
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsZl4UCMw80OhZxyyUpEqaHDtXg.cer
File: NsZl4UCMw80OhZxyyUpEqaHDtXg.cer (raw, json)
Hash identifier: pUwCqqy6ZfgjcN4SIDtq316TKG0b6FFmb1UmIC9plyw=
Subject key identifier: 36:C6:65:E1:40:8C:C3:CD:0E:85:9C:72:C9:4A:44:A9:A1:C3:B5:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B7D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6719/302873885B2611F1AE8527D9B6833773/NsZl4UCMw80OhZxyyUpEqaHDtXg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6719/302873885B2611F1AE8527D9B6833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 May 2026 06:18:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 45660
IP: 202.58.125.0/24
IP: 2001:df6:bfc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178135 (0x2b7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 06:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91F6719, serialNumber=36C665E1408CC3CD0E859C72C94A44A9A1C3B578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:ce:6c:60:c7:94:74:8a:c8:8a:11:60:6e:
50:bb:ef:e8:32:d6:97:be:55:b8:d3:35:06:eb:48:
83:59:80:c2:dd:63:97:78:c7:b6:32:f0:76:df:01:
8c:c0:dd:a1:30:b9:6b:a7:52:ad:4e:6c:04:8f:2e:
eb:43:71:e8:50:56:50:77:46:2c:f0:4d:5b:d5:0b:
7b:f1:54:af:e9:0b:06:3c:e5:09:ea:58:30:b4:9a:
c6:87:ea:bd:b5:33:ea:e0:d7:67:12:49:a7:3d:67:
c4:07:6d:6d:9b:cf:54:d1:fa:26:6c:34:66:19:c9:
21:6c:5a:63:82:35:cc:43:95:16:76:b7:16:62:ae:
6a:4f:e5:30:ae:60:1e:03:e0:e3:a0:dc:57:52:4a:
f9:94:2d:b1:48:30:b1:cc:4e:30:4f:62:bb:e4:1c:
5e:cb:cf:0b:b6:40:98:17:5d:1c:65:0b:3c:d7:f4:
a5:2b:7b:df:29:1b:4d:58:b8:f8:82:1e:90:e2:70:
f1:ea:1c:dc:93:72:7e:0b:70:1f:fc:58:d0:3b:2a:
42:10:0b:aa:5d:06:0d:8d:66:a5:15:02:fa:86:e1:
f4:2c:cb:a5:99:b5:2b:a7:a8:38:6a:7c:9f:46:12:
4c:7d:54:3a:3f:fb:0b:cc:59:81:9a:74:24:33:28:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:65:E1:40:8C:C3:CD:0E:85:9C:72:C9:4A:44:A9:A1:C3:B5:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6719/302873885B2611F1AE8527D9B6833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6719/302873885B2611F1AE8527D9B6833773/NsZl4UCMw80OhZxyyUpEqaHDtXg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45660
sbgp-ipAddrBlock: critical
IPv4:
202.58.125.0/24
IPv6:
2001:df6:bfc0::/48
Signature Algorithm: sha256WithRSAEncryption
d5:6a:84:f5:b3:9b:58:7e:43:28:51:07:9a:e8:96:f1:d6:80:
c0:f1:87:26:e2:b9:02:82:12:2f:e6:a4:7d:e4:a4:4d:32:97:
d5:3e:14:5c:4b:9f:3a:f2:4a:3b:80:fc:5e:63:07:0b:be:8f:
90:49:8e:2d:20:e9:b6:32:90:3f:68:51:23:b0:35:42:07:7d:
d7:ed:a8:3e:ea:f7:75:a9:19:28:b4:94:6c:e8:3f:07:82:c2:
5e:29:1a:0a:c7:38:1b:b1:11:e8:5a:de:0c:fc:b4:38:b9:a4:
d7:75:c6:88:e2:6d:df:25:58:6b:dc:b0:a6:28:7f:6e:ef:61:
7b:90:6e:7b:18:01:52:18:0e:d0:24:a2:95:18:9d:28:91:67:
bd:42:86:14:fa:a7:f1:4a:36:b9:73:9e:80:db:4c:96:28:96:
4f:5e:93:a8:e5:86:e6:44:2f:91:69:ec:01:dd:7f:08:dc:0a:
76:7d:ee:f5:33:dd:4a:0e:9a:4f:59:0d:b6:9f:df:9b:a8:76:
e6:6b:b2:9b:06:e0:df:6d:db:56:f3:bf:4b:6a:72:47:30:95:
e1:bc:be:e5:8b:e6:5e:35:59:f3:27:a2:44:e1:16:66:6b:80:
9a:dc:33:cf:5e:28:90:2e:ec:75:96:f0:6e:64:98:3c:8a:0d:
8e:24:65:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:23 2026 by rpki-client