Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer (raw, json)
Hash identifier: rHMZKS07YoTLFkY2nK0EPMetdmqIz3z2QT1ooXTVB48=
Subject key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CCC0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 12 Aug 2026 05:38:27 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 154386
IP: 2001:df6:5a40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 17:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183488 (0x2ccc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 12 05:38:27 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:31:cd:a5:d0:eb:96:d3:30:d1:84:31:ae:
34:23:08:e6:05:5e:5a:52:55:20:1e:c0:5a:83:42:
08:5c:ad:d0:f2:b6:dc:f5:17:93:58:75:ad:46:13:
22:12:49:d6:0b:d0:65:76:b9:54:5c:b8:d2:a1:ed:
78:a2:ba:f2:8f:7f:a1:4c:44:b2:84:47:6c:d9:f8:
82:52:97:32:f8:99:d5:2e:e6:bd:40:9f:0b:30:13:
0e:f1:c0:5a:86:7c:50:07:a2:f6:e3:a0:05:4f:b2:
0b:8b:31:4d:b7:8d:8b:33:80:40:b6:e8:dc:d6:1e:
ce:f5:ab:bc:13:0e:cb:14:4c:34:33:34:1c:21:4f:
8a:e1:bd:f1:16:b3:ab:d9:f0:05:15:e1:44:79:ed:
21:bf:37:fe:60:3f:d1:25:cd:f6:00:6f:e9:13:9a:
e3:a9:ba:5a:04:43:ee:26:91:e8:15:6f:c0:e7:a8:
a0:d7:d6:90:6e:9e:0e:40:e2:19:67:5f:18:9f:58:
9d:7c:92:11:22:05:28:24:c1:ab:e6:eb:8f:d1:a7:
e6:c8:12:a6:2e:d9:ec:4a:df:41:0b:7e:70:8a:ff:
d9:87:73:9b:4e:fb:f6:2c:68:bc:3f:07:ac:48:f1:
0d:04:5f:f6:e1:12:81:cc:37:9d:93:2d:90:eb:c6:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154386
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5a40::/48
Signature Algorithm: sha256WithRSAEncryption
2e:56:a0:75:15:66:83:3c:4f:9e:08:d6:62:8a:99:64:9f:6f:
26:db:fe:ac:fc:ed:53:a4:82:ca:9f:dd:b5:ce:cc:b2:d1:e6:
9e:72:34:71:1d:aa:be:da:90:62:09:eb:02:56:a6:d0:db:a9:
43:af:18:a4:a1:0f:8b:e6:ac:e1:57:d8:8c:87:04:09:50:12:
d1:c2:bf:89:4a:56:8f:0a:a2:5a:08:73:06:82:a7:73:8a:21:
cc:91:30:a1:61:7f:50:b1:a4:8f:d5:6f:73:15:49:a7:3f:83:
6b:21:90:66:ef:10:0b:7f:9e:93:65:2b:f0:fc:cf:91:f0:66:
9d:5f:8f:1d:e2:c5:af:b9:69:ac:e4:4c:86:52:58:a9:97:b4:
6e:7d:d5:c2:70:1c:b8:5b:05:c1:cb:86:88:0f:ad:8a:f8:0f:
e0:aa:ed:4d:7e:af:fc:fd:df:78:1f:09:59:ff:98:c8:30:fa:
25:51:03:91:f0:76:8f:15:6b:2a:c5:14:1d:46:e0:4f:0c:82:
72:e8:b6:bc:35:ab:f5:46:0e:1a:b2:b5:ee:44:51:4d:e6:7a:
ad:92:01:08:16:82:f9:d5:bf:08:4b:e2:37:58:3a:ed:44:a0:
2d:cb:50:00:47:6c:45:9f:93:9f:ed:1a:cf:fa:c3:b1:5a:d1:
1b:01:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:02:24 2026 by rpki-client