Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
File: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer (raw, json)
Hash identifier: MCouTX6A/e3D2CvyIXtQ3/Ew/MBjFU4morNNiWUHnrM=
Subject key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029D1C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:00:47 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 132221
IP: 2001:df4:d740::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171292 (0x29d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:00:47 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:8d:8e:0c:fc:ec:9a:1c:36:54:ff:4f:1b:
16:11:3c:bf:52:ca:ce:45:d2:f4:6b:7d:93:28:32:
f2:89:ff:6f:aa:c4:eb:1e:04:a9:f5:c2:e5:ed:81:
8d:c9:eb:5c:a0:b2:e4:3b:c3:81:5d:0f:65:61:9e:
14:55:19:d4:86:ec:c6:4b:41:cb:5c:2e:d0:57:66:
25:2d:c8:ce:cc:7d:2b:bb:da:cc:d0:5c:2d:9b:57:
25:b8:14:8e:d4:72:cb:d4:88:c4:0e:11:d8:aa:95:
33:e0:32:cf:82:44:bd:24:21:a4:1a:31:5b:4d:e0:
73:8f:05:97:f9:ca:57:9b:2d:a1:2e:47:54:47:5d:
35:7e:bc:51:68:5e:26:44:d4:76:0a:92:e0:d5:4c:
b8:d6:c9:7b:65:30:36:d2:e6:6c:16:58:f9:54:72:
0e:8f:d5:71:6b:0f:26:5e:fe:1b:5d:0f:d7:8f:86:
e8:bb:78:fd:52:44:3c:12:c5:c3:8e:42:b1:23:f8:
4a:e6:4e:d2:3d:14:52:61:5d:79:5b:b9:94:a1:b7:
2d:49:a8:b4:b8:f6:47:25:e7:02:87:f1:78:6c:37:
7d:3a:b5:6f:9c:7f:07:97:a1:19:e0:d0:6f:66:a2:
db:3c:ac:90:f7:d7:c0:46:a9:a5:32:dc:34:00:6b:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132221
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:d740::/48
Signature Algorithm: sha256WithRSAEncryption
83:71:1e:00:0b:2d:0a:af:52:06:a5:5f:f8:8f:a3:ce:71:2d:
e2:57:1a:d4:d9:e5:65:1e:c3:61:6c:0e:ae:30:a2:2c:82:c5:
4d:03:f5:e0:3f:b2:53:d3:9f:59:0e:e7:19:0a:b1:e1:c7:73:
39:c8:b9:da:ac:b9:3a:2e:d2:bd:c0:df:c3:89:0c:fb:82:76:
b9:5b:86:51:b7:a6:c4:0f:27:6a:e8:73:05:b3:3c:03:2f:39:
cb:bf:c5:40:05:03:5e:4f:8e:05:57:0c:6b:78:2e:6a:e3:38:
d5:48:40:c7:3a:6d:fc:6e:c8:81:e1:5f:21:83:77:17:95:3d:
19:1d:a9:7c:49:8d:ca:0a:47:d6:6a:3d:dc:4b:67:03:ec:26:
15:c0:ca:62:d2:30:82:24:b2:54:cb:1e:86:73:83:fe:d2:c9:
d6:1e:93:56:5e:2f:f1:1c:56:44:19:77:56:8c:fa:e0:7a:3a:
79:0a:75:4c:ca:9a:7b:ef:a3:01:89:74:4a:3c:0d:52:65:76:
2c:df:7b:4b:31:6e:d4:d1:28:c1:d5:a8:65:80:7b:3a:15:a3:
a5:30:ab:3d:18:8f:70:47:59:2b:26:b3:3b:4c:64:c0:13:73:
c7:3b:72:f1:9d:72:e9:d4:ad:14:b0:0f:a0:10:77:e2:34:0e:
ba:a7:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:45 2026 by rpki-client