Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
File: AEu7wBxXH6cPIOpEBQBX2dyeutI.cer (raw, json)
Hash identifier: liMXqUfTzgH6ezcTpZxgzh16pDiZnODTHxzYYJS8ZnA=
Subject key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029609
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:27:06 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 152458
IP: 2001:df3:7140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169481 (0x29609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:27:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:ba:2b:80:e1:8e:7e:93:30:a6:7f:4f:4e:
d9:e8:60:63:9c:a6:f7:55:22:d9:17:ae:e5:28:16:
0a:06:8c:f9:7f:e9:42:02:68:12:77:55:60:4b:82:
a5:cc:40:53:85:2f:37:19:a8:b2:6f:cd:ec:45:7c:
bf:51:e2:d3:a9:50:3b:2b:2c:aa:69:37:d8:08:94:
63:6e:85:5f:73:0c:6d:9d:43:26:f8:53:5e:2c:c4:
a1:a9:4a:9a:53:ab:87:8d:62:da:69:8d:e9:36:25:
b0:34:d3:54:57:e6:7e:78:40:f5:34:c6:7d:19:3b:
c1:b4:08:76:e3:19:85:9a:55:7a:cf:9a:18:72:5e:
21:8b:fe:c2:f5:05:07:4b:43:44:55:99:0c:f4:a4:
4a:f2:9f:19:16:71:e6:7a:85:2e:e6:5d:24:d9:2d:
49:de:8d:12:8d:63:90:e4:32:6d:10:e3:e3:45:1a:
48:a7:5d:9e:25:27:0b:45:f8:a5:b7:4f:11:61:3e:
d7:e4:e3:4b:bb:e3:66:ff:56:52:e6:3c:0f:0b:27:
0e:71:53:6b:ac:83:06:95:d5:56:be:58:65:97:50:
5b:48:d4:9a:7a:ee:4a:d5:3e:9a:f4:0f:ba:24:4c:
47:55:e2:46:ad:fd:ae:bd:af:49:53:d4:7c:f3:df:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152458
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7140::/48
Signature Algorithm: sha256WithRSAEncryption
24:6f:f7:ec:e7:4b:f5:96:ea:3b:87:d2:48:74:6d:85:15:6d:
d3:d8:49:cc:87:e2:07:5a:e5:0a:cf:20:b0:99:da:1c:0b:fd:
15:31:f3:68:d5:ae:92:70:b9:71:9e:3c:bb:ea:96:80:3e:ac:
d4:57:99:d7:d4:88:02:68:77:1e:57:a5:42:53:02:fb:2a:be:
4e:d3:54:95:df:55:51:0d:44:6d:06:75:cf:b3:6c:62:cb:75:
f3:46:87:23:1a:ea:ce:7d:54:f4:22:df:72:de:46:4a:52:57:
77:90:a6:c4:e3:61:4c:ed:fe:37:b9:5e:b9:42:51:5d:c8:98:
6c:0f:d7:19:b2:62:60:df:10:e6:87:fd:0f:d1:4d:45:9b:7a:
d8:a6:c1:50:c4:a6:00:b4:60:b8:ac:21:4d:24:e9:17:5a:9c:
94:fe:41:1a:4d:e3:1c:39:9e:66:10:bb:b8:d6:94:91:a9:67:
4f:2a:b7:3b:34:c4:ed:50:12:6c:66:81:f9:69:06:ef:46:7f:
c9:d0:43:60:d0:90:3a:b1:4d:fa:07:03:9f:60:da:0f:e5:8e:
4c:64:8b:ff:3c:18:e9:d3:6f:cc:c8:fe:1d:79:8e:a7:7b:f3:
db:d8:ec:87:1b:6f:21:ac:a4:a8:c5:45:fe:db:00:f4:a0:c5:
e6:ee:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:15:37 2026 by rpki-client