Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
File: hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer (raw, json)
Hash identifier: uyr/wKCxoRr/HnCm45eFwtl+5JVZK7ZA+xxrD4id9qE=
Subject key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029312
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:13:22 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 151805
IP: 2001:df6:bf40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168722 (0x29312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:13:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:b2:6b:61:42:ba:29:3f:b9:2a:3d:e6:c3:
0c:3f:5b:5b:1a:d4:f2:f0:d1:38:e5:27:00:8c:50:
61:a0:b9:bb:41:0f:c6:d4:85:b6:2d:8b:9e:f9:98:
7d:a4:00:f7:43:73:e5:26:f5:a3:9d:3c:9a:b6:90:
e2:3a:9f:7b:52:0f:a9:f8:54:1a:b7:ba:5f:40:70:
ac:7a:b8:10:a2:ad:ca:60:20:73:a1:6d:60:68:5c:
a5:b3:c7:65:64:7e:2d:87:ad:30:01:44:ee:52:0c:
df:27:a7:df:9b:54:44:8a:d1:93:b1:32:4c:db:79:
37:5f:14:5c:0a:c9:4a:92:c9:27:26:b7:db:64:23:
45:6a:57:7d:68:53:0f:53:de:cc:94:98:15:54:55:
93:90:01:f4:2b:b7:42:ed:25:03:64:b1:91:a2:b8:
6a:b5:82:cc:cb:42:40:cf:d5:6e:8e:ed:bf:51:89:
b1:90:54:d5:8f:d1:8f:c7:1f:24:ee:f1:8d:fb:ee:
8e:d1:b9:a0:fc:f7:d2:8a:3b:14:ed:0e:56:3d:5e:
c2:c2:44:c5:c2:56:e7:8b:aa:cb:ad:d2:35:0b:04:
5b:45:6b:ba:d0:fd:4b:f6:4b:af:26:d5:01:52:79:
12:b0:e4:bd:7b:7e:55:d6:da:97:e1:99:19:99:43:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151805
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:bf40::/48
Signature Algorithm: sha256WithRSAEncryption
ca:28:b3:f7:4b:03:37:2d:47:59:f5:ee:6f:6c:88:d7:dd:ba:
39:2d:7c:aa:99:09:6b:91:6f:f0:56:25:e8:9c:64:34:9a:d1:
74:aa:a6:58:21:36:79:e2:e6:6a:c6:87:9c:c5:3f:0b:21:27:
eb:45:75:b6:8a:48:0e:40:c1:fb:17:64:77:6c:bc:2e:1d:7d:
10:10:d9:ca:fe:bc:b8:33:a7:99:96:45:05:46:45:78:5d:62:
2a:fa:68:17:2b:03:6b:3f:3f:53:e4:6d:d9:c2:66:45:d7:45:
2b:06:46:c7:fb:21:f4:58:08:4c:e3:c3:99:9b:6b:3a:23:60:
62:74:65:8d:41:42:b3:4a:a9:f5:82:da:ac:66:5c:69:25:68:
d1:82:c0:9f:16:8d:c4:88:d3:3e:e2:ed:ba:82:d6:ab:eb:ac:
ee:32:b4:9f:7f:74:bb:df:c5:2b:b6:76:ac:90:b1:4c:7a:f8:
b4:9e:ee:90:ee:e3:23:c0:6a:9b:3b:6f:cc:9e:f1:94:c1:0d:
71:4f:c9:5d:b0:9c:87:53:33:7d:10:20:e0:4a:53:02:56:ea:
b5:b4:08:1b:fe:3a:da:ed:8f:6f:1e:17:77:2c:6e:b8:97:0e:
03:d9:90:55:3d:fb:30:4e:15:af:4a:54:43:ab:d9:49:be:f5:
36:3f:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:22 2026 by rpki-client