Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer
File: 2x_5ooQq3wDKEBQTx5pvACFsWvA.cer (raw, json)
Hash identifier: IN3gck2vU4ZvHZpqUL/lPMEjO9USIdSW7u/Mo6O33dY=
Subject key identifier: DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF95
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Aug 2026 15:49:16 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 150380
IP: 163.52.46.0/23
IP: 2001:df7:66c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184213 (0x2cf95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 24 15:49:16 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91E0E7D, serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:b4:a8:b8:e8:1d:0d:aa:ab:9c:5f:a5:5f:
0c:01:ee:00:c6:01:6a:e0:f6:78:63:26:3f:bc:70:
c0:5f:aa:de:60:7c:e9:66:a6:7f:3a:26:ae:a2:4b:
01:f9:09:25:87:8a:8f:3e:db:24:96:a6:28:0d:cb:
02:c2:44:af:aa:e7:86:1e:ae:9f:2c:b0:ce:9a:1d:
e6:7c:0c:8e:2d:4f:e8:f7:d5:84:8b:23:a6:f7:25:
ff:ce:0f:97:58:6d:76:6b:92:52:f8:38:82:8a:f9:
30:cc:14:f8:37:ca:00:c3:4b:61:de:fe:9d:f9:20:
3c:b4:a9:e5:cc:2a:7c:2d:37:46:c0:80:df:99:88:
c0:fc:7b:bb:da:35:3a:a7:bb:01:df:7b:80:31:1d:
5b:b8:d2:c2:1f:90:7d:52:6c:7a:65:38:0a:96:cb:
d4:2e:87:7c:ed:6e:16:8d:ec:0a:85:5f:e9:96:5b:
42:aa:b1:72:6f:49:91:98:c1:86:c2:79:14:f3:a4:
27:62:f8:5a:4a:55:39:43:61:22:38:11:3f:2f:ea:
07:d3:03:0d:65:20:f4:41:44:ff:e1:cc:9a:87:4e:
14:a5:36:3a:8f:a3:f2:66:bb:c5:02:75:8e:8b:3a:
a2:16:ea:78:be:c4:af:24:09:46:73:24:74:d1:64:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150380
sbgp-ipAddrBlock: critical
IPv4:
163.52.46.0/23
IPv6:
2001:df7:66c0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:c3:12:3e:06:9c:de:27:fa:6d:29:fd:8e:e8:82:51:0b:3e:
9b:ab:28:1d:8a:05:93:e5:f9:67:49:19:12:c9:91:9c:c8:66:
45:d8:57:bc:77:eb:a3:3b:43:e7:55:9c:c8:63:cf:d0:15:7a:
df:aa:f6:f4:0d:e7:9f:d8:13:7c:1b:5e:2c:8e:9e:1a:2c:d5:
08:50:31:ac:78:2b:61:0c:6d:e1:63:30:ec:b8:30:0d:39:d8:
b2:83:c4:50:59:8f:5e:81:99:16:98:25:fa:d0:ae:58:36:c8:
82:43:0a:cb:98:ea:4f:ed:d5:7e:1b:1c:3f:96:ae:b0:25:37:
23:ea:37:98:83:c5:7d:20:4f:fc:fc:79:2f:2e:95:24:65:db:
88:d4:f7:14:e7:b2:98:78:ba:f3:85:ed:b3:6a:e7:b1:c5:2a:
b5:f2:10:c0:1e:98:4b:3a:bf:e0:88:22:06:04:df:0c:8b:5f:
2a:32:1f:d4:23:39:bb:cc:93:eb:c2:bf:63:59:1c:da:7b:fe:
b5:6e:75:19:77:70:88:b5:6c:87:de:f3:47:a0:81:a9:0a:72:
cc:b8:38:1b:80:04:3b:fe:b9:21:20:71:40:22:4b:8f:fc:c0:
56:68:bd:d4:ae:ab:d5:d7:ab:6b:51:a3:f7:a9:f4:c2:13:b2:
ee:57:96:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:08 2026 by rpki-client