Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
File: Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer (raw, json)
Hash identifier: 5BxW79frmxRu41LYIe9OmmNV8ZwpsFTG4UkGv3ADDEM=
Subject key identifier: 43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BC42
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Jun 2026 00:35:28 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 154708
IP: 2001:df7:1840::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179266 (0x2bc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 10 00:35:28 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A918B16C, serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:e2:8f:f9:98:fa:ff:38:81:10:4f:2a:54:
67:a0:d8:55:4b:4d:18:6c:9f:68:67:f6:a9:b2:27:
a0:0d:a5:0c:5b:7b:54:88:b4:c1:ad:9f:eb:0d:6a:
59:bf:c0:c7:1f:30:97:b6:9d:e9:50:e1:c0:a6:cf:
22:90:b8:81:f2:e0:09:84:f9:cb:50:ab:7c:b3:a1:
50:c7:93:15:b8:b1:85:eb:fa:6e:44:5c:a3:88:b5:
25:bf:d3:01:66:c0:cf:25:a7:25:0a:31:f7:c4:fb:
9d:17:7a:d9:20:b5:f1:2b:e6:4f:2a:25:bd:e7:03:
61:8f:a1:a5:0a:6d:d4:fb:61:e7:36:0e:87:21:a1:
d9:d8:10:d7:65:d5:e7:07:6b:b5:aa:07:79:1c:7d:
af:22:70:82:af:66:a3:48:66:66:50:10:43:77:a3:
2f:fb:cf:88:f6:b1:72:e1:f7:2a:c1:e0:54:98:0d:
fb:f8:3f:b7:5f:2d:39:59:95:95:2a:07:52:2c:26:
b0:8e:e4:a0:1e:66:fe:34:69:b3:6d:53:87:92:31:
90:38:1e:8d:a4:24:b4:81:4b:ac:83:88:c4:8a:07:
da:85:7d:66:21:59:99:89:41:dd:57:a6:dd:e2:69:
e3:49:7d:85:5f:fa:86:f2:7c:ff:4e:bb:bc:9c:5a:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154708
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:1840::/48
Signature Algorithm: sha256WithRSAEncryption
3b:cd:c3:ef:41:ac:54:dc:08:70:ca:a8:0d:bb:9a:88:6a:47:
c9:6d:d6:a6:57:1f:ce:ff:05:b5:1d:5e:6f:ae:b3:1d:71:0e:
92:7a:87:c4:67:aa:80:1c:4d:66:fc:af:8d:7b:53:3a:82:81:
6f:a3:77:86:53:84:c2:6f:47:4c:93:b3:7f:8e:d7:16:ce:14:
cd:dd:ef:35:e9:c9:0b:c1:0c:ef:50:b5:9c:99:7e:08:06:dd:
bb:dd:ee:26:01:c1:ed:29:ad:b0:ba:b4:a5:66:df:fd:40:40:
c3:59:70:e4:e8:02:66:86:96:7d:2b:3f:c3:93:67:e6:22:b4:
3e:26:45:71:90:e6:2c:2f:ee:be:9d:d9:af:70:79:cb:6b:56:
54:2a:50:15:0b:e3:6f:95:c9:e2:f0:56:32:20:88:b9:51:47:
3a:89:d4:80:95:d2:f8:b2:fe:f1:63:16:5b:25:df:70:31:13:
9a:9c:2e:01:08:84:08:90:b3:e5:28:d9:26:7b:a7:34:e0:51:
31:71:d7:64:e1:48:27:94:50:61:10:a0:08:23:2c:1d:8d:f9:
de:03:c4:58:d4:38:7e:d2:c3:49:eb:38:f6:ef:f8:2e:e3:f0:
f5:ea:29:8b:ba:59:af:e9:74:12:0c:1b:68:73:29:86:2f:da:
5c:68:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:38 2026 by rpki-client