Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer
File: 2hAmH-_a0BGsriMnCqa_jEHeQpI.cer (raw, json)
Hash identifier: qELP4R+Kv6rfXw5qeMgG8SZCwa8ze8PEcxRrPk6W4eE=
Subject key identifier: DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B811
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 May 2026 17:13:18 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 132017
IP: 2402:4420::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178193 (0x2b811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 17:13:18 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9166D4A, serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:03:16:0a:93:5f:f6:cb:5f:6b:bc:9c:5f:
04:00:24:cb:ee:56:d0:4b:80:06:74:16:c4:ac:6f:
d4:86:fa:44:04:b4:8b:16:87:43:8b:39:21:a3:3a:
72:5e:13:5c:24:ed:c8:f5:c3:36:00:b0:c7:6b:90:
38:cc:7f:b2:bc:05:2e:6f:3a:e1:00:29:c6:10:5b:
77:74:d3:43:e3:78:29:d0:da:9b:61:63:96:46:3b:
d2:49:23:50:4f:d6:66:d7:78:03:90:b7:43:51:a1:
05:b9:f2:f3:ac:41:df:f8:6a:ed:53:53:8c:f4:6a:
09:0e:fd:a4:f0:91:90:7c:39:10:8d:8a:6c:51:44:
ca:b1:fc:60:39:bd:76:0a:fb:71:e4:4d:b6:31:18:
60:99:56:a6:cc:d8:38:16:85:a9:62:03:74:36:dd:
ec:b2:0d:12:af:2a:b5:6e:ed:5b:93:86:69:d8:f4:
0d:53:eb:72:f8:5b:26:41:19:7f:f3:70:b4:00:a7:
0d:4a:31:1b:22:51:cf:b5:d0:41:af:26:4f:5b:49:
89:6a:c6:0a:d4:9c:8e:04:22:88:3b:4e:53:d8:29:
12:7a:09:67:b6:1d:b9:80:de:1d:d0:76:fd:2e:2f:
d4:b4:d1:5d:e4:9f:b5:47:ce:d4:b9:d5:f0:20:2c:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132017
sbgp-ipAddrBlock: critical
IPv6:
2402:4420::/32
Signature Algorithm: sha256WithRSAEncryption
d0:9c:d5:63:c5:dc:bb:f3:c2:31:ed:23:2b:fd:15:82:c7:7b:
c1:be:4f:87:dc:4a:33:39:2f:24:56:68:51:61:42:99:bf:12:
bf:82:9f:aa:e7:24:e1:0f:d8:87:a8:95:5f:00:b5:07:c1:3b:
8f:58:60:90:71:87:60:1b:03:a5:0d:96:9f:e0:50:bc:4d:32:
0a:e0:93:9c:0f:f3:b4:e2:f9:78:b0:33:9c:4a:3d:b6:fa:b7:
ac:a5:18:94:e7:97:cc:bb:db:26:c3:b3:e6:ed:f0:1c:6c:c9:
54:48:04:ae:af:44:d9:4e:50:c9:c8:63:b0:8c:fb:c8:dd:45:
72:32:5e:b5:dd:a8:06:e5:72:3c:d3:15:8f:27:18:80:87:ed:
af:41:a0:57:4d:31:64:fd:86:1d:7a:d6:20:7e:2e:ce:19:c6:
82:90:2b:4a:53:4f:b5:c7:46:04:38:4d:7b:92:ee:06:22:06:
14:38:d6:c6:3f:c6:84:18:13:4e:e5:f6:58:d6:79:04:b3:a7:
7d:70:61:0b:9a:10:e6:f0:25:a0:e5:15:0f:c2:f8:e7:29:4a:
75:c1:ab:ab:ec:89:9f:42:8e:a0:18:e1:72:7c:6e:45:37:57:
9c:a5:23:13:b7:2f:69:ce:3f:45:88:86:a0:6e:99:4a:41:ee:
60:33:24:e6
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDArgRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUyOTE3MTMxOFoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjZENEExMTAvBgNVBAUTKERBMTAyNjFGRUZEQUQwMTFBQ0FFMjMy
NzBBQTZCRjhDNDFERTQyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC69AMWCpNf9stfa7ycXwQAJMvuVtBLgAZ0FsSsb9SG+kQEtIsWh0OLOSGjOnJe
E1wk7cj1wzYAsMdrkDjMf7K8BS5vOuEAKcYQW3d000PjeCnQ2pthY5ZGO9JJI1BP
1mbXeAOQt0NRoQW58vOsQd/4au1TU4z0agkO/aTwkZB8ORCNimxRRMqx/GA5vXYK
+3HkTbYxGGCZVqbM2DgWhaliA3Q23eyyDRKvKrVu7VuThmnY9A1T63L4WyZBGX/z
cLQApw1KMRsiUc+10EGvJk9bSYlqxgrUnI4EIog7TlPYKRJ6CWe2HbmA3h3Qdv0u
L9S00V3kn7VHztS51fAgLJxRAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU2hAmH+/a
0BGsriMnCqa/jEHeQpIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY2RDRBL0FEMTczN0EyNUI4MTExRjFBOEU4NDE3N0E3ODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NkQ0QS9BRDE3MzdBMjVCODExMUYxQThFODQxNzdBNzgzMzc3My8yaEFtSC1f
YTBCR3NyaU1uQ3FhX2pFSGVRcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgOxMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJEIDANBgkq
hkiG9w0BAQsFAAOCAQEA0JzVY8Xcu/PCMe0jK/0Vgsd7wb5Ph9xKMzkvJFZoUWFC
mb8Sv4Kfquck4Q/Yh6iVXwC1B8E7j1hgkHGHYBsDpQ2Wn+BQvE0yCuCTnA/ztOL5
eLAznEo9tvq3rKUYlOeXzLvbJsOz5u3wHGzJVEgErq9E2U5QychjsIz7yN1FcjJe
td2oBuVyPNMVjycYgIftr0GgV00xZP2GHXrWIH4uzhnGgpArSlNPtcdGBDhNe5Lu
BiIGFDjWxj/GhBgTTuX2WNZ5BLOnfXBhC5oQ5vAloOUVD8L45ylKdcGrq+yJn0KO
oBjhcnxuRTdXnKUjE7cvac4/RYiGoG6ZSkHuYDMk5g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:46:38 2026 by rpki-client