Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
File: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer (raw, json)
Hash identifier: oXbJAoCSe4Oz8Xudvyr6K7VZOZU63qW2Hm8DBxTe0YM=
Subject key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0299D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:45:49 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 152446
IP: 2001:df3:66c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170449 (0x299d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:45:49 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:ad:fc:ba:be:31:08:8f:0e:f3:47:1b:af:
a0:3b:f3:23:5b:0d:7a:ca:26:fa:f6:15:6f:8d:c4:
72:84:33:1c:4a:7d:24:4f:07:56:9d:f4:ff:ad:5d:
69:c1:7e:cc:00:62:1b:ba:1a:b0:ec:e8:0e:5c:8c:
94:4d:ca:8a:5e:ae:51:f1:a4:70:0d:8a:1f:67:12:
1d:35:46:ff:64:3e:f3:86:9a:55:02:d8:06:72:dc:
f1:06:65:93:9c:0a:34:3e:85:e7:46:0b:e1:62:3c:
8e:31:77:2c:9a:8d:83:66:06:1d:8b:a7:6c:fb:85:
56:e0:5a:8c:56:e5:e3:ec:e2:82:35:0b:bf:dc:86:
6c:73:49:fe:b0:68:e4:d7:b8:19:f9:cd:75:18:16:
4c:56:1a:ec:a1:19:d5:1c:d4:25:46:c7:de:d9:56:
b3:ea:85:d4:c2:fa:0b:c9:43:a4:72:dc:44:1e:51:
94:e9:f3:39:57:5f:25:e0:5e:33:36:f5:86:a5:04:
54:b1:9f:1f:61:f1:4e:21:9e:70:45:59:e5:9a:91:
04:89:bf:67:97:ee:9a:3b:38:84:e5:1d:70:8f:0a:
f1:df:fb:35:3f:49:84:1c:54:5a:2a:37:b6:8e:1d:
fe:63:9b:05:30:78:0b:50:d9:aa:cb:70:a5:16:8e:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152446
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:66c0::/48
Signature Algorithm: sha256WithRSAEncryption
51:d9:3d:54:c5:96:7e:fa:46:b3:5e:8d:ac:10:a0:34:2a:02:
4b:38:5a:96:cf:7c:2a:37:b1:3c:3b:0a:9b:26:6e:ef:0e:ff:
96:65:27:d1:27:42:3b:cf:7f:d6:7c:a7:d6:60:15:27:28:e8:
7c:e6:35:9e:37:c9:f6:12:35:eb:72:40:da:05:24:72:e6:56:
2a:e0:f5:08:bc:bd:b6:dd:1f:2c:02:40:a2:3f:cc:39:f0:23:
bb:43:aa:76:f4:c5:bb:6c:59:d6:bf:46:f7:8b:55:96:82:a3:
3f:43:52:d4:db:9f:a1:38:73:e4:46:4a:a4:e8:5d:bb:fb:a5:
c9:e7:ad:2a:48:e3:a1:65:98:f6:f0:b0:12:d3:af:72:af:1d:
d5:00:c2:04:75:57:34:af:01:75:37:b5:47:89:cd:96:d4:28:
0b:3b:dd:77:a9:12:c4:44:4e:4a:98:55:35:3c:7f:82:b1:49:
cf:4e:0a:cf:a3:72:94:88:c5:07:b6:6b:e4:29:6f:51:52:ea:
bc:cc:34:65:62:d4:3d:d0:93:be:27:2d:7d:46:2e:d8:5f:60:
ab:23:64:87:cf:ac:78:0a:fc:8c:cd:3b:b1:8a:f9:97:3a:29:
ea:8f:56:2e:34:03:4f:78:16:b3:ca:ef:c2:19:bf:25:7f:ec:
d1:1a:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:20 2026 by rpki-client