:2c:5a:5e:29:b3:90:
05:10:a4:26:a1:97:8f:0a:10:5b:cf:9e:6c:88:47:a1:a4:b9:
1f:89:67:91:46:a8:31:48:53:8f:da:e1:f8:38:e1:48:43:a8:
d4:b8:ca:5f:9e:87:87:4d:a0:a4:71:45:a1:dd:f5:12:11:06:
03:be:73:07:f8:d1:94:b7:a6:55:58:b0:e3:23:75:80:c3:d4:
4f:44:6d:c5:ec:b9:36:62:39:3e:a1:1a:41:da:c0:91:6a:e5:
26:77:a8:78:8d:66:95:ce:c3:ed:90:b8:8d:df:ba:df:21:fd:
26:ac:21:22:33:3e:56:56:d8:8e:23:13:8f:c7:78:b4:40:1f:
97:e0:24:55:83:25:63:21:53:19:05:c0:e6:38:fb:07:8e:cb:
50:a1:74:a8:3c:b5:2d:2b:50:8e:02:a1:2e:39:a9:a6:d7:56:
35:e0:ed:f8:4d:b5:1d:85:94:0e:17:8e:10:de:37:a2:32:87:
e0:9a:f1:b0:d9:db:fe:1d:bc:84:6e:08:fd:af:76:f6:8f:28:
ab:8f:58:8f:b2:2c:53:28:63:72:8c:88:f2:af:18:22:5c:73:
ea:1a:59:35
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAlcQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcyMjEzNDg0MloXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzBENzcxMTAvBgNVBAUTKEJENkYzMjI3MDkyQ0MyOTQwRTFBNDVG
MkUzRjQ0OTFGMEREQ0RCQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/X/9OoSD+GSaOLM/IaWiVn+AlADP5bm0cN2w6hTuVf0bKF55qFprdg+9dH5z0
hFsqi7CJNZledSd+6Irc+Yq9oiNnwnzaB+QbA0+M4JR0u2yiWN+xrPd7ZJvs77TW
luOFBcx1haiXdj7SUiqL98G59iLhAKKPdqWU/3dlviRI/y6ZiXwq06VN1xprv0KI
CYnIqSshPs7R3E9J93up5B+72Kx0dbtYHi9BgYXs8Iz4oJAd6y4lbIIRH0xoT7gc
FJ2tuLdCFRMICdXzBgZMXrtA+AR9Tu+tVlAhEpzB4GDqSO0xA4Xh8Ahd2Pd54/0u
g3e9rd9rRVBINoiKISNSjqSPAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUvW8yJwks
wpQOGkXy4/RJHw3c26IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMwRDc3LzU0QjMwNDIyNDU0MDExRUI4ODYxMzUyRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzMEQ3Ny81NEIzMDQyMjQ1NDAxMUVCODg2MTM1MkZDNEY5QUUwMi92Vzh5Sndr
c3dwUU9Ha1h5NF9SSkh3M2MyNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgtHMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJQgDANBgkq
hkiG9w0BAQsFAAOCAQEAjO74dgJmswfzl93QgpHE41m/WVTGnbcUN/UmTcLELFpe
KbOQBRCkJqGXjwoQW8+ebIhHoaS5H4lnkUaoMUhTj9rh+DjhSEOo1LjKX56Hh02g
pHFFod31EhEGA75zB/jRlLemVViw4yN1gMPUT0Rtxey5NmI5PqEaQdrAkWrlJneo
eI1mlc7D7ZC4jd+63yH9JqwhIjM+VlbYjiMTj8d4tEAfl+AkVYMlYyFTGQXA5jj7
B47LUKF0qDy1LStQjgKhLjmpptdWNeDt+E21HYWUDheOEN43ojKH4JrxsNnb/h28
hG4I/a929o8oq49Yj7IsUyhjcoyI8q8YIlxz6hpZNQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:49 2025 by rpki-client