Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
File: PM59J4idCNUwg0kqqJygm2jw5fA.cer (raw, json)
Hash identifier: qj1njzz4bYrw0qNb8opZ+UV6Rvi4rBDA6ipSl2/8SxM=
Subject key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02968F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:29:32 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 2401:ea60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169615 (0x2968f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:29:32 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:63:8e:e9:7f:ce:50:31:94:8f:7f:c5:7a:
90:c8:a2:7e:46:f0:03:af:a1:21:7c:85:df:5c:36:
75:ca:44:46:0d:67:41:09:ce:9d:36:62:03:79:41:
68:d1:72:90:4f:d7:fd:b5:cb:df:82:1e:0c:53:59:
a1:f2:ee:96:a4:fa:28:d3:89:b9:44:f3:41:2a:82:
6b:56:c6:d3:80:12:19:30:5b:97:90:71:0d:c6:1a:
86:58:41:57:9c:c5:8d:ec:00:bd:85:4a:17:d7:69:
b4:5f:d9:dd:2a:50:07:fc:6c:fb:16:60:17:30:d8:
6e:95:83:9a:71:e0:07:4e:01:38:a0:46:36:5d:8e:
ee:ab:97:01:4d:37:d4:35:41:8e:af:e1:f6:e3:6a:
d6:d4:89:34:4a:cd:8a:b0:58:de:cc:6d:79:fb:4c:
a8:ff:a9:41:57:5c:3b:e4:67:63:2c:10:b9:68:8d:
f5:56:c5:fd:08:7b:01:41:4a:fa:8a:2b:6c:c9:5f:
89:e1:1d:cd:9b:f8:b6:e0:72:df:a2:a1:60:9b:e9:
78:a0:56:ac:d3:8d:58:84:5e:01:2f:b9:59:e0:c9:
cf:63:05:93:42:29:7c:cc:47:5a:11:a6:49:df:a7:
3e:a7:86:d8:52:6c:ce:26:1e:73:56:08:6a:d6:0f:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:ea60::/32
Signature Algorithm: sha256WithRSAEncryption
6d:c2:3a:7c:f8:a0:88:56:1d:ba:aa:a5:02:51:5a:6f:62:6d:
0b:32:16:e1:ae:a7:bd:d7:78:66:0d:04:f1:ec:cd:94:e9:6c:
54:22:47:ad:89:2f:7b:bb:5d:a6:72:87:e8:f2:b2:26:5e:b6:
47:32:cb:a1:b0:1f:f6:5a:d4:2c:e9:96:d9:50:b9:99:7a:09:
d5:41:17:23:ae:c6:0e:cf:c6:d5:40:82:de:90:50:3b:c0:bd:
1d:05:d1:22:5b:5c:65:08:be:d0:85:97:2f:66:cb:11:c6:4c:
2b:17:ea:89:c9:06:b4:59:d7:55:26:b2:19:a4:88:f1:47:da:
c3:a5:29:48:31:05:70:52:49:b8:c3:fc:0b:0f:21:ee:76:93:
58:be:41:f9:5f:76:d6:62:59:b9:0b:0d:cd:ce:3a:fb:3f:b6:
49:ef:e3:00:6d:75:c0:29:46:b3:88:4e:3e:e6:7c:27:54:1d:
10:da:af:93:0a:fb:3b:1e:66:10:ab:66:f3:d4:74:d4:43:c8:
f2:4a:bb:e1:3e:3a:cb:dd:3e:2e:18:b6:31:e2:e1:71:ce:b7:
e7:8b:cc:4c:7b:d3:3a:a3:5a:c6:44:36:4a:5c:43:59:ef:7d:
08:e3:ce:5e:12:9e:a0:50:04:4d:b8:39:f5:24:50:d4:5b:36:
c2:2a:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:39 2026 by rpki-client