Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
File: U7k_pg5FC4jfnLdgztYlltomSAY.cer (raw, json)
Hash identifier: 0jYGESFiIKzwGelmShJjpAkEK2kRB1+N/H07yQd4z+8=
Subject key identifier: 53:B9:3F:A6:0E:45:0B:88:DF:9C:B7:60:CE:D6:25:96:DA:26:48:06
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D818
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Sep 2026 02:39:18 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154803
IP: 2001:df7:50c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 12:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186392 (0x2d818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 24 02:39:18 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91927A0, serialNumber=53B93FA60E450B88DF9CB760CED62596DA264806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:21:f5:72:5d:df:d0:5f:81:db:22:b5:c9:
92:e0:54:fe:c6:57:61:17:ef:bd:90:bd:2a:73:c7:
f1:8f:ea:28:e8:2f:ce:39:9e:eb:1c:84:18:b3:80:
d5:e5:9a:c0:ab:ce:c7:aa:cf:c7:2f:11:b2:f7:fd:
ec:0d:b5:54:5f:b9:b0:57:39:ac:36:78:78:dc:2b:
b8:61:2b:10:6e:97:90:1f:63:35:5a:83:2f:3a:4a:
5b:06:7b:b9:4d:fb:8e:94:00:4f:81:0b:cf:1f:28:
98:3b:1e:bf:0f:da:b1:78:0d:8d:7c:fb:4f:a6:f7:
85:f3:66:79:d1:c6:fe:8d:09:ec:37:24:25:1c:87:
15:6a:a5:0f:38:51:0e:d4:02:92:9a:87:54:03:b4:
cb:c2:d3:5f:21:4a:9e:f1:6a:a3:f7:e6:40:1e:52:
53:a1:f2:b0:39:16:0a:c2:06:31:6b:1f:cf:e7:53:
71:3c:9c:0f:ac:20:0c:8d:c4:3b:a1:43:8c:1f:92:
98:16:3f:90:ca:45:8d:a4:7b:5a:c5:1d:19:03:bf:
57:7b:26:2a:52:e1:65:18:f0:e6:55:99:c3:c0:62:
6f:cc:ca:62:75:2e:ef:41:99:07:1a:4c:b4:50:f2:
a1:f8:ac:dd:7c:a8:47:cc:15:44:ab:98:a6:a2:d0:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:3F:A6:0E:45:0B:88:DF:9C:B7:60:CE:D6:25:96:DA:26:48:06
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154803
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
0d:ed:56:0a:c5:b4:c1:5b:24:6c:d1:8d:84:10:7e:b7:8b:c2:
ba:4e:6c:59:74:48:f5:b5:35:fc:b8:4c:de:4c:e4:0e:1d:5a:
12:46:94:32:d6:66:6c:ba:ca:90:7e:c5:a3:5d:7b:b3:d0:34:
ab:d5:6b:5b:6a:70:f7:2a:1b:13:21:a5:23:36:06:21:a6:a0:
ad:4c:eb:e0:50:1f:f5:d9:e0:b1:a3:71:c2:68:74:2c:14:67:
50:94:b3:70:27:23:a5:1f:9c:3d:b6:53:5b:84:a5:0f:61:04:
20:0f:46:10:40:a0:c4:26:b6:d7:35:77:8c:16:ac:93:7f:6c:
01:f9:a3:e4:66:88:c8:b6:a6:0d:d2:44:f3:a8:4b:e5:ee:30:
34:a0:59:68:6f:10:f9:91:97:e6:7d:0d:ab:a8:72:6a:3c:2d:
28:fe:de:89:a7:82:8e:cb:42:86:50:de:69:cc:a6:04:ec:aa:
1d:bd:e8:0b:ac:a9:df:fa:f2:b0:2a:65:8a:19:ad:71:a6:a5:
7b:45:3f:c1:33:f8:0c:a0:b8:c8:80:1a:1f:b2:99:17:5c:59:
55:ed:a6:6a:82:3c:ae:92:6f:6f:b4:28:1b:fe:d1:44:74:d3:
c2:17:d9:4a:be:51:79:05:de:47:e8:4d:c7:3e:74:36:9e:38:
47:fd:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:28 2026 by rpki-client