Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer
File: LThammVNvyfyEuUykzG0AdAlKDo.cer (raw, json)
Hash identifier: b4zPkeZDDzHzXGGfoA6+mQX68NqZjbgt7LKf27zk63k=
Subject key identifier: 2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029B8F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:53:22 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 136952
IP: 2001:df6:be40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170895 (0x29b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:53:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9178AFC, serialNumber=2D385A9A654DBF27F212E5329331B401D025283A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:13:38:fc:ac:85:ff:36:48:99:3b:04:ac:
bc:a6:a4:f5:ee:a3:69:f0:a3:e0:d0:08:7e:1d:62:
86:fb:62:cd:fc:97:ea:5d:9c:44:e9:d5:6a:c4:e4:
e7:57:57:bb:78:1b:71:6a:c9:5d:44:e9:45:5c:2b:
7f:4c:e0:00:79:7b:5a:25:9d:12:06:e0:0a:7d:70:
d5:fa:5a:c4:c9:6c:54:00:23:64:2b:02:49:aa:bc:
74:49:6d:ed:bf:dd:d5:20:9e:be:1a:71:e9:ee:41:
5f:42:df:3c:59:57:05:f3:e6:c2:bb:7d:cf:ad:a2:
c8:dd:a8:f4:63:55:59:70:55:c2:87:e4:ef:e4:72:
37:c1:28:02:c1:d1:9e:4f:41:eb:19:53:b4:f6:fe:
ea:52:b9:04:7c:f8:1a:8d:74:99:41:26:3b:e0:ba:
b0:ce:d5:2f:34:41:29:e2:84:aa:dc:05:c7:29:0d:
33:b5:df:31:9f:d1:7b:01:67:48:f6:01:90:b4:e9:
9c:3d:bb:ad:98:05:06:41:33:bc:62:56:bb:49:f3:
0d:ad:f3:49:a0:23:41:4b:05:e7:52:15:9f:ca:76:
4c:89:c5:76:0d:e8:9c:e9:15:a0:aa:54:99:93:65:
f4:7f:ee:8b:1e:33:c1:1f:d0:b8:1d:f8:cc:b1:f8:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136952
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:be40::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c6:3f:f6:77:57:e8:c0:9e:b9:44:3f:22:cf:6f:58:c8:35:
17:28:af:66:46:40:c8:8e:1d:b9:0e:01:d8:68:b0:3d:98:e3:
d6:f5:b8:10:c4:4b:85:0b:29:c6:81:ad:63:3c:74:4d:06:75:
17:09:1a:7c:77:9f:00:b3:90:31:c2:78:68:e0:64:d2:80:50:
6e:f2:62:bd:e0:12:c7:5a:be:79:cc:b1:38:c5:99:03:1a:a3:
08:2d:c0:d8:7b:c8:70:9b:2e:5e:a2:79:d1:e2:24:a3:bc:93:
bf:97:ed:a1:7a:5b:7c:8f:42:01:43:00:34:dc:91:ed:a4:07:
f5:06:79:96:67:f6:30:54:32:cb:bb:96:f9:ce:76:45:d7:b8:
7d:33:ae:80:f7:99:d0:03:92:37:90:ca:3f:90:29:41:e8:a4:
0b:cc:18:c5:fd:9d:bf:9b:3d:d3:55:19:fd:a2:94:56:d6:e9:
bd:e4:f9:19:65:e4:dc:b8:91:f0:1d:5f:e0:f8:7f:95:72:ac:
b0:4b:8c:34:79:0f:0b:15:dd:85:b9:b4:99:c0:44:9f:67:2c:
3b:de:58:e8:b3:49:f3:60:25:88:46:bd:a3:f5:2a:84:73:f1:
35:7c:41:2d:a4:7f:8d:1b:e5:55:5f:84:4b:d1:8e:54:a9:f4:
1b:77:a6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:52 2026 by rpki-client