Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
File: 4kseiTWUfEbxEc4paFpZGaGEgWI.cer (raw, json)
Hash identifier: ryoQZoDN5U3v21yWkc3heXJz1vuqfZvO1rMU1sRKHVQ=
Subject key identifier: E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CDBB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Aug 2026 05:42:00 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 133946
IP: 2402:6860::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183739 (0x2cdbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 17 05:42:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91AC757, serialNumber=E24B1E8935947C46F111CE29685A5919A1848162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:0c:1d:2f:5e:fc:38:a7:63:ac:b6:f0:3d:
93:f4:51:aa:a4:aa:6a:ab:49:77:27:7f:3c:00:a2:
55:3f:ea:e3:70:e8:ee:d5:14:b7:98:1f:c4:65:bc:
f7:1f:c2:f9:08:0b:f9:a8:4e:9f:34:10:03:8e:ca:
9e:39:65:a0:65:78:b5:cd:52:49:56:3b:8c:ad:af:
52:3f:51:a6:f2:a2:b7:13:33:2a:67:6e:75:bf:ba:
18:82:ea:6d:dc:f1:dc:bb:59:17:8c:19:3d:59:77:
53:bb:fb:a1:d4:41:a0:5b:ba:6a:ae:20:da:14:bd:
03:0b:ec:9c:3f:d7:17:f1:75:bb:e3:b3:d3:73:5b:
69:6f:30:ca:07:c8:11:ec:df:63:e8:e1:f2:97:aa:
ff:43:25:cf:e7:e5:3a:6d:80:b5:cb:8e:bd:5f:d7:
22:f1:a8:93:49:58:55:24:dc:b6:7d:57:48:4f:dd:
40:f2:29:e6:87:8b:45:13:b0:ef:9c:fc:4b:c8:5b:
55:85:7a:ee:fa:8b:a0:06:8f:68:85:3a:03:78:d1:
15:d1:d7:02:73:02:5b:4c:19:e1:d4:ec:f8:66:f3:
59:2d:e3:24:12:6b:b8:76:99:fb:3b:fd:bc:8e:cc:
dd:80:14:c0:97:dc:8b:09:ac:27:a0:08:ed:40:2c:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133946
sbgp-ipAddrBlock: critical
IPv6:
2402:6860::/32
Signature Algorithm: sha256WithRSAEncryption
59:53:e6:77:f4:0a:4a:e4:4b:ea:c1:09:23:b2:ce:fb:4e:21:
92:a1:66:07:0a:16:18:94:cb:70:1a:4e:ea:ee:1a:cb:6d:2d:
f2:36:57:d0:42:9e:39:7d:ca:8f:71:59:05:59:ee:de:ad:06:
de:da:4c:2d:cd:1b:9b:1f:e6:46:65:a9:90:84:31:c3:e9:25:
8d:a9:cb:57:84:6d:dd:98:9b:27:22:36:8b:f1:e2:1b:e5:e0:
1b:19:1d:eb:41:60:92:ef:87:e5:c0:59:c8:85:c6:7a:66:81:
5d:fa:35:99:1e:23:a9:b9:34:6f:a6:8d:c1:6d:cd:ff:f6:93:
b9:97:02:c4:af:49:e2:5e:c3:75:1d:35:f6:26:76:51:68:50:
11:3d:99:43:8b:76:dc:52:f6:2d:4d:77:ea:2c:ca:79:26:ae:
0f:a2:00:1f:7b:cc:5e:55:55:a8:63:7d:f7:c3:20:ea:83:c8:
2a:a2:c8:87:4e:c0:4f:be:20:a9:93:05:91:41:2b:0a:a2:58:
85:b4:eb:36:7f:55:e5:f1:7f:eb:09:3f:5f:48:6c:7e:9b:5a:
ba:b0:34:3f:4e:fa:15:4a:2e:cb:cc:27:ec:b1:03:8b:22:2f:
83:83:be:23:95:dd:5a:f5:27:cb:75:a0:d1:b4:1a:27:24:8a:
a8:f9:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:09 2026 by rpki-client