Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
File: aa41zc5jfrZF61Bl7eEtWOdZkjY.cer (raw, json)
Hash identifier: OVa2wmCOZ6rJvFn7ytHkk0G2Qy7b2pa+XMKLn1hI1kk=
Subject key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0295DC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:26:21 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 154456
IP: 2001:df6:8040::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169436 (0x295dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:26:21 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:84:19:af:0e:7d:45:35:cb:98:e3:4f:59:
7b:65:6b:d1:a8:49:56:b5:10:11:bc:b8:6f:af:b2:
5f:e7:ea:2e:e9:07:6a:0f:6b:a0:54:77:66:83:0e:
19:f2:d0:dc:b7:24:a7:d1:bd:c4:ba:11:ad:85:16:
54:bd:70:24:1f:13:61:8a:b2:6d:c4:30:4f:4b:8d:
5c:0a:ef:86:21:55:ec:c2:4f:f7:4a:01:4a:d7:fa:
1a:28:a9:2e:d4:d2:35:8e:4e:73:7b:36:c5:85:e0:
86:1c:46:25:03:b6:f5:fb:75:a6:34:1a:72:7b:03:
92:1d:ec:cc:ff:28:a5:14:48:f9:a7:12:0d:b4:e4:
15:50:d6:8d:17:89:df:62:9a:cd:a0:81:c5:d1:9c:
c5:6e:e1:92:8a:53:a1:bf:28:57:39:74:e9:5e:ed:
db:66:50:1f:e4:09:c4:64:b3:2e:2e:7b:3d:02:d2:
35:04:2a:ef:81:f9:d9:10:30:e5:e1:df:5b:16:39:
87:1f:6b:05:b7:50:14:c6:4d:48:cc:75:21:c8:cb:
ef:87:84:e9:d4:2e:7e:6c:dc:10:31:5c:c9:71:ac:
b1:b9:2f:39:df:56:1d:b0:2a:b6:0a:1f:44:19:08:
df:d2:87:ad:0e:79:69:70:eb:3c:bb:80:f4:a4:56:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154456
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:8040::/48
Signature Algorithm: sha256WithRSAEncryption
3a:a2:f3:ac:38:fd:0b:c1:43:5d:f2:ee:08:35:b1:96:7f:f9:
d9:ec:c2:82:e1:ef:6a:f9:47:0f:a2:f8:be:6b:d5:04:cf:36:
a2:eb:d2:30:b8:10:68:6d:ba:61:56:42:e4:7d:8a:4a:6f:0f:
4c:0a:36:14:79:80:82:d1:35:0d:6b:8d:31:34:7d:74:b8:78:
9e:9e:bd:8e:f1:50:5f:0d:35:ca:f0:e2:00:71:15:cc:64:95:
d2:a1:8b:bf:54:29:06:dc:89:51:47:28:5d:7d:90:4b:31:6d:
74:d4:ff:77:89:bc:48:30:6c:05:2e:8d:ef:9e:2d:dd:3b:b3:
cc:7a:9c:84:bd:7f:4a:13:8d:49:03:c7:d9:7f:ad:af:88:1e:
f7:76:3f:a7:e5:93:9e:a8:96:3c:8d:d0:75:d0:25:26:8d:c4:
96:3b:2a:d5:cc:2f:2f:25:a6:fd:99:6d:2a:92:22:90:23:db:
c4:8d:e7:94:17:df:a7:e1:7b:d1:8c:e2:03:1e:f8:e8:b9:2a:
7c:00:ce:2f:58:88:01:29:87:17:50:1e:bf:2b:bb:25:a6:78:
b1:0f:79:cd:bd:53:32:a6:46:b9:7e:17:5c:95:1c:27:20:11:
41:73:a2:73:5e:c4:17:ea:25:21:58:f7:b9:66:45:28:5f:a3:
34:3e:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:06 2026 by rpki-client