Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer
File: OUsE6TpOrJKA9-wejZv_nebApZ8.cer (raw, json)
Hash identifier: WNbVLUxZ2kDainWCp7F2jsdxUCCfHouEiIlKNW2pefs=
Subject key identifier: 39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 23 Aug 2026 12:49:51 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 154009
IP: 2001:df5:cf40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184120 (0x2cf38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 23 12:49:51 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9150F54, serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:ba:2c:f0:93:40:fe:7f:d6:61:ac:d6:1a:
7b:48:e1:85:3d:36:95:c4:d4:06:4b:31:98:e8:e7:
6e:81:d5:fb:6c:a2:77:65:2a:5b:98:09:84:3c:d5:
29:f6:15:f1:08:5e:25:0c:57:94:e2:e0:6a:49:12:
86:76:14:8c:d3:67:30:94:e3:35:22:10:cc:88:5c:
15:0d:9e:f8:55:e9:21:6f:8f:bf:8b:6f:57:c7:da:
59:4d:97:3c:51:12:3f:b0:71:74:bd:93:dd:b7:11:
e4:a4:99:3a:0a:b1:69:1f:50:ee:ea:18:eb:f1:db:
3a:11:11:a8:de:d9:4d:8c:6b:d5:30:ee:eb:86:b2:
f5:83:d8:b4:d7:bb:bb:8f:91:01:49:4c:c4:a9:39:
3d:f9:09:c3:8c:c5:c2:8e:6f:ab:3c:60:69:27:9b:
34:d6:f7:83:d3:23:0a:3b:b6:40:89:9a:f3:62:fd:
59:71:68:a4:e4:c1:96:a2:54:71:a7:42:33:a5:ab:
34:4a:a0:28:a0:2a:72:f6:e6:e3:b2:16:56:7c:7f:
17:f0:62:cd:da:cb:17:c5:38:cc:48:46:d6:71:e2:
97:3e:61:08:a8:9f:17:b3:c5:01:c0:3d:77:bb:e3:
9a:4a:3a:8d:3e:50:06:64:55:9d:a9:dd:c5:52:79:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154009
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:cf40::/48
Signature Algorithm: sha256WithRSAEncryption
99:b0:db:61:f7:e5:24:4b:27:ba:12:08:d8:7a:0a:fa:fa:a1:
b0:08:37:46:ff:c5:61:7b:f2:ac:21:08:fa:98:b9:8a:3c:ba:
7d:5a:60:35:cf:7c:40:c3:c1:04:86:a6:40:1c:35:f2:d6:7f:
2a:0a:7d:be:41:7d:3d:ff:34:36:b7:ad:15:47:82:f7:e4:a4:
29:e0:ed:1f:a4:40:99:7f:ca:91:39:7c:ab:7a:79:34:99:52:
f6:99:d1:da:4c:9c:5d:a9:e3:c0:10:d8:4e:fe:2d:d7:81:c9:
28:2b:e4:a2:ac:7e:66:b2:3f:4c:98:10:67:8d:7f:f7:99:46:
60:9d:94:f9:15:e3:99:de:eb:c6:cd:1c:db:f8:21:0e:d1:4b:
e2:e7:08:d7:c9:96:b6:8e:38:1a:d0:b3:3c:d9:5b:43:e1:0e:
84:50:2e:fe:54:87:36:2c:32:ff:6d:9d:73:74:36:20:98:20:
79:df:e9:d9:13:1f:8b:ca:0d:2c:b0:19:97:6c:26:dc:09:77:
5b:15:c5:94:91:6d:2a:7e:74:44:0f:79:ef:18:05:86:ad:d7:
ee:ed:20:d9:73:0d:41:d4:72:69:c1:6e:89:5c:bf:91:59:e6:
d0:8e:87:e4:4c:57:8d:2a:e6:18:ab:88:11:8c:75:24:49:0e:
02:2a:82:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:41:41 2026 by rpki-client