Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer
File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer (raw, json)
Hash identifier: XKnOEMC/nAi4O4zMB+40E1JEK/mUQJ9XZMxulvEjld0=
Subject key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0298F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:41:51 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 152455
IP: 2001:df6:1c0::/48
IP: 2402:24e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170225 (0x298f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:41:51 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:51:61:9c:9a:13:32:9a:c0:dd:78:23:80:
97:0d:81:cb:89:aa:39:5a:f7:6c:1a:1f:e2:70:18:
60:b9:27:bc:af:5c:7c:08:90:fd:e3:c4:55:4a:9b:
3a:d5:9b:61:64:2e:78:76:b5:32:df:6c:0b:b0:98:
3c:9c:25:db:83:42:b6:91:2f:8b:d1:ae:0c:67:ff:
87:0d:c8:32:79:fe:4c:e6:a5:ea:10:90:a3:6e:6a:
c2:1e:31:cb:cd:55:f8:dd:3b:88:2a:88:57:6f:d9:
1b:ca:cf:56:56:35:e6:e3:9e:5d:73:3c:ff:54:a8:
1b:7e:8b:a2:8b:94:02:e4:5b:7b:1a:58:8f:e9:40:
f8:99:db:ea:4a:d0:d4:54:2f:81:1a:11:1b:59:34:
dc:bc:45:b0:26:4b:4a:53:62:11:e3:70:c9:12:08:
53:27:d3:ab:12:71:2b:9e:c2:2d:96:55:89:a4:64:
2c:ec:b1:a0:13:f0:a1:5d:df:eb:19:4c:22:d7:b8:
d0:d2:97:7c:5d:91:d5:e0:73:7c:f0:9a:d7:c8:1c:
72:8f:d6:ba:af:05:ce:86:e1:de:2e:b4:28:c2:69:
f5:8f:b9:ff:89:ac:8e:87:d4:f6:a6:fc:ea:86:63:
2d:a9:c1:61:ff:ac:d8:77:30:8f:74:8c:38:17:54:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152455
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:1c0::/48
2402:24e0::/32
Signature Algorithm: sha256WithRSAEncryption
06:2b:43:6a:2e:4f:06:f7:f3:a4:b3:e5:fd:24:c4:c8:a6:63:
c3:08:9b:d4:ee:cb:96:47:a8:52:af:32:0a:b0:d2:a2:38:0c:
33:cf:1d:e9:9d:31:6d:c3:4f:15:1e:32:1d:f7:7d:5a:1d:dc:
f0:00:ee:6b:a3:32:f1:45:d6:f3:16:0b:86:2a:11:1a:19:ae:
94:a9:3c:e2:69:2a:8a:88:8b:2c:b7:4c:76:7e:07:b2:45:69:
8a:09:c1:d6:ef:a8:07:15:38:24:35:b1:89:fb:7c:be:b4:1f:
b0:96:c3:e5:5b:62:03:85:ee:aa:83:ee:55:74:ab:a7:70:b1:
36:81:17:05:f4:bf:e3:42:ef:4e:f0:28:28:ee:03:55:28:5f:
47:31:ed:56:fa:7d:63:ef:63:d2:c6:12:a7:54:72:5c:5f:75:
fd:dc:e4:73:cc:73:46:66:b3:8d:01:e6:5b:3a:fe:ac:f9:bf:
6d:9b:86:c5:5b:b8:fe:16:62:48:13:f1:2c:47:82:fd:dc:e0:
0a:81:91:61:02:97:78:3f:1b:1f:e9:dd:61:cd:a4:3e:4d:18:
33:06:7a:4a:23:2f:a5:ca:a4:e4:a8:fd:52:2e:ef:d7:c7:a4:
39:42:9a:f0:38:2e:8f:68:7e:78:61:b2:69:03:dd:af:97:c8:
b5:d8:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:18 2026 by rpki-client