Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
File: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer (raw, json)
Hash identifier: uOOwbGwNfRafjq4j4TVz//TpFJsJGsysg4qQK3/D+Ns=
Subject key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A089
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Mar 2026 05:18:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 147006
IP: 2401:bee0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172169 (0x2a089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 1 05:18:57 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A918497E, serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:aa:cc:bb:57:33:bf:b9:2b:82:b4:ca:83:
04:2f:7b:4f:e9:5e:a9:3d:81:72:76:43:b4:09:af:
4a:68:46:ae:c8:c0:00:f0:ae:b9:84:8a:31:91:c6:
a6:a0:e2:4a:0e:04:d7:db:0a:84:10:4e:10:a4:79:
ce:ba:dd:d6:9a:65:99:44:11:80:97:19:76:b1:b7:
b6:2a:51:bb:97:40:75:12:a4:ea:c3:08:3d:6c:1e:
a4:3a:84:58:4c:02:1a:c9:95:d7:c0:b8:82:fd:b0:
92:1b:8c:c8:33:7b:90:6a:d9:6e:d7:55:3d:c6:8e:
6e:1c:91:6e:90:e4:1e:c3:63:a7:8b:64:80:b3:4d:
03:52:50:3f:84:c5:6c:08:0e:7f:11:65:5a:31:fa:
9f:5d:af:11:cc:4d:c2:e7:51:cc:d8:bd:1b:97:ab:
22:d4:b5:8d:c6:8e:88:6f:51:02:07:47:f5:70:30:
8c:26:65:2d:19:df:c4:66:9c:eb:03:18:b7:12:d8:
91:23:d9:ba:b2:0f:b2:d4:17:4d:5b:1a:38:e4:5b:
66:e2:0e:1a:c1:09:78:36:3a:69:7e:a6:59:f1:7c:
e1:7b:1f:dc:69:3f:80:8e:62:dd:2f:59:81:77:9e:
7a:52:7b:7f:67:3a:1b:bd:86:dd:a3:f9:2d:c1:e1:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147006
sbgp-ipAddrBlock: critical
IPv6:
2401:bee0::/32
Signature Algorithm: sha256WithRSAEncryption
58:b2:27:10:ad:94:b9:2e:a1:1e:60:1c:80:9a:a2:01:92:63:
87:24:44:24:a6:23:20:be:a5:ef:dd:f5:85:d9:37:d4:19:c3:
33:0b:50:e8:07:49:33:53:3c:cf:ff:a1:25:a6:ed:56:5f:34:
87:56:f3:b7:93:81:b6:0a:48:84:fc:27:92:3f:5f:0f:e4:88:
dd:00:4e:91:16:81:b4:48:87:eb:36:5f:3b:80:14:2e:73:5e:
02:70:57:9a:24:ed:e5:7c:bb:a1:fb:5f:df:8c:12:28:84:cf:
47:af:f2:4a:77:4b:85:36:6f:9a:bc:05:b1:20:9c:87:38:20:
63:3f:b0:75:05:9a:2d:ea:0b:ef:6d:1a:35:6e:ea:54:e3:6c:
ca:70:9e:0d:a5:9d:b3:cf:ca:cc:5d:a9:cd:37:87:2d:21:78:
08:1a:d1:e9:26:7b:08:b7:4c:69:a6:cb:b2:17:2f:70:6e:00:
af:27:0c:30:f8:9e:bc:8d:9b:a7:88:f0:06:bc:cc:76:07:77:
53:1a:e0:18:61:16:d3:8c:5c:7b:cc:13:a8:96:44:52:74:4c:
de:1e:02:24:00:47:fe:fb:6f:fd:fa:2f:b5:ca:98:20:7d:a4:
0d:cc:4d:66:0a:96:a4:9c:44:f1:85:12:7e:0a:c7:3b:87:c4:
ad:72:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:42:07 2026 by rpki-client