Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer
File: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer (raw, json)
Hash identifier: UjOrNmnH5pQrhBqraQfH79KiMrHO8y3/jJ8E+hzOaro=
Subject key identifier: 64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CA3B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Aug 2026 13:11:24 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 153967
IP: 2001:df5:b7c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182843 (0x2ca3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 2 13:11:24 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91410C5, serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:a0:4e:61:d5:95:7b:79:15:b3:e3:a1:c2:
2f:57:34:6c:9f:b3:54:a7:cc:46:e9:8e:6c:24:79:
d4:c1:b9:f6:6f:a9:0f:8e:43:f3:f8:cc:91:62:1a:
86:2c:b5:df:de:3b:8a:05:2a:42:74:52:de:ed:5f:
c4:e8:fc:37:72:88:5e:5c:9c:c5:0d:76:be:c5:6f:
be:94:09:fe:9b:47:eb:c0:b7:33:4b:5e:4a:e2:f2:
2d:52:3c:2d:89:4f:26:b6:9a:1f:f5:69:94:44:7f:
0e:ae:46:33:fe:65:9b:c9:a5:a7:a2:d0:db:f0:d7:
bc:07:3f:3d:f3:75:ad:78:62:c5:28:47:9b:d7:5a:
35:88:40:8e:7a:c5:96:33:f9:10:12:81:93:2f:29:
b9:f4:fd:aa:6d:73:95:f0:8a:98:26:bb:61:7c:f0:
b3:4e:de:40:f7:3c:ab:22:c5:f3:3e:6c:86:63:fb:
a0:cb:69:7f:a8:ba:8c:ae:06:ba:d4:9a:f9:7b:c8:
46:f5:f3:76:35:5e:eb:2d:fc:24:d1:ef:7f:45:6e:
b2:99:82:60:57:ac:ad:4c:1f:23:b5:17:a6:f4:cf:
92:94:75:4b:40:58:3b:bf:17:9f:e8:c4:d5:64:d8:
02:90:dc:47:e2:21:21:20:62:68:12:24:72:cb:d8:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153967
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:b7c0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:eb:f3:51:cd:c3:bf:84:e4:fc:d2:9b:44:d9:95:ab:bb:2e:
e1:8d:8b:01:49:e4:ea:18:1c:f0:9e:26:26:49:36:a7:7c:01:
56:59:13:61:2f:ab:2c:5e:5b:e5:94:0a:13:cd:ba:d3:7e:24:
d8:a9:30:46:a8:a0:78:7b:7c:44:fc:c6:12:48:dd:66:d0:5a:
ce:a8:31:95:ef:9b:58:75:ad:fd:d4:a8:d3:f0:53:49:14:ca:
a1:e0:11:3a:f0:8a:58:ad:88:fd:1c:5f:99:af:5b:13:24:a9:
c0:e7:a9:d5:5b:82:fc:05:b3:c4:1e:60:e0:d2:fc:28:cc:a2:
f9:a5:65:46:fc:b9:05:b9:12:e3:16:d3:58:ea:5b:cc:2b:f7:
a5:04:c9:c9:c3:cd:0c:61:61:c0:73:f3:18:cc:b9:14:4e:7e:
b5:0b:8f:cf:9a:51:c7:0b:9f:d4:67:57:51:5f:63:a4:fa:b3:
77:24:7a:3c:c4:a4:71:7b:8e:79:6c:6e:b4:eb:8a:84:fa:28:
25:82:ea:c8:4f:04:a0:c0:e9:8d:51:af:ff:e4:aa:b0:55:38:
50:cb:84:05:b2:26:1d:5f:77:be:11:9a:ce:62:6f:b6:10:8a:
45:b2:a5:63:50:2a:ff:c1:b2:74:48:97:e2:71:3a:44:1e:2d:
1e:d4:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:04:47 2026 by rpki-client