Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
File: q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer (raw, json)
Hash identifier: l+6LJp9R6KgZ8j5SpenDFBgGlZ6tHOfApx5IrVWnwFY=
Subject key identifier: AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F23
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:09:49 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 142232
IP: 2001:df6:9ec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171811 (0x29f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:09:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A914E1BD, serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:ca:19:f0:9e:17:81:22:f1:c4:39:68:43:
19:71:00:67:99:e4:75:84:13:d0:00:e6:ff:75:a9:
3d:f8:c5:b1:49:fb:45:47:36:0a:de:11:51:eb:fd:
e6:b7:e8:75:d5:77:0c:95:e2:c4:b5:af:1b:8a:f7:
14:13:3d:9b:de:3a:45:d7:0d:e9:a5:87:18:50:76:
99:de:b5:22:1d:9a:f3:c2:31:a3:fb:19:69:a5:71:
9d:87:29:19:fb:8a:ee:d2:2d:81:42:ed:8e:96:79:
9c:b1:cc:9d:0b:a5:80:60:8e:24:be:5b:d1:82:a8:
3b:05:e0:de:7c:d2:af:d5:be:12:32:33:f1:61:ab:
9c:4c:d7:4e:f9:5e:fb:b1:50:68:f3:65:e9:8c:12:
a1:2d:4a:ac:dc:cc:3c:97:10:f9:d5:a9:b0:8e:46:
88:ab:8b:d9:83:70:1a:5a:20:3c:27:30:27:b0:08:
57:bb:d2:76:a1:2c:ab:e1:b1:4a:8e:42:5b:b5:ec:
e2:29:df:a0:e7:aa:9a:90:de:71:2e:5f:c7:79:cd:
53:da:fd:9f:c0:d2:3d:3f:c9:21:a1:58:8e:70:a9:
ed:b7:b7:63:a9:45:1f:06:17:f9:7c:dc:54:83:ed:
d6:e0:00:21:18:97:67:92:af:b5:74:18:e3:ec:83:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142232
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:9ec0::/48
Signature Algorithm: sha256WithRSAEncryption
57:02:bf:6f:7a:95:ea:76:84:73:a0:bf:07:43:e8:1e:a6:88:
46:5d:43:6c:3f:fc:6b:89:76:ee:29:90:40:a1:a1:05:15:af:
00:7c:80:2f:8b:aa:5f:e2:d8:c2:71:56:84:ef:44:e6:57:d3:
a8:e5:0d:2f:2b:c4:33:30:99:6d:72:09:61:51:63:48:1c:10:
67:0d:62:a0:1d:14:d9:83:9e:ad:1e:58:1c:7d:83:ce:04:8c:
cd:27:88:f2:06:6f:9c:18:a7:75:c3:6d:52:f1:84:15:51:8e:
b5:67:6d:07:06:09:48:bc:23:85:86:66:c7:c4:8a:8c:04:d1:
36:15:6f:b9:4b:a1:70:3c:87:9a:7d:8c:3e:dc:50:6a:2e:29:
4f:7b:ea:23:63:6f:56:f4:9f:cd:1d:43:25:99:d6:69:0d:78:
ca:70:3b:80:cc:41:fc:ff:ff:9b:eb:d2:19:68:5a:6f:5c:90:
79:d5:a5:9b:3b:4a:36:ff:3c:40:b4:6e:64:70:5f:4d:f7:fb:
ca:80:49:ce:ed:5e:26:11:7d:cf:a0:e4:4e:4d:12:55:9c:df:
c1:a4:91:7f:7f:63:87:72:9a:89:b0:42:7a:d6:2f:10:34:20:
69:db:93:8e:82:bd:74:ad:5c:a9:39:b1:bf:62:25:84:90:ae:
43:d1:4c:94
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAp8jMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzA0MDk0OVoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNEUxQkQxMTAvBgNVBAUTKEFCQTI2QzdCNzUwMTU1OUFDNDEwOUI4
RjVBRkYyREY0MzM3MTUzRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvOMoZ8J4XgSLxxDloQxlxAGeZ5HWEE9AA5v91qT34xbFJ+0VHNgreEVHr/ea3
6HXVdwyV4sS1rxuK9xQTPZveOkXXDemlhxhQdpnetSIdmvPCMaP7GWmlcZ2HKRn7
iu7SLYFC7Y6WeZyxzJ0LpYBgjiS+W9GCqDsF4N580q/VvhIyM/Fhq5xM1075Xvux
UGjzZemMEqEtSqzczDyXEPnVqbCORoiri9mDcBpaIDwnMCewCFe70nahLKvhsUqO
Qlu17OIp36DnqpqQ3nEuX8d5zVPa/Z/A0j0/ySGhWI5wqe23t2OpRR8GF/l83FSD
7dbgACEYl2eSr7V0GOPsg4D5AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUq6Jse3UB
VZrEEJuPWv8t9DNxU/wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRFMUJELzY0NjhGREEwRkIxMDExRjA5NDdEQjg1Njc0NkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0RTFCRC82NDY4RkRBMEZCMTAxMUYwOTQ3REI4NTY3NDZGNTZCQy9xNkpzZTNV
QlZackVFSnVQV3Y4dDlETnhVX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiuYMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9p7AMA0G
CSqGSIb3DQEBCwUAA4IBAQBXAr9vepXqdoRzoL8HQ+gepohGXUNsP/xriXbuKZBA
oaEFFa8AfIAvi6pf4tjCcVaE70TmV9Oo5Q0vK8QzMJltcglhUWNIHBBnDWKgHRTZ
g56tHlgcfYPOBIzNJ4jyBm+cGKd1w21S8YQVUY61Z20HBglIvCOFhmbHxIqMBNE2
FW+5S6FwPIeafYw+3FBqLilPe+ojY29W9J/NHUMlmdZpDXjKcDuAzEH8//+b69IZ
aFpvXJB51aWbO0o2/zxAtG5kcF9N9/vKgEnO7V4mEX3PoOROTRJVnN/BpJF/f2OH
cpqJsEJ61i8QNCBp25OOgr10rVypObG/YiWEkK5D0UyU
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:54 2026 by rpki-client