Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
File: 446z9aUQfjDwynHd6nWxcNCwMlY.cer (raw, json)
Hash identifier: Ap8Ffh69UPjl+rYbLWxgABiQRQ9Aziel/QkOu7GeZkI=
Subject key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029367
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:14:53 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 139318
IP: 2001:df1:1840::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168807 (0x29367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:14:53 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:b8:33:ac:9b:cc:9b:3d:89:46:a2:64:32:
70:ec:ec:f7:e2:bf:8d:09:da:0e:25:a9:b6:a8:b8:
b5:84:8e:0d:40:4f:bc:96:ad:43:09:9c:a4:3d:1d:
2e:66:52:0f:c4:ad:39:f5:79:c8:10:89:4b:1e:0b:
4f:74:41:25:ee:f7:84:c1:82:b6:98:ca:a9:de:97:
b3:a6:b6:e8:cf:de:2f:b2:9d:cd:4d:53:27:b3:1a:
ba:4f:22:3c:b3:73:ea:46:b2:db:24:e5:ee:39:d0:
c7:85:8e:9a:e4:d1:9d:c4:62:df:32:ea:8e:d5:93:
f1:95:1e:3a:04:dd:45:85:24:49:60:9c:4d:18:b5:
76:57:86:04:03:82:e9:ec:fe:a1:6a:54:08:7a:f0:
e3:c1:ef:65:d9:5b:c2:13:bd:8f:64:40:f7:8e:16:
41:94:15:41:55:da:b2:c8:43:09:69:f1:d6:87:fb:
f2:e8:3e:87:6d:bc:fe:a5:71:7b:d0:49:a6:71:31:
78:b4:6c:74:e1:ca:8a:61:32:94:a9:a5:55:46:c0:
24:81:d1:ad:60:db:ae:6a:c1:e8:76:3e:cd:65:b4:
62:54:20:c2:f4:c4:41:1f:9e:18:f7:cb:fd:f0:78:
d2:c6:1e:69:53:c8:8d:8a:00:3c:1b:dd:11:4f:4f:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139318
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:1840::/48
Signature Algorithm: sha256WithRSAEncryption
00:fd:c2:c2:59:d0:2b:4c:0c:73:25:26:15:66:41:95:68:0c:
9b:30:5a:e4:a0:e9:a8:af:28:a0:75:5a:34:16:6c:07:1e:0c:
55:51:cb:4c:e8:43:d2:9b:8f:a7:91:20:eb:b2:3a:9b:33:a6:
eb:fe:0e:ea:f3:ed:2e:7a:a2:86:39:38:d6:d2:cf:22:10:29:
79:13:76:cb:a5:a6:67:b2:aa:bc:d3:b9:4e:47:2d:aa:8f:91:
a1:05:1c:18:27:58:f6:19:b9:7b:fa:15:2c:3d:63:3a:fc:4c:
48:58:89:70:12:e6:89:a0:ea:e4:a8:87:8b:0b:f4:19:4c:6a:
7f:4b:70:57:57:fb:fe:36:ce:06:a5:45:9d:bd:11:a0:eb:94:
79:6e:64:cf:fc:b0:e8:77:ca:a5:b7:7a:ff:8b:16:2e:e4:34:
cd:a6:10:1b:c7:a4:97:23:7f:58:5a:4b:1b:dc:2a:36:23:c9:
ff:20:0e:78:bc:bf:56:5c:3e:6f:e3:f1:fa:4b:bb:ba:01:3b:
4f:ab:ba:37:94:ef:54:32:51:9e:c4:84:68:66:fb:2a:b4:75:
65:27:f6:a5:89:30:72:a6:1e:f9:08:2b:be:20:5e:3e:96:6b:
9f:34:b1:1e:5a:d7:56:b4:c7:09:23:49:ab:e5:bf:03:17:56:
38:5f:96:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:59 2026 by rpki-client