Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
File: i6wN0-SRhYlP2uKChO3IBHILRhQ.cer (raw, json)
Hash identifier: rGx9IWJB4+Ea1hq3ml5DRxmziQ4hrEf+s5SczZZgU1Y=
Subject key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029245
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:08:40 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 7646
AS: 17972
IP: 203.11.128.0/21
IP: 2402:6f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168517 (0x29245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:08:40 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:e1:10:30:e9:07:30:b0:ce:cc:e6:b2:f3:
0c:1c:3c:c4:f7:7d:a0:17:1b:9e:eb:e2:f0:56:8e:
49:64:84:59:be:b2:f6:24:79:b3:73:c1:63:7b:dc:
1e:7e:57:a4:e8:6c:de:67:65:0d:c0:8a:c8:77:36:
6c:dc:22:27:aa:be:28:e5:bd:2b:91:4b:3c:3d:f3:
b6:07:96:89:6d:d3:dc:fd:2d:28:80:41:ce:b3:d9:
bf:8d:52:60:d4:9d:9f:84:db:a1:03:7e:e2:fb:74:
51:5b:4c:95:8e:f7:7f:b9:f0:f5:5a:b7:b0:49:f3:
f5:95:46:da:81:79:82:85:74:19:a4:19:67:5b:bb:
0f:79:48:0f:3e:d6:a0:9d:29:bf:9b:21:df:51:cd:
d7:0a:e0:d8:54:7d:63:1e:01:de:35:8e:9d:0d:3f:
fa:c9:6a:25:41:f5:f4:ec:c0:eb:ba:8e:d3:e9:58:
06:69:a7:63:fa:66:84:d5:ca:72:98:4e:cb:de:5f:
04:62:2a:01:47:13:df:b0:a5:a0:18:32:5d:2b:4c:
60:81:f7:18:64:f6:e0:18:5e:1d:6f:b1:51:02:88:
87:8e:f8:28:06:9c:be:48:64:1b:be:43:2a:73:37:
68:37:5e:67:d7:44:53:12:44:26:a7:45:ab:24:ee:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7646
17972
sbgp-ipAddrBlock: critical
IPv4:
203.11.128.0/21
IPv6:
2402:6f00::/32
Signature Algorithm: sha256WithRSAEncryption
33:f0:25:f2:1a:25:12:03:09:b6:0c:ba:64:a9:1c:7b:69:f1:
d9:9c:78:d4:23:0e:0d:24:35:b1:4d:9d:bb:f8:69:1b:a0:0f:
74:45:a4:5c:50:29:15:64:45:4e:04:5a:1a:33:93:5e:75:cc:
59:df:44:3c:fb:d1:28:99:e0:48:39:17:3c:55:f8:c6:36:46:
d2:a1:50:94:98:6e:64:23:07:61:27:1b:0e:b6:2a:89:d0:6d:
82:47:07:6b:cb:5c:0e:a8:0b:66:35:bf:e3:be:94:f5:bd:66:
9a:a9:2d:00:cd:da:25:af:de:f3:71:df:5d:fd:bb:46:eb:78:
51:3b:47:15:b1:54:7e:73:2b:1e:f7:81:87:b7:6c:03:f4:1b:
fe:0d:c9:93:13:e7:3b:d6:b1:b2:60:90:0b:9f:f5:f8:d2:04:
df:3e:e2:7f:73:47:a1:48:d5:79:21:a1:7c:13:ee:a1:94:0f:
9d:f5:16:70:bb:26:63:72:97:57:da:5e:80:f0:68:ec:4e:d5:
1f:35:26:97:92:3f:ba:e3:7c:50:e0:b7:24:a4:61:68:c8:f6:
90:42:3d:aa:79:5f:b6:18:36:27:c6:e3:df:39:0a:bd:c2:1c:
38:93:18:e9:e2:ee:44:b6:15:1b:0b:52:5f:9d:07:5e:be:24:
93:79:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:50 2026 by rpki-client