Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
File: 7D2Af3k8nPX84zXuFeCYREm0MJY.cer (raw, json)
Hash identifier: PCrlR8K5uuPOQZodgoddhpfK0+B8UsiMf+HfnkUNnQQ=
Subject key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B825
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 May 2026 13:04:58 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 18219
IP: 203.34.237.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178213 (0x2b825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 30 13:04:58 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:df:35:69:ce:de:80:6c:27:6d:94:72:52:
cd:66:c3:5c:c1:77:aa:3e:5b:61:50:e7:94:b4:da:
19:c0:0d:12:65:1f:95:ba:f3:dd:23:8d:e1:aa:6e:
e8:26:f1:6e:c0:fb:fa:4f:0c:63:83:f1:e7:2d:d5:
0d:02:4d:83:03:50:23:09:82:c2:31:0d:ac:79:f1:
44:67:88:79:d4:7d:bf:b1:f8:6c:e9:18:e4:bc:e5:
e8:aa:89:a7:96:dd:7b:a0:53:bc:6b:49:c2:4b:12:
31:d9:f8:46:c6:bd:76:58:4e:48:96:1d:06:63:4b:
e4:81:d2:fe:e2:c5:33:c0:39:2f:d0:d5:33:86:ec:
f7:3c:4e:5d:1f:7d:7b:37:fe:a4:9a:c8:d4:b3:52:
be:b0:99:3f:bc:70:f8:e6:1f:05:10:f0:f0:55:6d:
e5:f9:a3:1d:55:c8:3f:06:52:73:85:01:3e:53:a9:
ce:20:aa:a1:a6:10:88:53:28:e4:09:86:cd:18:83:
d4:f7:12:0f:d9:b7:8c:7d:e6:20:d1:71:01:b6:86:
29:64:a9:69:23:bc:08:70:22:7d:79:d3:24:22:86:
73:65:71:b3:be:92:26:ec:6a:04:e4:1f:1b:c4:58:
d6:6a:6e:9f:87:10:5d:f0:20:d1:1a:82:fa:d7:d7:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18219
sbgp-ipAddrBlock: critical
IPv4:
203.34.237.0/24
Signature Algorithm: sha256WithRSAEncryption
75:09:2b:62:7a:4b:e3:e7:cd:58:bb:a7:29:06:14:95:47:0c:
bf:24:ca:43:55:dd:f2:ed:49:c3:b6:7c:72:b5:9a:c5:77:19:
28:11:5c:10:21:ff:56:10:f0:7d:19:4e:7b:7b:bb:b6:41:bc:
48:8b:9c:cb:0d:87:4b:e4:7c:4e:98:79:ba:50:78:eb:50:8a:
b4:2a:b8:eb:ad:5b:fa:ea:f1:58:37:be:92:74:34:35:33:26:
e5:1a:2e:cc:e3:95:ca:5a:18:f1:a2:18:0d:d9:1e:db:f0:59:
f0:bb:bf:26:12:22:05:d9:c4:3f:69:1d:21:4f:b8:fd:b0:d8:
1f:da:48:bc:65:3e:fe:04:2a:44:1e:92:46:11:43:5d:8d:f9:
22:ea:1c:9f:a8:74:e0:46:78:c9:ec:d4:4f:4d:aa:c1:74:3e:
6b:2e:16:7f:a7:a1:41:46:2e:aa:c3:72:b9:89:a6:3c:b7:51:
e6:80:92:b9:65:13:5e:80:a1:37:cb:15:07:99:cb:0d:c1:d7:
ec:2c:b5:be:2a:2a:f7:4a:92:75:8e:04:b5:23:1b:f5:1c:80:
d6:88:91:ba:84:70:99:7b:05:29:aa:8d:fa:be:79:04:9f:ff:
80:cf:81:bb:5e:cc:b6:7a:b0:2b:cb:e0:06:6d:ee:dc:22:90:
a2:cc:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:56:06 2026 by rpki-client