Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4EnEoBiPI8haDO2gxmM6o0uGnBY.cer
File: 4EnEoBiPI8haDO2gxmM6o0uGnBY.cer (raw, json)
Hash identifier: WFdDpDuXTIEUTtAX77SujZ7sROGskmLoxn5K7pG2y24=
Subject key identifier: E0:49:C4:A0:18:8F:23:C8:5A:0C:ED:A0:C6:63:3A:A3:4B:86:9C:16
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A71F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 29 Mar 2026 07:28:09 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 154429
IP: 2402:3fa0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173855 (0x2a71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 29 07:28:09 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9173204, serialNumber=E049C4A0188F23C85A0CEDA0C6633AA34B869C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:1c:cb:66:76:74:c1:3b:38:53:a9:7f:02:
d0:21:eb:21:d2:d2:ee:34:95:5f:64:db:50:ee:ff:
57:76:57:07:fa:8b:04:65:1e:69:58:b1:bc:fa:cc:
60:8b:6a:0d:71:50:fa:9a:21:b8:a5:96:aa:b3:ef:
c8:b9:8b:4b:66:57:bb:fc:8d:c2:cd:fd:81:a5:7e:
3b:8e:d1:fd:8c:72:2b:1e:98:23:f5:44:60:83:31:
aa:88:1d:74:a2:15:ac:49:12:cf:98:b6:4e:e0:65:
61:f5:03:32:50:4c:49:aa:4b:3f:a1:af:a3:d8:e7:
38:b4:97:f8:56:4d:a1:b5:ec:d1:ae:e0:d5:8c:c7:
0a:9b:7f:3d:01:49:1a:fa:79:98:33:8a:c3:12:96:
91:80:88:5e:eb:5f:08:17:98:92:08:a1:37:d3:9a:
6d:11:39:ab:45:c6:d2:56:de:46:c1:db:0e:8f:58:
85:a9:99:84:5b:fb:23:34:51:49:7c:f4:51:3c:08:
ef:b6:f2:5c:a5:6b:9f:12:22:98:cc:6a:96:ce:21:
2c:a6:f9:b9:fc:e8:46:81:47:5b:7f:5c:5d:23:d8:
ab:86:82:5e:3c:3b:65:9a:e4:fb:61:41:d0:17:b3:
1d:29:2a:87:83:ee:1e:02:5b:fc:51:0c:d6:6c:1e:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:C4:A0:18:8F:23:C8:5A:0C:ED:A0:C6:63:3A:A3:4B:86:9C:16
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154429
sbgp-ipAddrBlock: critical
IPv6:
2402:3fa0::/32
Signature Algorithm: sha256WithRSAEncryption
31:e2:61:d3:7c:46:4b:9a:9a:cd:60:6e:36:ff:2c:63:2c:c4:
05:ef:af:46:cd:da:7c:75:50:a6:06:55:2e:0f:af:e9:c0:09:
ed:2e:64:3d:e9:e6:8b:28:18:cd:15:75:d5:bf:b3:54:9b:bb:
9a:3c:9b:b2:96:5d:7b:5d:27:ef:8b:7c:08:ab:ff:9b:fd:91:
c4:0a:f8:4c:ee:95:f3:4a:3b:06:4b:68:b5:25:08:ef:9b:71:
8b:b5:48:50:fa:3d:f3:16:7c:0a:f3:d8:3d:cf:5d:7c:56:30:
ac:9c:36:11:4e:a7:25:03:65:bd:02:0f:46:85:46:f6:61:1e:
23:3f:54:19:6c:67:5c:46:dc:45:de:91:fd:12:08:20:48:5a:
86:8a:c3:34:15:da:18:05:dc:dd:59:d8:c9:c1:a3:75:3e:e5:
65:d9:7c:21:21:e9:2b:63:e9:a1:52:0a:54:92:15:90:1b:7b:
55:6f:f3:72:44:32:01:a2:ce:7c:9c:33:fc:e3:b5:fa:26:bc:
f0:aa:95:de:5f:16:01:18:7d:85:fe:f4:96:43:9a:b8:f9:2a:
67:45:d7:60:11:b8:97:8b:7e:ec:e2:26:35:39:63:13:a3:ba:
85:a3:c0:3f:00:30:76:a5:8d:7b:e5:91:e4:9d:ef:2b:d1:b7:
2e:b5:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:04 2026 by rpki-client