Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer (raw, json)
Hash identifier: tnVH3WBk1BtiG7teTb6WTEtitkl8GtANjY8e2WZxII4=
Subject key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BA86
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jun 2026 14:38:46 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 24491
AS: 58930
IP: 202.172.16.0/22
IP: 2404:db80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178822 (0x2ba86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 3 14:38:46 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:b6:0a:7a:f8:30:97:d1:18:79:9c:4e:46:
4e:aa:0b:b4:37:5c:4f:df:f8:b5:63:bf:c5:cf:c7:
1c:bc:e0:fa:10:11:0f:29:f7:cb:a5:0a:c2:45:9b:
5b:80:30:27:41:cb:47:44:da:ef:94:79:f8:05:22:
17:c1:fa:f0:1f:d4:81:03:1b:3f:aa:97:4a:c4:39:
08:7a:c7:92:5b:a2:7f:c8:6c:47:ed:9d:79:7c:95:
07:1c:35:6a:d3:3e:f6:a7:0f:b3:1b:ad:66:71:ce:
5a:3c:b0:61:fe:f1:31:2d:f6:d1:18:23:41:fb:86:
0e:e5:93:91:5e:6f:ec:a8:4d:25:4f:4a:1b:c0:dc:
02:97:8e:50:cf:51:0c:e0:f6:f0:2a:a8:89:08:9d:
b0:ee:7b:e8:9a:02:0a:8f:c4:25:91:10:de:0e:c9:
26:4b:f8:20:7f:14:44:20:2d:5b:f6:68:09:cf:15:
f5:ec:d1:83:f6:2b:e7:dc:b6:dd:8b:4c:62:6d:f6:
f8:25:ad:5a:c3:74:80:93:2a:6a:ca:8a:4f:63:39:
b8:26:af:17:04:f9:84:ec:05:55:5f:7b:98:9e:eb:
a4:07:29:bf:cf:16:a1:f9:30:1d:bf:b4:8f:b0:03:
d3:a2:a0:28:9d:85:37:f6:43:70:e5:18:73:6f:11:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24491
58930
sbgp-ipAddrBlock: critical
IPv4:
202.172.16.0/22
IPv6:
2404:db80::/32
Signature Algorithm: sha256WithRSAEncryption
be:28:8f:cf:cc:f4:f3:39:2a:45:e5:4f:d2:37:29:b0:fa:54:
65:1b:19:27:ce:db:17:b7:84:ae:20:53:f9:59:55:8f:34:b5:
b5:86:6d:10:3d:16:01:55:c7:02:36:f1:3e:3f:6f:69:2b:de:
fd:3a:a6:32:b1:86:86:35:96:ea:63:af:63:ff:c5:3f:5e:35:
47:ae:4b:59:5f:19:3c:6e:c1:a7:6a:be:d6:3a:33:4f:5e:b8:
a3:b2:3e:cd:70:13:4a:47:88:77:f5:a5:27:d8:c6:ad:5e:03:
21:45:d2:8c:da:84:ac:86:e8:70:71:23:7c:8b:82:0d:a1:a2:
e3:ee:dd:d7:37:51:4e:2c:aa:8b:7e:70:b4:b5:88:88:5a:8a:
dd:e5:3a:a8:7c:21:f1:04:9d:ca:fb:38:38:29:40:23:9e:1a:
c7:9d:81:52:f6:20:15:17:f4:af:e0:39:fa:a2:d8:a7:d0:83:
16:87:f9:7e:d0:5b:6e:be:18:69:4b:72:8f:f4:33:03:77:91:
41:90:c4:78:30:a3:27:1e:2b:05:6e:27:2b:0b:b1:4a:28:f5:
2f:18:bd:cc:a5:36:97:60:f6:8c:7a:97:78:a4:f2:10:0a:02:
4a:cc:5d:72:fb:13:cb:f9:fb:8c:e7:b7:5f:3a:ec:4a:39:68:
ce:3f:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:58:57 2026 by rpki-client