
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
File: 2n7tifhToFCqePhmgZCMmcNRBnA.cer (raw, json)
Hash identifier: IRPlKSXOsq22x/l9tueMpEXQOkE0yLrzFEM1pF73gMg=
Subject key identifier: DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BBA3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 07 Jun 2026 02:24:45 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 4846
AS: 142228
IP: 2402:49e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179107 (0x2bba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 7 02:24:45 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C8A07, serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:27:3f:52:36:b7:af:7b:34:90:f0:40:2b:
ae:ab:45:14:bc:41:3e:3a:73:f3:24:83:7a:d5:21:
a0:71:ca:ea:0c:a1:df:01:4a:4f:89:3a:11:8a:d0:
a0:76:b2:5b:cb:59:ef:23:96:95:01:56:ab:bf:ee:
c9:5f:c8:9b:d2:ae:2e:93:8a:55:12:5a:3b:d8:d7:
6d:e5:17:82:eb:75:a3:45:d9:49:1c:ce:05:a1:3a:
05:af:d3:62:cd:ad:0e:1c:b5:c5:02:99:bd:49:b6:
d7:d8:70:2e:cf:40:1b:35:34:63:cf:a5:c5:3e:7a:
20:2c:4c:d8:67:f5:9e:d6:c4:f4:11:08:a9:e7:24:
da:de:56:19:f2:ee:80:41:a3:ed:e6:e4:3d:87:0a:
bb:b2:77:bd:23:33:27:2b:59:6f:a0:6c:a7:2a:74:
78:66:12:28:db:0b:6a:ce:04:c8:f3:f3:78:d1:ab:
6f:a5:df:27:8d:ff:77:56:81:5b:5f:b9:d8:51:ca:
c0:02:bf:12:39:e2:e2:d8:a7:65:de:ed:21:31:39:
18:f7:a4:3c:b6:13:a7:7c:c8:82:da:f2:d4:4c:fe:
cd:a8:2c:bb:26:f6:0e:d5:b0:97:7a:3d:af:fd:2d:
65:e5:5c:b4:55:ab:45:14:18:69:0f:4c:0f:8a:e2:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4846
142228
sbgp-ipAddrBlock: critical
IPv6:
2402:49e0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:1a:b1:64:0a:2e:76:ad:82:e9:b9:f1:4f:3f:3f:b4:3f:ae:
b1:de:57:ad:76:23:53:68:85:b9:08:88:6f:51:fd:81:b6:c0:
0c:fd:51:7e:c6:c7:5f:44:fa:e5:00:70:64:fc:f4:39:d2:9b:
35:0c:40:99:55:83:aa:17:85:8f:69:f2:5e:55:27:c1:b4:61:
36:d2:48:5d:81:db:7f:b5:55:2e:e3:3a:12:81:5b:06:2a:29:
03:bc:21:7e:6c:e6:0b:3f:fa:9b:20:23:fe:cd:57:03:36:47:
1c:c4:1a:c1:69:bf:69:b3:aa:24:a5:8c:e6:6b:d4:54:e3:92:
33:6f:9f:dc:c3:23:cc:08:10:23:77:25:b4:31:e9:76:6c:d1:
7e:fc:09:b3:48:bc:31:86:25:ab:ac:a0:a7:33:b7:a7:be:e7:
1c:0d:0c:b0:28:2f:70:39:f5:e9:11:41:bf:24:25:c7:77:c3:
dc:a4:b9:fa:e3:64:15:e0:fd:90:4c:1f:5d:ef:28:5a:86:33:
d4:34:49:ac:7a:a9:f4:03:30:b3:4c:8b:54:62:a0:e7:a6:6c:
47:fe:76:a4:8c:ba:96:e8:f1:e5:6d:cb:de:13:21:e4:e5:2f:
98:76:d6:2f:00:d9:fe:df:5d:8c:27:a3:0f:eb:a6:5a:07:e7:
69:79:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:15 2026 by rpki-client