Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
File: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer (raw, json)
Hash identifier: clzJwQpGXXx2CjPwSsWyhShs4dXa0Xlnh4IYdqZb48M=
Subject key identifier: 23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF12
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 22 Aug 2026 08:16:17 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 132367
IP: 2402:6ca0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 01:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184082 (0x2cf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 22 08:16:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9122796, serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:bb:cf:22:79:89:e8:48:de:d7:da:3b:bd:
54:0a:a4:71:60:01:87:04:7a:4b:af:f0:a0:83:34:
a8:d4:2b:ec:84:5a:78:1b:f4:a7:11:0d:28:f1:be:
67:84:7c:05:a1:4c:d0:cf:5e:19:ee:f8:11:3b:61:
f0:78:cd:4b:39:32:3c:45:77:08:a4:13:b8:66:74:
1b:6d:4c:27:83:34:fc:07:db:b6:9d:83:9c:a1:fc:
eb:df:5c:2a:af:82:8d:f8:ab:36:bf:ad:13:96:fd:
6c:65:f3:ad:f0:84:87:5a:75:0d:3f:1a:7f:05:6d:
cf:f1:d6:f9:a9:a6:c0:c2:03:cf:d1:f9:6a:cc:8b:
86:15:6d:a4:ee:90:db:29:51:59:9d:bc:f1:79:b5:
d3:1b:eb:7f:24:17:6b:6a:3f:f6:64:d8:8c:f4:4f:
4c:6d:81:f8:be:5e:4f:9d:bf:a2:16:ec:43:a1:8d:
28:24:8f:bd:ed:15:10:82:03:6b:f1:48:0d:39:3e:
80:aa:df:df:fc:0c:87:e3:a3:d5:e1:fb:67:cd:bd:
72:e3:26:56:bb:e8:19:97:59:6e:95:22:1c:ca:1d:
75:dd:64:f2:6a:20:71:61:f5:a4:55:07:a8:eb:84:
f0:48:9d:e9:5f:a4:ab:cb:15:db:a3:2c:02:4d:1c:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132367
sbgp-ipAddrBlock: critical
IPv6:
2402:6ca0::/32
Signature Algorithm: sha256WithRSAEncryption
43:10:b7:d0:7b:32:82:b9:9a:71:5d:6e:a5:86:56:55:9b:6f:
43:8d:f6:72:be:8a:cf:3c:f4:82:5d:db:b0:f2:22:44:1e:f7:
f2:3d:85:ad:ab:33:e1:57:53:d0:f2:aa:0b:03:58:87:31:7b:
f9:9b:8c:fb:80:51:cd:5a:91:79:bd:a9:f0:3d:fa:96:29:6f:
72:db:11:ce:0d:5a:33:1e:5e:13:f9:4c:40:2c:16:db:d1:62:
43:4e:0f:25:d6:51:66:fc:ad:3a:6a:de:79:64:bf:89:7b:e4:
2d:87:47:77:be:19:6c:08:68:1e:3f:02:be:fb:c6:44:8a:a0:
0f:ce:5e:92:a8:bc:db:2e:7c:7f:e6:c2:c6:97:15:13:fb:9f:
f0:ff:34:98:48:52:7c:ca:e0:0c:a7:a3:a4:e4:5f:c2:6b:69:
0b:77:72:41:9c:cf:62:0e:93:1a:6f:33:6e:d9:ed:ea:3b:7f:
84:91:2e:fd:d3:ef:0d:ee:ce:41:84:48:3e:ae:ae:34:ca:5a:
c0:eb:c7:59:ab:e2:3b:48:e0:76:15:b1:ab:7e:6d:8e:de:31:
b5:2e:ae:d7:28:6f:62:98:10:dc:a1:99:78:83:3a:7f:ae:40:
66:3f:51:da:3d:41:72:cf:2b:44:96:6b:c1:16:36:da:41:1d:
a2:f3:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:33:29 2026 by rpki-client