Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H7vwei9pDKhIQ84dxk7cV6zmbA.cer
File: 2H7vwei9pDKhIQ84dxk7cV6zmbA.cer (raw, json)
Hash identifier: 0VmYL//yOqYPipAuBpRwCx+OLZdepXBgdy/NJGCdtVg=
Subject key identifier: D8:7E:EF:C1:E8:BD:A4:32:A1:21:0F:38:77:19:3B:71:5E:B3:99:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C429
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Jul 2026 13:38:45 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 154755
IP: 2001:df7:3140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181289 (0x2c429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 9 13:38:45 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A912A45D, serialNumber=D87EEFC1E8BDA432A1210F3877193B715EB399B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:7c:bd:b3:b2:77:4f:c6:b4:cf:ff:76:ac:
52:3f:04:21:b7:c4:d9:4c:6d:b3:03:fd:75:a5:9a:
63:80:c0:3b:b5:3c:f0:8f:87:42:21:f9:6f:d7:75:
b8:98:f4:8c:24:2a:c0:77:c1:ac:5e:5c:ad:6c:41:
e3:9f:d8:cd:56:c6:44:78:f5:4b:ce:49:d7:0e:e6:
d4:8b:5e:38:0e:62:95:59:12:37:8c:a3:69:9e:05:
66:d8:06:21:35:d9:7e:73:19:72:93:f0:65:58:c5:
71:cb:2e:2a:6d:6f:6f:26:47:43:db:bc:db:51:50:
a3:65:f7:93:51:49:b3:55:6f:4c:00:90:84:40:09:
4b:54:c5:db:bf:36:72:c7:4f:7d:a7:8c:dd:ba:34:
57:40:f8:5d:13:a4:3f:fe:23:82:ad:98:78:7f:04:
c0:10:bd:6d:7b:c6:2b:db:15:d5:3e:12:6b:bf:41:
d6:2b:a6:da:94:98:74:d6:fb:c5:5e:0a:43:44:8e:
ba:f8:76:d4:c6:51:a0:9a:ad:7d:ea:68:3f:41:5b:
a8:61:af:49:bb:7f:7d:d5:19:1f:0c:1e:0a:a7:ea:
f1:aa:f4:28:ca:7d:f9:87:89:28:6e:59:c4:11:cb:
4e:f5:1f:94:05:58:00:32:42:e7:06:b9:b9:83:bb:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:EF:C1:E8:BD:A4:32:A1:21:0F:38:77:19:3B:71:5E:B3:99:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154755
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:3140::/48
Signature Algorithm: sha256WithRSAEncryption
08:0b:e6:b0:f2:03:7a:e2:9a:4e:37:81:2a:39:70:2d:05:9d:
02:60:bd:1d:71:5b:c6:73:a0:79:79:61:5c:91:fc:88:0c:93:
83:e1:cb:04:05:30:bb:60:62:67:70:12:be:b8:b3:dd:18:90:
f1:fc:62:91:66:cf:d6:58:cc:57:e8:1e:b9:99:d3:4b:d9:62:
a4:e0:04:58:c3:a4:9d:f5:3c:23:00:d9:8f:a4:a0:a0:f1:87:
bf:58:06:4a:31:16:d8:e4:ca:11:84:70:5f:e7:4c:f0:67:ba:
3e:21:78:c3:75:ea:e6:db:50:40:e3:a6:5f:ab:f8:83:c4:83:
a6:31:2a:08:d5:e7:de:fc:06:5a:2b:b2:fa:54:49:ae:3d:97:
6e:47:05:1e:48:61:1b:85:54:8e:91:32:b1:da:87:b6:bc:4a:
a0:38:76:78:1a:62:16:61:0b:be:c8:0b:63:2b:da:ec:85:3c:
6f:64:e7:de:02:70:2e:3a:d6:8d:19:10:d3:e6:03:75:84:78:
8f:fe:ce:fd:d8:96:cc:01:85:58:6d:ef:dd:36:97:2f:94:89:
73:e8:6e:2b:a9:6e:cb:a9:db:d3:64:59:c9:b6:78:64:ec:30:
73:60:cb:aa:af:1d:8a:e2:c0:95:78:1d:86:9a:9f:66:a4:f7:
28:ee:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:52:40 2026 by rpki-client