Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mlcBgx6Qx7w8YXW02N0KO67j8Y.cer
File: 3mlcBgx6Qx7w8YXW02N0KO67j8Y.cer (raw, json)
Hash identifier: VL1IeiwWeD7Z6pSh5gcam/FaWRsEZ3V4rL9vfnNSm2E=
Subject key identifier: DE:69:5C:06:0C:7A:43:1E:F0:F1:85:D6:D3:63:74:28:EE:BB:8F:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D7E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/3mlcBgx6Qx7w8YXW02N0KO67j8Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Sep 2026 04:06:33 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 55870
IP: 202.74.44.0/24
IP: 2001:df0:d4::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 03:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186339 (0x2d7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 23 04:06:33 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91159BC, serialNumber=DE695C060C7A431EF0F185D6D3637428EEBB8FC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a9:58:db:9c:2f:26:fb:c7:d8:dc:bb:20:2b:
1e:fa:47:83:fc:bc:59:77:4c:76:ba:58:bd:b0:40:
6b:9e:c5:b3:b2:81:04:36:6b:fc:74:17:73:48:34:
29:c2:6a:95:2d:84:fc:1a:4d:28:c2:45:2c:c5:e1:
07:7c:35:94:03:72:eb:08:0e:aa:df:c0:08:e4:bd:
cf:fe:f1:95:5c:e3:6d:6c:46:9f:f0:00:fd:15:45:
e3:92:b8:d0:3f:3d:16:30:32:f3:37:45:25:0f:29:
6f:fa:a6:c2:ad:a1:ff:b5:a7:fb:b6:8a:97:9a:af:
15:dc:79:35:0c:dd:4f:29:36:c2:b1:26:91:cd:d4:
c0:ef:cd:d2:03:e0:0f:51:4a:34:73:8d:0a:19:5d:
a2:36:4e:9b:54:1a:19:cb:5f:77:de:19:49:94:15:
f0:bb:97:a8:b9:3b:cd:c3:e7:06:da:b6:7d:b4:5b:
64:e7:60:df:e7:36:b2:85:c7:8b:1e:7c:c2:c3:d6:
8e:57:2c:c7:4b:a7:1a:cc:2f:ee:bb:88:89:58:da:
e4:9e:d2:81:0c:30:5d:ad:fd:35:56:e7:a5:47:91:
71:0d:02:ea:81:97:15:cd:cc:06:87:65:d3:5e:78:
d1:15:bf:36:ab:be:91:a4:94:ac:21:88:b3:25:73:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:5C:06:0C:7A:43:1E:F0:F1:85:D6:D3:63:74:28:EE:BB:8F:C6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/3mlcBgx6Qx7w8YXW02N0KO67j8Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55870
sbgp-ipAddrBlock: critical
IPv4:
202.74.44.0/24
IPv6:
2001:df0:d4::/48
Signature Algorithm: sha256WithRSAEncryption
ba:ed:7b:28:fc:40:48:c9:0d:da:62:7d:41:ac:71:45:16:28:
3d:ec:30:1d:d5:77:66:df:c3:48:f4:ef:1d:98:bb:ee:2e:a6:
eb:71:70:e9:20:b0:db:87:60:31:d4:2a:e3:5b:50:95:99:50:
b0:7a:4f:17:32:2b:80:a8:71:e4:21:4a:47:98:17:b4:75:9b:
e5:5d:7e:fe:9d:78:7b:3f:82:36:34:80:0c:03:16:05:0c:fd:
8e:6b:bc:10:30:ba:43:50:02:7a:e3:bb:03:eb:ce:2c:53:6e:
3a:10:88:2e:61:ae:b6:33:76:5d:18:11:ae:81:d5:04:10:3c:
2c:0f:71:74:1d:52:8d:eb:d4:e3:cd:b1:e0:15:25:54:31:70:
55:06:4f:b0:ad:73:60:3a:90:4d:39:ba:fc:a8:bc:2a:f9:65:
75:c9:5c:4a:6a:26:60:4e:56:6e:6d:c9:df:66:2c:25:b7:74:
b4:fa:6f:be:de:7e:65:76:b3:a3:3e:90:38:8a:39:02:57:c2:
02:50:af:0c:13:2b:d4:2d:99:fb:2b:91:7c:28:23:10:0c:da:
dc:c5:1d:f7:2c:fa:2f:25:33:0a:9a:ee:18:95:9e:84:c0:ce:
f2:3b:a3:26:41:36:72:49:ea:75:bc:5b:d3:f6:09:65:6f:96:
55:55:7b:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:48:24 2026 by rpki-client