Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
File: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer (raw, json)
Hash identifier: HS/yhQpMPM/ba5gnEp3b9eFoSYjG/ZtAfvM+iJ7vTME=
Subject key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D40A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 05 Sep 2026 06:32:21 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154131
IP: 202.12.123.0/24
IP: 2001:df5:f640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185354 (0x2d40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 5 06:32:21 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:db:e3:3f:d4:d8:fa:d5:66:6c:dd:41:97:ee:
74:75:c9:85:b4:30:47:f3:99:f4:f0:c9:d0:1f:af:
7f:0c:5c:b5:5f:32:69:c5:df:cd:80:9a:8c:9e:6e:
62:27:90:6c:47:8a:cd:79:d4:ed:f9:36:2a:ae:0a:
1f:05:23:c9:b7:58:3e:5a:64:ab:53:bb:7d:9a:08:
b3:47:1e:0e:77:f7:ea:d8:3d:48:4a:05:70:9f:10:
6d:87:f7:22:d8:f8:80:b0:63:bc:d0:dc:ec:77:9f:
c5:a1:7b:b9:67:d3:d3:76:6b:17:dc:93:0f:17:c5:
a5:21:2b:bb:be:c7:76:7b:38:dc:15:15:fa:4e:b0:
61:d9:6a:85:95:ce:32:18:9b:39:1d:c9:02:f7:34:
0a:61:0b:de:24:46:40:62:3d:ef:f0:ab:39:de:ae:
88:71:92:de:62:08:b6:f3:2d:4b:e1:b1:db:50:ca:
fc:11:bc:c5:84:da:1d:0a:86:2d:af:8a:8e:2e:eb:
bc:b3:4d:e2:f0:0e:b4:3f:81:ea:e4:a5:c2:b1:3a:
52:26:53:36:b3:f0:42:a8:61:11:00:24:17:f6:ec:
55:2e:b4:b7:53:87:3e:4b:b6:b8:ee:0d:53:2e:40:
97:eb:11:88:a6:47:af:2f:d7:67:47:5d:48:fa:f9:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154131
sbgp-ipAddrBlock: critical
IPv4:
202.12.123.0/24
IPv6:
2001:df5:f640::/48
Signature Algorithm: sha256WithRSAEncryption
2c:f9:a6:63:59:e8:66:5b:b9:d1:f7:37:d4:24:0b:9e:33:18:
01:d7:6d:87:07:69:52:74:26:50:fb:6e:37:da:8d:40:de:99:
d6:38:1f:65:1f:bf:cf:ce:f9:8f:1a:c5:20:7f:50:52:70:28:
39:07:8c:99:ab:aa:98:76:39:d0:f2:86:1c:81:84:35:7b:89:
2a:11:57:d0:9d:98:54:2f:3b:3f:e0:1f:6e:e3:8c:94:e6:d7:
f6:79:08:3d:91:fa:4a:c5:5b:80:b5:7f:cb:c6:20:ed:ca:b8:
97:ab:21:9f:d9:d5:64:a5:64:0c:36:a9:57:b8:e2:37:56:86:
95:f2:2b:8e:80:6e:51:a4:7a:14:28:b8:9c:71:9f:b0:e6:f4:
2f:b0:95:72:6a:b2:22:fb:ee:e2:57:c2:4e:47:bb:9d:67:ce:
b7:42:c6:3c:21:14:81:49:18:db:8c:8a:ed:01:26:75:c2:1c:
a9:b2:94:74:6e:a2:96:3f:01:c3:74:91:d4:4f:34:b9:f2:7d:
82:a0:78:ec:81:80:28:5c:f5:c9:d7:96:aa:b8:99:6c:87:6e:
45:e9:e7:79:25:d3:16:eb:16:e1:dd:c7:02:a6:4e:ba:7d:59:
2c:3c:be:74:b2:17:2d:6d:81:e8:f6:12:31:99:f1:f3:46:b8:
76:84:91:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:55:39 2026 by rpki-client