Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
File: NpGJraGZWwIPq4bXdZjGDCl0d1U.cer (raw, json)
Hash identifier: 94RKT/G8A6qyr2ekr44o4TLvcKAuf0L925OjJBTs800=
Subject key identifier: 36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C89E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 10:43:29 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 154723
IP: 2001:df7:4a40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182430 (0x2c89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 30 10:43:29 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91EC167, serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:f2:08:5f:75:fa:2f:f6:61:f8:c8:6c:04:
3d:5e:95:b8:4e:2e:46:e4:84:af:dd:e5:86:ee:e1:
7f:c2:09:34:5b:b4:5a:7e:70:e8:ba:30:ae:02:3d:
bb:76:a9:58:78:a6:b2:18:e3:44:5b:75:7c:fc:16:
3d:a2:5c:44:3a:e7:b0:da:70:4d:f6:ff:cf:13:71:
0f:76:d9:f6:c1:59:ce:1c:80:92:5b:77:41:0a:3c:
bb:10:25:98:a0:00:ee:b6:fb:e6:b5:7f:7b:c5:46:
d7:40:88:72:31:dc:9f:b3:81:ef:27:76:67:a8:7e:
58:12:83:5b:5f:bf:a5:d6:4e:e3:f0:98:71:64:f1:
db:1b:b2:a3:a2:77:ee:d3:2e:44:5f:21:49:7b:e5:
ca:98:67:bf:d0:2c:ad:92:8c:c1:c1:37:a8:a7:d1:
55:e2:d8:7d:00:49:8b:b9:72:6b:a5:b2:f0:b4:10:
3e:73:57:ef:41:09:33:0a:b9:0f:74:f5:dd:ea:1b:
19:98:d5:87:a1:1f:00:c7:08:dc:62:c1:c0:8e:f1:
9a:cf:db:b5:44:80:66:7d:09:09:08:f9:ab:78:f4:
cd:96:99:0e:f6:02:03:d3:2e:06:4d:20:96:45:51:
a4:c8:83:5a:91:c2:97:30:ee:6d:72:d8:d3:b7:5a:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154723
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:4a40::/48
Signature Algorithm: sha256WithRSAEncryption
27:95:a0:65:51:6c:3b:4d:6e:44:74:29:87:a5:c7:7a:c4:fb:
16:3d:5c:d9:65:e2:56:60:49:8e:2b:59:64:8f:87:85:5f:2b:
57:53:ac:39:61:d5:1c:f5:e9:4d:61:7a:af:7f:e4:d6:62:4e:
34:d4:50:f4:e9:9a:f7:ed:a6:b5:1f:07:10:ae:56:34:59:a4:
dc:1a:32:46:7d:1d:ca:c5:b0:9e:33:a4:38:33:6f:bf:04:6c:
04:a0:54:9f:89:88:7d:0f:90:cf:4b:18:d2:37:78:bb:d2:2c:
e6:e8:08:66:bf:da:12:af:c2:e0:82:70:22:57:49:34:1a:eb:
1a:0b:5b:1a:69:42:32:67:ee:80:25:67:29:47:5b:7b:d6:fe:
7a:df:84:24:64:b8:88:a9:eb:c5:0e:1c:1c:e2:54:1a:e1:70:
04:1e:00:90:52:0f:32:e1:92:6c:9f:1e:18:4e:32:c3:54:fc:
13:1f:73:6f:a4:b9:cf:4e:12:a1:d4:70:26:d5:f4:b1:68:2b:
bd:f7:20:6c:9e:db:27:81:7b:38:b9:1d:a2:df:49:a0:ff:84:
f8:10:34:ac:bf:7e:ca:90:2f:bb:fc:95:ce:0c:8a:c4:25:91:
33:65:14:e2:8b:49:f1:06:3a:2b:0c:ad:0d:b2:15:c5:3b:4e:
5f:09:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:09 2026 by rpki-client