Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
File: BzaM6A3FfPVrYRMARLT6frnNai4.cer (raw, json)
Hash identifier: FZFvLF+vNSAGwqWpkaKF2xrY8sPvOZLYOho+UmajA6U=
Subject key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029320
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:13:38 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 7589
IP: 202.163.0.0/19
IP: 2407:1600::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168736 (0x29320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:13:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:73:c3:d6:af:93:63:0e:68:94:8a:c7:75:
6b:cc:88:72:42:fe:91:b7:f0:7f:44:0d:97:80:28:
f3:43:22:52:a8:bd:fd:87:b9:93:a1:c2:2c:f0:2e:
dd:a9:ea:39:15:3d:09:96:eb:97:9c:bd:b1:bc:43:
ca:df:53:6c:45:c7:33:7d:30:97:bc:d8:99:4d:ca:
04:0d:0e:24:16:d6:b6:ba:2d:79:8e:19:18:bc:07:
d8:24:7d:89:e5:19:ad:0a:ab:92:7a:e1:17:cf:c3:
c9:00:fe:7f:a8:5e:16:be:80:01:49:90:89:0e:36:
b2:bf:fb:32:11:12:b1:e6:ae:c6:1a:15:f7:5c:fd:
49:1a:a0:35:dc:10:d9:bc:16:2a:b2:9c:23:f0:3e:
7c:45:cb:ae:06:2b:51:3e:f0:99:7f:0a:fb:ca:fb:
4e:50:2b:46:a2:a7:34:66:d3:f7:38:d2:59:50:23:
54:5c:54:ad:2f:8d:7e:18:45:09:7e:4b:d3:f0:67:
d0:a0:bc:da:58:11:06:79:79:1e:3c:a7:78:82:93:
26:b9:d7:bd:e4:5c:7a:c9:53:ad:a9:e0:a0:ea:22:
19:09:90:34:0c:01:2b:ff:ac:3c:58:3e:50:15:49:
da:a6:bd:79:0f:2a:23:56:cd:57:83:76:dd:61:f8:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7589
sbgp-ipAddrBlock: critical
IPv4:
202.163.0.0/19
IPv6:
2407:1600::/32
Signature Algorithm: sha256WithRSAEncryption
c2:95:66:3b:d7:bf:8a:0f:1a:0c:84:19:70:13:13:a6:2f:ef:
e8:5d:58:43:95:90:9d:3e:40:f2:df:01:09:4c:ec:07:c1:e8:
83:94:42:db:d9:57:f4:69:c4:ec:38:86:25:ae:07:a0:40:49:
91:e4:4b:0a:46:a3:64:84:5b:0c:db:97:e4:b2:df:74:b9:51:
65:b2:75:b2:ba:71:32:c9:94:be:11:2e:fd:e4:23:5b:61:59:
d6:91:64:fa:28:5c:dd:41:5f:6e:5b:3c:d9:42:9e:90:8f:6b:
f2:f5:15:48:34:1a:09:ed:9b:fd:df:d1:61:c6:04:59:82:60:
e7:3f:ac:3f:75:fe:44:dc:9f:86:ca:f7:61:12:20:64:c0:2e:
81:e6:29:7e:62:57:b7:2a:29:2f:07:80:46:ad:64:68:e2:d1:
80:b3:cc:2c:e7:88:15:f9:b0:28:3c:b0:47:86:70:22:40:96:
2f:b1:23:f1:ae:ef:5f:66:04:76:33:a5:9e:15:24:1d:5f:7d:
0e:df:41:4d:0f:5d:13:1e:a6:90:01:e4:5b:79:bf:eb:5f:26:
2b:04:49:d1:ac:b4:0f:c7:2f:eb:4a:51:ca:a2:7f:07:c0:39:
41:76:a7:37:4c:b0:83:4f:91:ac:bb:04:a4:c6:23:b7:e7:50:
81:77:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:19 2026 by rpki-client