
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
File: AEu7wBxXH6cPIOpEBQBX2dyeutI.cer (raw, json)
Hash identifier: sIFq4bUqD/yOrqY0WlO4QhCQI8WmcvfpOQcJg0ZOZAE=
Subject key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028DD7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 07 Feb 2026 03:54:05 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 152458
IP: 2001:df3:7140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 12:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167383 (0x28dd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 7 03:54:05 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:ba:2b:80:e1:8e:7e:93:30:a6:7f:4f:4e:
d9:e8:60:63:9c:a6:f7:55:22:d9:17:ae:e5:28:16:
0a:06:8c:f9:7f:e9:42:02:68:12:77:55:60:4b:82:
a5:cc:40:53:85:2f:37:19:a8:b2:6f:cd:ec:45:7c:
bf:51:e2:d3:a9:50:3b:2b:2c:aa:69:37:d8:08:94:
63:6e:85:5f:73:0c:6d:9d:43:26:f8:53:5e:2c:c4:
a1:a9:4a:9a:53:ab:87:8d:62:da:69:8d:e9:36:25:
b0:34:d3:54:57:e6:7e:78:40:f5:34:c6:7d:19:3b:
c1:b4:08:76:e3:19:85:9a:55:7a:cf:9a:18:72:5e:
21:8b:fe:c2:f5:05:07:4b:43:44:55:99:0c:f4:a4:
4a:f2:9f:19:16:71:e6:7a:85:2e:e6:5d:24:d9:2d:
49:de:8d:12:8d:63:90:e4:32:6d:10:e3:e3:45:1a:
48:a7:5d:9e:25:27:0b:45:f8:a5:b7:4f:11:61:3e:
d7:e4:e3:4b:bb:e3:66:ff:56:52:e6:3c:0f:0b:27:
0e:71:53:6b:ac:83:06:95:d5:56:be:58:65:97:50:
5b:48:d4:9a:7a:ee:4a:d5:3e:9a:f4:0f:ba:24:4c:
47:55:e2:46:ad:fd:ae:bd:af:49:53:d4:7c:f3:df:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152458
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7140::/48
Signature Algorithm: sha256WithRSAEncryption
34:60:c3:bc:40:ad:35:4a:b5:2c:5c:26:27:28:52:7b:0b:ac:
2d:44:c1:ef:c5:68:25:cf:fa:a8:56:a9:b1:d0:12:5f:07:9c:
b7:c7:e4:57:06:6e:95:ff:7f:cb:47:6b:af:a2:35:68:60:70:
9c:e9:7c:96:83:61:87:32:0b:3b:40:4e:fb:db:9c:d6:93:96:
e1:ad:93:92:22:00:61:e5:0c:a6:34:0c:07:2c:0d:45:eb:e0:
c9:59:64:e0:63:ab:ce:07:30:a6:b7:a1:d4:83:59:c6:f9:84:
ee:3d:f7:82:ae:5a:58:62:b4:e3:b2:c3:e0:d7:ba:35:7a:12:
44:5a:6c:7a:66:6f:41:23:9c:ad:ff:38:35:11:05:7f:58:23:
b0:54:4d:56:1b:76:b0:28:d5:39:42:67:04:3e:28:90:6c:fa:
49:9c:cc:98:e6:65:92:af:85:1f:ab:89:dd:97:24:03:0c:42:
40:e2:c5:fe:31:39:7e:c5:b7:e3:3b:da:a5:ae:37:0b:4d:ff:
75:67:99:ed:3a:80:87:6f:3f:50:83:3e:66:d3:d1:50:9d:6f:
01:d3:5e:ae:e3:1b:97:30:2e:4e:56:ca:8d:e5:69:82:a4:a0:
8e:28:91:5e:1c:d1:81:cb:b1:76:9c:ea:c3:b2:33:ea:85:fe:
13:be:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:06:06 2026 by rpki-client