Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer
File: QK2YSqtZnI785foLPmXRxDaWLpo.cer (raw, json)
Hash identifier: nzdhePbALxbWUWykx1n2enpseNFnMpw9RoK/ZcbZ7j8=
Subject key identifier: 40:AD:98:4A:AB:59:9C:8E:FC:E5:FA:0B:3E:65:D1:C4:36:96:2E:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BB15
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jun 2026 13:59:41 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 133365
IP: 2402:60e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178965 (0x2bb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 13:59:41 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A915F1EE, serialNumber=40AD984AAB599C8EFCE5FA0B3E65D1C436962E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:f6:46:e5:bc:a3:0a:c7:83:4f:70:6a:be:
1a:e9:38:1e:61:8d:d7:c4:ce:c4:92:1b:fc:53:6b:
2a:89:7b:74:61:ff:b8:ec:4d:99:7f:9c:9f:3e:62:
b7:d6:68:89:73:a2:ef:74:15:c6:d6:f7:3f:e9:b0:
33:f5:d7:b3:93:1a:5a:55:d3:7f:bb:d3:70:03:1f:
06:26:2c:a0:05:a7:42:90:25:c7:2a:73:a6:b8:83:
3b:7a:14:1a:71:67:65:25:dd:c0:65:b8:bc:83:d1:
76:8e:da:00:70:60:3a:0d:2b:bb:24:41:c0:e5:47:
b5:47:99:53:f9:61:52:d0:30:36:c4:a9:8f:c0:dd:
fd:26:60:ba:e8:44:e8:d0:43:b0:ba:11:16:25:f2:
f4:2f:3f:26:f3:3d:7d:bf:c8:64:4b:e3:82:b4:2a:
17:df:32:d8:c4:15:fd:95:c1:88:2a:5e:7c:38:36:
d6:1b:be:34:aa:83:0c:cd:93:08:b7:b4:8b:90:69:
d6:e2:78:7a:48:6f:32:60:78:56:e4:a6:04:f1:c0:
a2:49:cb:2b:4d:d2:42:0f:05:4f:5b:68:0c:f2:b9:
0a:a2:05:1e:60:e1:ee:eb:70:09:fa:41:de:b4:9a:
ab:6f:ea:0d:a6:95:ae:b9:c7:e5:57:0d:95:a0:cb:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:98:4A:AB:59:9C:8E:FC:E5:FA:0B:3E:65:D1:C4:36:96:2E:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133365
sbgp-ipAddrBlock: critical
IPv6:
2402:60e0::/32
Signature Algorithm: sha256WithRSAEncryption
29:e6:56:43:e8:82:8f:cb:1e:9a:48:14:46:d1:dc:12:93:7e:
d9:d8:ae:1f:ea:fa:48:41:aa:38:e0:d9:58:2f:65:b6:92:f3:
14:65:e4:16:b9:1f:6f:8b:e1:d3:af:f5:9b:72:52:90:95:8e:
b8:f7:ad:c4:3b:53:f3:81:52:19:b5:39:e8:b5:8c:5e:d8:90:
60:c7:00:3a:ed:b8:4f:94:28:dd:4f:e1:b6:a3:a5:7c:97:47:
0f:06:71:10:7d:61:1d:f3:7d:e5:c3:cb:f4:f4:5a:7b:4b:35:
51:06:d9:84:3e:e8:cf:e7:bf:00:d9:25:73:c0:fe:e5:9b:86:
ac:7b:6b:2a:a1:01:be:5a:99:33:6d:10:28:96:dc:80:cc:b6:
24:be:26:a0:f7:6b:1e:4d:6d:26:cf:eb:70:ac:25:2a:a7:cf:
2a:19:aa:2a:b0:93:be:b3:9a:b5:18:a9:1a:e8:0e:bc:f8:f7:
32:cd:fb:ec:c5:d8:01:c3:08:33:79:43:52:c8:69:8c:ce:61:
46:44:53:5e:0e:dc:0c:2b:4e:90:40:08:7b:61:3c:ce:6a:3f:
b2:88:de:d4:f5:ac:ac:81:c5:38:99:03:57:e5:a1:a6:90:4f:
43:91:e7:f4:a0:da:6c:b0:86:90:0f:6d:54:4e:81:66:44:59:
18:1e:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:05:10 2026 by rpki-client