Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
File: bCaeUzC71Mculn7D40rmph7kR_Y.cer (raw, json)
Hash identifier: C/rgV+LBgkmuQEb2dBQPu5BYBsG5a49xj9gmPSbxANo=
Subject key identifier: 6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CDE7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 01:15:00 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 153386
IP: 2001:df4:8840::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183783 (0x2cde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 01:15:00 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91FAB2C, serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:f6:83:b5:99:76:b3:c3:ab:be:2a:ba:16:
f5:bc:6e:de:57:77:0d:b0:11:c0:c9:aa:9d:6b:ef:
11:e2:27:96:5e:a9:24:40:00:09:5f:92:c4:c2:61:
ff:ee:18:40:ac:64:75:55:e3:61:3a:41:70:b9:04:
0d:40:70:e7:d9:b9:7d:bb:3c:c2:76:a6:ef:46:0e:
87:47:21:bd:e8:58:82:1a:34:73:be:d2:f2:af:2f:
59:f2:16:60:81:95:9c:0e:a3:41:44:88:ee:54:80:
3f:9e:e3:f8:97:20:82:33:9d:a0:6d:18:24:b6:79:
b4:e6:d8:39:08:0d:da:06:5c:7b:ed:44:b3:ac:6f:
54:1c:2c:00:0b:e4:1f:f7:49:f5:08:18:06:71:b1:
0f:4a:a5:72:59:a2:ae:b8:93:0a:80:92:fe:4c:c0:
a3:d2:8a:9b:3c:17:e8:32:9a:d6:84:81:9d:f8:8b:
8d:ee:e0:ed:34:50:65:4e:90:02:bb:70:e7:d9:d9:
36:ca:dd:3e:53:43:8b:e2:3b:78:99:a8:bc:63:eb:
26:8c:7e:9e:42:39:39:c3:4e:8e:73:48:9d:96:f9:
6c:c9:0e:06:00:45:4d:99:1a:76:8a:4c:63:40:1a:
cc:b9:45:90:d8:b2:d6:27:9e:8f:24:c4:f9:37:04:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153386
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:8840::/48
Signature Algorithm: sha256WithRSAEncryption
7e:cb:1b:07:d0:15:b0:5f:1e:00:79:84:38:98:85:d5:4d:81:
ec:a5:76:4c:fb:3e:c2:ce:f4:3c:7e:fb:a5:97:9c:da:0d:23:
01:7f:f2:07:1f:80:65:06:7a:9e:52:c6:ff:d7:7d:ca:50:ba:
c1:bb:3f:62:6d:07:75:67:8e:a3:4c:25:8c:c6:ac:45:6f:66:
22:1c:b9:fb:5a:22:9e:ff:a6:f8:25:d7:bf:a4:48:b7:dd:0b:
91:84:43:00:3f:a8:49:f1:25:3c:bb:ef:ba:89:2a:ca:c0:61:
11:48:4a:2e:04:cb:bb:9a:6d:58:31:ce:12:b5:07:ce:12:ab:
93:b5:a7:e6:aa:ee:bc:44:08:39:13:70:af:e2:05:21:00:b9:
09:32:33:5a:89:47:af:ff:77:53:29:a2:27:88:e5:8b:84:dd:
02:0e:55:a1:50:6f:22:56:f9:0a:0f:71:1a:11:f7:09:27:f5:
46:f3:cb:d0:9b:82:12:4c:8e:34:55:a8:4a:14:e8:e1:b0:ad:
f8:c8:4b:fe:ff:ad:2c:22:41:78:88:f7:5a:b7:f4:30:6f:62:
74:a8:75:42:7d:1c:b9:48:f4:94:86:28:30:39:78:ce:0a:ba:
0d:95:2f:39:2a:76:2d:b6:7d:e3:2d:54:b8:24:33:71:04:59:
be:db:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:16 2026 by rpki-client