Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
File: B_MbR0cTs6FSxqX49I3tIJfcJB8.cer (raw, json)
Hash identifier: t2t4zUOB319+fWNIcbtsolgWDnoAYPAtyJBzp8nBbj0=
Subject key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02955D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:24:06 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 138667
IP: 2001:df4:9340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169309 (0x2955d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:24:06 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:99:fd:fb:7c:f0:f5:14:41:6b:1b:e3:3b:
f3:bc:61:78:d6:84:dc:5b:98:6e:10:40:c3:2a:be:
b1:c2:22:7a:35:a8:7f:6e:6b:fd:e3:72:13:a9:e2:
2d:8a:b2:fc:5c:2c:27:bc:db:66:c1:29:5a:cd:3a:
75:dc:a0:af:00:b3:7b:1b:09:72:ed:ff:61:3f:b8:
3c:f4:c7:0f:19:c9:a2:1a:69:9f:f0:cf:28:cc:76:
87:8d:85:85:bc:0c:93:ae:35:53:4f:54:21:68:fe:
fd:29:6b:db:7b:64:c0:c6:ac:e7:8b:e4:0e:3f:16:
4b:7d:ef:4f:1a:b7:4a:a9:c8:91:7b:01:96:f4:81:
6d:fd:23:34:70:6d:7c:55:bf:4b:3a:8f:05:c8:50:
41:19:02:d4:8f:4f:63:49:e8:09:8b:97:07:86:22:
80:a0:cc:4a:68:c2:76:42:89:5c:60:31:6c:c0:82:
a2:79:c4:61:3d:38:5f:bb:c1:60:50:eb:70:c0:a6:
92:d9:82:15:9b:67:cd:b2:28:f0:f5:73:df:be:f7:
d9:e4:47:68:b8:0f:b4:57:1f:c6:b7:57:30:5a:66:
45:30:ea:bf:64:74:de:0d:ad:33:f1:71:dc:c3:d0:
b8:00:a0:24:cc:eb:ea:17:78:77:fe:86:fa:bc:72:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138667
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:9340::/48
Signature Algorithm: sha256WithRSAEncryption
65:1a:9f:1f:01:a5:7a:e0:38:9a:20:81:65:a6:1b:1f:11:87:
b3:c7:65:c4:7a:46:c8:1d:6f:33:b6:0b:76:cf:ab:51:21:53:
98:18:66:43:22:30:4b:50:d7:b6:5a:dd:b5:8d:b8:ea:97:fe:
af:6d:af:a2:77:8d:71:65:d7:30:4b:bf:b9:f8:27:37:3d:e1:
74:4a:30:3c:93:7f:98:49:1f:e7:fb:57:97:44:3f:ab:64:da:
4d:a0:b8:a1:89:a8:0e:9a:1b:a6:9c:e5:20:2a:9a:2f:04:59:
80:73:38:4e:a9:17:1d:5f:91:cd:a3:0d:fd:39:53:7a:b7:a5:
8d:15:de:d9:e5:a0:dc:56:31:a0:fc:ff:d4:80:4b:0b:d5:e9:
5e:a4:55:0c:f7:6f:80:48:7a:00:1f:85:b0:53:48:f5:eb:60:
23:71:e1:7f:ce:88:ba:b3:4c:a4:02:c2:1c:52:06:c8:a1:19:
e8:59:58:ff:76:b1:cc:d0:34:d0:68:ac:ba:48:ed:6b:fe:1a:
9c:7d:a3:c4:d0:cd:2e:72:b3:cb:bd:27:19:f9:5f:00:c3:23:
06:e0:61:b6:7d:ac:f1:95:fe:cc:c8:f8:cc:28:30:ab:85:60:
4d:64:33:0e:54:12:ef:a4:2d:6b:5e:2d:99:20:e3:66:1d:fd:
49:65:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:00 2026 by rpki-client