Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
File: kI2z-bdG9SC7uahMhT9pJsFeub0.cer (raw, json)
Hash identifier: 9vxIZiNbGd216z5M6+MVr9wR7Y4+zsHpiiEVl20dRcM=
Subject key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C80B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 14:29:30 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 152918
IP: 2001:df3:ed40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182283 (0x2c80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 14:29:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:f8:d5:eb:31:cd:61:47:8d:d9:19:68:77:
d8:93:33:4e:19:35:34:0d:fb:23:a4:4a:0c:05:a9:
50:64:e4:cd:aa:dd:cf:a8:c9:f5:8b:84:47:91:b8:
31:e8:13:22:5c:a6:91:71:f1:19:09:e4:2c:ba:57:
ae:f2:84:33:1f:e5:0b:77:52:3b:3d:14:7d:c5:25:
d6:51:b2:7e:90:e9:2f:52:fa:27:c9:13:2e:26:e4:
55:2b:10:56:e5:09:66:3f:b7:9a:4b:b6:1e:0b:ed:
f8:53:33:4b:87:1e:89:63:8d:81:a9:8f:ca:bf:8b:
04:8b:9e:9b:8a:22:fe:ac:b1:21:f4:7c:af:a5:ad:
a2:fe:72:cb:85:aa:2d:35:59:a7:71:6c:06:7b:79:
08:44:e4:fc:5e:cd:af:10:69:3b:81:97:09:44:d3:
f6:25:7b:c4:eb:df:5a:20:77:a6:52:a8:32:83:ed:
57:d1:6f:1b:1d:15:a8:80:b8:c7:a7:87:88:1e:8c:
42:a9:18:ad:9e:06:39:51:53:01:e9:85:04:b1:fb:
0a:74:ed:42:93:31:d5:3f:69:ca:f1:bf:8a:3c:64:
f4:9f:a3:3b:93:af:40:ce:60:0e:fc:04:87:d8:e8:
ee:b4:ad:ab:fb:51:71:1d:8b:34:a7:61:94:92:55:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152918
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:ed40::/48
Signature Algorithm: sha256WithRSAEncryption
0b:d5:72:d6:79:f7:73:72:42:35:3d:cd:d9:6d:6c:cc:88:72:
b5:c7:08:27:37:0e:33:ee:11:49:37:3c:f5:21:5e:fd:b8:fc:
d2:ec:f5:52:25:cf:fe:5f:1f:44:4e:78:e9:31:6f:44:29:fc:
cb:d6:37:0c:c7:2f:03:a8:8f:d4:cd:a3:93:d3:ae:27:14:6d:
42:80:15:52:52:27:8e:89:d9:38:a0:44:49:d6:0f:45:94:bc:
b2:7f:ad:b3:8f:67:c3:b1:7b:cf:bc:70:60:cb:b9:e2:24:5e:
65:ac:69:6c:8a:7f:32:dc:2d:75:21:14:0f:e5:54:b0:69:8d:
0c:27:4a:eb:c6:b6:46:be:1a:b4:11:64:2b:ad:86:02:57:9a:
67:25:e4:f5:e5:ce:9c:cc:0c:8b:b6:9e:4e:7a:50:61:d4:63:
71:85:b4:3e:1e:fc:e2:6f:44:e9:90:76:41:e5:b8:a4:0c:bd:
66:d3:f0:3f:91:98:89:c3:98:6f:3d:c1:9f:25:10:c1:34:ad:
b9:74:ba:e7:a4:b4:b6:ec:2a:76:c3:0e:ad:09:b1:36:24:27:
f0:dc:5c:87:64:01:33:0f:81:f0:62:68:7c:8b:47:cd:46:53:
41:be:2f:1e:6f:06:35:75:3e:e3:9f:9f:68:1f:45:71:1d:19:
78:04:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:28 2026 by rpki-client