Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer
File: PeqLG7hy3RJspkfMN1wgdgJAw4U.cer (raw, json)
Hash identifier: 6wtjxpnydKpuLuhi+1HSAuBuY6TnuPCJNeUlxQ9InpM=
Subject key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DBE0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Oct 2026 05:22:47 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 149506
IP: 2001:df4:4ac0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 14:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187360 (0x2dbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 5 05:22:47 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:41:fe:8c:e0:df:bb:01:36:13:1f:a4:bf:
41:2d:ce:03:59:b1:57:35:d4:ed:ab:a7:01:16:28:
76:45:bb:43:a5:4b:b1:af:57:76:a4:8b:f7:fc:49:
fc:bd:93:1c:b4:62:62:53:6c:46:ab:1e:b9:f0:7e:
a6:63:e3:df:1b:cc:0b:0c:56:84:8c:0e:bd:d1:91:
83:68:69:19:15:7f:7d:d0:65:26:2a:62:da:70:69:
e2:d8:1e:1c:2d:15:5d:a2:00:c8:4a:b3:fb:bf:c4:
c1:31:f6:c8:9f:75:68:e2:2e:cc:74:2c:41:56:40:
f7:be:da:25:be:75:b5:36:f4:4e:a7:69:07:c7:7b:
57:50:42:05:df:56:b4:ad:bc:f2:59:13:46:16:e8:
05:b3:fb:7f:bd:ae:79:34:b9:fc:73:08:e9:70:20:
68:c5:64:03:d4:e3:30:8f:b9:d4:15:47:b8:05:c9:
84:b6:25:f1:cb:9f:fd:7f:5b:86:a8:2a:05:51:3f:
a8:80:9a:07:75:47:98:16:9d:f5:41:e4:ee:79:58:
4d:c3:26:5a:eb:5d:30:ef:34:cd:d3:28:67:e8:6e:
e2:09:1d:e2:92:2e:57:20:02:0a:45:ae:a6:ee:6b:
70:a7:6e:2c:e4:2c:8b:bd:4a:90:4f:c7:cc:35:fb:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149506
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:4ac0::/48
Signature Algorithm: sha256WithRSAEncryption
4c:7a:8e:95:52:0d:73:04:67:99:0a:20:73:3c:cb:12:1d:33:
97:e4:14:b6:4c:0a:47:54:fc:1a:a6:83:d0:3d:49:d6:4e:00:
c4:d9:85:0c:45:c9:a0:98:74:d5:93:81:c0:47:20:33:38:14:
cf:30:a1:76:4d:da:2f:d8:18:15:39:66:0d:9b:d3:61:b6:1b:
43:e2:4a:3b:e5:b2:f7:7f:f5:00:c3:44:cf:57:e3:d0:38:c3:
98:5d:19:0c:da:95:b8:66:e2:43:95:69:68:90:a5:e2:6b:e2:
52:2c:5d:1b:aa:d4:7e:c6:e8:ec:9f:5b:ea:c9:82:9c:61:e9:
38:23:95:04:ac:70:32:95:a3:d3:d2:ce:6a:c7:45:96:3b:32:
25:fd:28:8c:97:9f:26:bb:7b:ae:e0:b0:8b:66:59:80:b6:dd:
4f:54:d1:2a:3f:84:ed:be:83:81:37:24:34:04:3f:1c:4d:bb:
ce:06:d5:cc:02:43:4e:14:fc:8c:14:54:d6:54:cf:76:0c:7c:
f0:6e:90:47:67:17:53:a5:7a:15:a0:aa:09:5a:01:52:35:36:
34:86:e3:7e:92:da:ec:94:84:2e:28:8a:22:a6:ca:b8:f2:b0:
85:54:cc:c6:a8:5a:97:78:14:51:78:81:ca:63:d6:cc:52:fb:
8e:79:b8:09
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAtvgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAwNTA1MjI0N1oXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEYwRTIxMTAvBgNVBAUTKDNERUE4QjFCQjg3MkREMTI2Q0E2NDdD
QzM3NUMyMDc2MDI0MEMzODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7WkH+jODfuwE2Ex+kv0EtzgNZsVc11O2rpwEWKHZFu0OlS7GvV3aki/f8Sfy9
kxy0YmJTbEarHrnwfqZj498bzAsMVoSMDr3RkYNoaRkVf33QZSYqYtpwaeLYHhwt
FV2iAMhKs/u/xMEx9sifdWjiLsx0LEFWQPe+2iW+dbU29E6naQfHe1dQQgXfVrSt
vPJZE0YW6AWz+3+9rnk0ufxzCOlwIGjFZAPU4zCPudQVR7gFyYS2JfHLn/1/W4ao
KgVRP6iAmgd1R5gWnfVB5O55WE3DJlrrXTDvNM3TKGfobuIJHeKSLlcgAgpFrqbu
a3CnbizkLIu9SpBPx8w1+9oHAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUPeqLG7hy
3RJspkfMN1wgdgJAw4UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThGMEUyLzM0OERFMUNFQTI1RTExRUZBMzhEOTM3NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RjBFMi8zNDhERTFDRUEyNUUxMUVGQTM4RDkzNzVDNEY5QUUwMi9QZXFMRzdo
eTNSSnNwa2ZNTjF3Z2RnSkF3NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkgCMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9ErAMA0G
CSqGSIb3DQEBCwUAA4IBAQBMeo6VUg1zBGeZCiBzPMsSHTOX5BS2TApHVPwapoPQ
PUnWTgDE2YUMRcmgmHTVk4HARyAzOBTPMKF2Tdov2BgVOWYNm9NhthtD4ko75bL3
f/UAw0TPV+PQOMOYXRkM2pW4ZuJDlWlokKXia+JSLF0bqtR+xujsn1vqyYKcYek4
I5UErHAylaPT0s5qx0WWOzIl/SiMl58mu3uu4LCLZlmAtt1PVNEqP4TtvoOBNyQ0
BD8cTbvOBtXMAkNOFPyMFFTWVM92DHzwbpBHZxdTpXoVoKoJWgFSNTY0huN+ktrs
lIQuKIoipsq48rCFVMzGqFqXeBRReIHKY9bMUvuOebgJ
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:08:27 2026 by rpki-client