
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer (raw, json)
Hash identifier: lp1AKVUrTIJIZxTCqn0PgnaHhU20JV9vXf/oFP8VlFE=
Subject key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C743
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Jul 2026 14:27:23 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 149872
IP: 203.4.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182083 (0x2c743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 24 14:27:23 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:6e:90:4a:1f:3e:20:ff:ec:f4:f7:3e:1a:
fa:9b:b7:57:3e:7b:a1:54:62:02:b9:9e:17:ab:25:
81:f3:de:eb:3c:31:40:ca:35:09:e0:b6:67:74:f0:
89:3a:f1:dc:b0:28:c9:cf:bd:b8:2c:91:82:ae:cb:
fe:d5:6a:18:37:16:a7:11:a5:1d:dc:50:18:d4:a0:
6e:1b:23:86:90:41:f2:6f:f4:ea:53:e9:7b:2e:70:
b8:8a:14:ed:46:be:ca:85:a0:21:0c:02:d4:9e:40:
9c:d5:74:d2:c4:1c:46:e3:c4:f6:3c:33:d0:ec:14:
4e:d8:d2:77:0d:c3:8a:3c:a6:42:b6:82:91:24:5e:
75:b9:4c:e9:02:20:25:e9:a7:fc:81:0c:f9:51:9a:
fd:2a:64:47:4b:85:4b:c8:c1:46:9f:d4:0c:a0:f2:
08:0d:6e:80:df:cd:a9:5b:05:93:33:e1:b5:4c:c1:
49:5d:9f:e2:d9:ba:34:7c:6b:af:9a:79:30:4f:bc:
75:f4:83:6a:40:d8:fd:2e:9e:08:10:40:ff:c6:85:
5c:b2:d3:46:f7:b9:34:f2:25:0f:ca:38:25:4d:39:
45:8e:21:2b:d1:9f:a2:60:2b:30:87:e4:d9:aa:31:
aa:33:9e:de:09:7a:42:b6:2e:8f:bb:67:78:02:1d:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149872
sbgp-ipAddrBlock: critical
IPv4:
203.4.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:27:27:54:3b:d0:5f:2b:4b:46:10:75:c0:be:70:02:3f:a3:
8b:40:5f:bd:8f:b5:c2:65:3c:15:7f:47:f3:a5:42:99:ea:6d:
38:12:56:02:c4:b5:d8:66:cc:13:a6:02:f5:c8:81:a5:f4:40:
6b:eb:99:09:56:f6:75:b6:7c:f8:e2:10:3f:03:a8:d3:82:22:
3d:5f:71:0f:9e:0d:cd:4d:c3:67:e3:48:f1:04:5d:a4:15:aa:
a8:f7:a9:f2:62:b6:30:20:d8:bf:05:fa:4d:d4:d3:a9:ac:2e:
6a:ad:b4:45:67:cb:bb:b1:f6:b6:fb:13:de:05:14:7f:00:ad:
18:8c:de:08:37:f9:a7:3c:75:34:75:04:33:c7:3f:6d:32:a1:
82:19:87:4f:52:f4:d2:6d:4f:81:27:79:00:23:be:75:8c:71:
1c:5a:71:e2:3d:92:bb:bf:34:51:93:ab:94:52:56:df:63:95:
d9:45:dd:29:94:16:31:52:08:7b:c4:aa:f9:11:e2:e6:b0:04:
88:db:88:b7:a7:70:23:a7:28:ba:8b:7c:f1:d8:1a:0c:91:29:
3b:21:8c:77:d4:c9:84:64:6a:9f:37:f7:bc:bb:c7:e3:f1:03:
83:f4:e0:b0:c0:90:99:cd:a1:81:22:96:94:5a:52:c3:69:f0:
da:d4:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:00:57 2026 by rpki-client