Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.cer (raw, json)
Hash identifier: akOuOj58ZAToF3JXrRvyLfB5OGFcsG5rOrB+Ye5ZsYU=
Subject key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0296B6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:31:13 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 138145
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169654 (0x296b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:31:13 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:49:2d:ca:eb:03:49:44:70:9f:c2:ed:8b:
89:fb:d2:33:80:b3:3d:81:51:69:10:22:e0:df:55:
d6:dd:5b:ad:42:5c:14:b1:15:c3:40:b3:c0:c0:bd:
ab:d1:6c:dc:d2:eb:2d:01:c0:b2:68:de:5a:0c:fc:
24:3e:fd:5e:9c:16:68:74:2a:42:3f:87:c7:19:96:
fa:08:95:97:54:2d:4f:ba:e9:4c:df:36:9d:d5:05:
70:d8:8a:2c:1b:36:af:8c:2e:58:85:99:16:21:00:
db:39:1a:d4:c8:c2:e0:8e:73:45:2b:32:73:ff:47:
d0:0a:f9:19:3b:4a:ce:fc:31:db:d5:ce:1b:df:1a:
fb:9d:95:07:43:01:c0:a0:4c:7f:ff:0c:b5:73:b7:
9e:25:b0:db:d5:48:85:91:94:ba:23:1e:d9:0c:d8:
71:d8:e6:bb:06:45:dc:15:7c:f2:fe:52:c1:8b:5a:
e6:51:b3:05:01:0f:95:e0:cc:0c:86:fd:b8:9e:fe:
7e:63:8b:1f:8d:39:84:52:53:ad:ae:ce:26:f0:f7:
5b:5a:29:ff:cd:a6:42:ab:96:c6:dd:d7:98:7d:a4:
ec:ad:c4:f9:8b:f8:f0:25:02:8b:4d:74:c8:0c:70:
3d:09:66:d7:01:a1:c0:d4:c4:cf:3f:69:cf:f7:96:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138145
Signature Algorithm: sha256WithRSAEncryption
4a:21:42:4e:14:88:14:4d:cb:4b:52:7e:02:65:de:7a:19:c5:
df:ba:8b:e9:e2:71:1c:f7:c6:a9:00:d9:43:06:5b:18:fc:e4:
22:09:3a:57:ab:08:ad:6a:26:cb:d2:83:a5:07:56:3e:b5:5d:
fe:00:c6:43:1a:09:0f:ac:1c:f7:d5:ff:f7:28:e3:de:80:fd:
09:40:0f:26:04:02:0f:4f:82:53:50:cd:7d:0d:a4:c0:88:a8:
4d:b9:9d:6f:75:06:c7:c3:21:6e:84:a2:0a:62:0a:5b:d2:2e:
d5:70:b5:b4:7b:0a:6a:80:82:82:e2:a7:3c:e8:d3:a0:81:a2:
2f:5e:a0:66:7d:f0:86:fe:4f:88:29:b9:19:c4:07:1b:01:83:
07:aa:ad:18:62:fb:1e:ed:1f:bc:76:ae:d6:cf:de:65:f5:2e:
1b:a7:2a:76:42:f7:98:ae:fb:54:4b:72:ab:95:0c:38:a4:8c:
88:5c:a8:22:69:26:d4:a3:61:70:1d:fd:a2:e8:56:c6:ec:f7:
be:01:3d:7b:96:94:8f:e5:57:10:2c:32:f8:df:55:08:19:c5:
72:ff:8b:0c:50:92:f9:4b:28:5c:24:fa:a1:0f:73:fb:8c:39:
5d:f2:22:26:39:36:18:37:44:58:20:2d:b2:93:38:f1:19:00:
89:bf:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:07 2026 by rpki-client