Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
File: w5eLa2eb-tci9fh5zBRsC636yzc.cer (raw, json)
Hash identifier: LrF7ZS+LfxOzpKxUoJFhORhE/Z04fFJ50LsZ4qVIWr4=
Subject key identifier: C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0254C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Jul 2025 07:12:42 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 154038
IP: 2402:16a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152773 (0x254c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 10 07:12:42 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A917877E, serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:97:3a:c7:ab:8d:be:36:e9:8a:21:c7:fc:
cf:a6:08:d3:dd:05:49:0c:a0:62:0f:b6:b6:e2:36:
82:95:0d:62:35:b4:eb:2d:90:7b:23:8e:e0:80:4a:
5f:38:30:bf:a9:90:5a:ac:63:39:21:d5:86:4f:d5:
92:24:b3:17:92:cb:da:ba:5e:e2:27:b9:13:dd:a8:
a5:d8:72:ff:8b:88:60:aa:8f:54:f1:eb:c7:17:b9:
ec:2a:c7:7a:84:f9:a3:a4:21:08:7f:87:01:91:23:
bc:a2:de:94:5e:4b:16:78:76:12:57:e4:f3:31:7c:
09:50:7e:d2:28:a1:7e:f4:b4:15:e2:ba:61:9e:74:
b8:d6:02:9b:eb:5e:f9:03:df:74:68:4b:45:27:3c:
e7:98:93:90:13:05:91:53:de:69:fa:73:73:3c:10:
d0:72:e0:f0:db:4d:15:d6:c9:fc:8b:6e:d6:02:ed:
7b:1d:a4:7d:7a:c4:7d:ed:67:98:74:81:4c:9d:1a:
4a:63:fb:fe:eb:a6:89:c3:65:d3:c3:45:9f:3c:a1:
3d:56:c2:86:ca:00:4d:ea:e7:e7:b8:4a:aa:87:18:
59:51:74:43:88:0f:7b:0a:c5:fe:25:d3:22:e0:51:
d5:95:5c:c8:84:5f:69:7a:cd:2a:b5:f6:5b:ed:3a:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154038
sbgp-ipAddrBlock: critical
IPv6:
2402:16a0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:71:56:ee:6e:71:05:a0:79:54:14:f4:bd:94:d5:c9:30:47:
bc:4e:30:6f:fe:1b:28:7b:fe:73:0d:80:80:d8:3c:15:b6:a0:
04:c2:02:77:85:9c:6f:29:7b:34:55:b5:c9:5d:9f:64:a9:15:
df:2a:95:5f:07:13:29:18:3b:fc:1e:61:58:02:21:20:c9:1a:
e8:a1:59:2f:d4:0c:70:17:ba:8e:aa:9a:c5:bb:7d:86:70:9e:
e2:db:d2:1a:06:dd:d4:2b:48:11:38:47:64:35:70:10:06:b0:
69:91:55:4f:3a:4b:7c:4f:63:2b:d1:10:6c:74:49:28:9c:4a:
62:df:bc:40:26:b2:58:9b:0f:34:53:ad:ba:ec:25:cf:5b:f1:
59:29:f9:ef:cc:5e:f6:d0:0f:31:2d:2d:f8:fd:20:3a:d4:32:
11:ae:c6:ad:fa:d1:75:e9:22:55:02:3d:3d:43:d0:73:a1:02:
86:02:e6:d2:f2:e4:58:f4:8a:1b:56:fd:0d:c4:a1:39:c5:15:
79:bf:19:02:b5:b1:9a:b5:f1:e7:2b:3b:dd:e3:f7:f5:0c:d5:
c8:f0:d8:1c:83:bf:b4:17:56:0e:0b:fd:51:86:ee:86:cb:5b:
33:86:c2:91:fa:a4:66:c0:4e:2b:b7:ad:a5:16:4a:d9:1f:ed:
d6:a0:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:50:21 2025 by rpki-client