Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer
File: eE7A8P-dbYDcn33OORSfxg-WFJk.cer (raw, json)
Hash identifier: c9PQ6Db/eXuTKn/Cl6AFSCKmi2hPC/YR4XcoUVuYzmI=
Subject key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CDA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Aug 2026 14:16:17 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 153037
IP: 2001:df3:fa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183721 (0x2cda9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 16 14:16:17 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:03:dd:e6:5a:d5:3b:74:f8:62:61:4a:d4:
eb:70:3c:bd:a9:a7:dc:e1:de:b6:9e:a8:82:5c:10:
3f:52:ef:d4:72:72:d0:38:0b:e8:f1:68:b0:ea:01:
47:c6:c1:4a:80:19:95:34:3f:0c:bb:1b:4e:f6:e1:
9a:5f:df:71:f3:b2:6f:6a:b5:c0:6a:5a:d4:f1:e3:
fc:42:f9:d2:e1:e7:0a:c8:63:bc:4f:ad:f5:d6:15:
72:99:fc:c5:4b:72:f7:ac:d4:ab:fc:fe:49:fc:fe:
21:5d:27:72:9d:df:cf:86:96:7d:47:1d:57:bc:fd:
24:d0:76:da:9e:f0:03:61:76:c5:65:9b:28:f4:5e:
9a:66:7f:17:f8:74:44:b0:3c:3c:cc:54:70:83:87:
99:97:2d:3b:94:90:12:f3:6f:60:cf:23:0b:d2:30:
1f:d8:37:6c:c8:26:9f:89:9a:6c:83:17:a5:4a:ff:
69:a3:31:75:0f:36:f6:07:91:b1:27:1f:21:7a:24:
f5:04:ab:e4:d5:26:ed:14:68:7d:89:e8:d5:44:c0:
8b:63:01:f4:78:03:f7:cc:f1:c6:4c:2e:95:7f:43:
5b:39:08:54:79:54:a6:0d:d7:4b:f5:0b:7b:5f:ff:
83:11:df:f1:bc:21:43:62:43:51:66:e0:b4:c5:45:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153037
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:fa40::/48
Signature Algorithm: sha256WithRSAEncryption
2e:53:28:f5:0b:c8:c1:25:31:9f:45:cb:26:4a:a2:f9:e9:7a:
1b:e5:de:74:88:fe:39:68:33:cc:41:8c:5c:a8:ae:d1:13:62:
1b:64:bc:a2:f2:c8:8a:c6:38:1e:84:4f:a6:c0:2e:25:4a:de:
3a:a2:6a:65:7a:a7:01:c8:ad:5b:47:40:8b:aa:38:1c:34:ce:
9f:f0:2a:32:4f:7b:45:22:80:11:b2:df:83:95:a5:9f:de:13:
c1:dd:d1:20:73:8c:36:a2:b2:02:20:26:c4:08:9b:00:78:d5:
0d:ea:78:b7:05:d8:83:3c:fd:b2:c8:b2:4f:c4:76:1e:a0:0c:
63:5a:6b:34:26:46:a2:54:ac:da:3d:20:a1:d2:c3:f2:96:be:
d5:f1:49:d2:d8:26:27:41:1e:dd:62:d2:1a:4e:5f:23:43:9b:
a5:21:26:94:4b:32:d0:c6:95:cc:33:25:ea:3a:bb:8f:d5:24:
e0:09:3c:93:85:08:f2:cd:9a:26:b4:fe:1c:a7:d5:60:e1:ac:
63:12:af:0d:e4:a7:3d:fb:39:88:2b:25:84:47:85:de:aa:d9:
17:89:3e:64:87:33:06:20:cd:8f:1c:c0:bc:13:c7:6c:cb:ca:
a6:50:1a:a3:c8:b6:61:77:3c:50:fb:0a:17:e9:a4:61:e5:2d:
3f:54:fa:cb
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAs2pMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgxNjE0MTYxN1oXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RD
RTM5MTQ5RkM2MEY5NjE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF4QPd5lrVO3T4YmFK1OtwPL2pp9zh3raeqIJcED9S79RyctA4C+jxaLDqAUfG
wUqAGZU0Pwy7G0724Zpf33Hzsm9qtcBqWtTx4/xC+dLh5wrIY7xPrfXWFXKZ/MVL
cves1Kv8/kn8/iFdJ3Kd38+Gln1HHVe8/STQdtqe8ANhdsVlmyj0Xppmfxf4dESw
PDzMVHCDh5mXLTuUkBLzb2DPIwvSMB/YN2zIJp+JmmyDF6VK/2mjMXUPNvYHkbEn
HyF6JPUEq+TVJu0UaH2J6NVEwItjAfR4A/fM8cZMLpV/Q1s5CFR5VKYN10v1C3tf
/4MR3/G8IUNiQ1Fm4LTFRac7AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUeE7A8P+d
bYDcn33OORSfxg+WFJkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZBNjlGL0M2NjVERjIyMzNBMzExRUZBNUI0OUIyM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGQTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAt
ZGJZRGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlXNMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8/pAMA0G
CSqGSIb3DQEBCwUAA4IBAQAuUyj1C8jBJTGfRcsmSqL56Xob5d50iP45aDPMQYxc
qK7RE2IbZLyi8siKxjgehE+mwC4lSt46ompleqcByK1bR0CLqjgcNM6f8CoyT3tF
IoARst+DlaWf3hPB3dEgc4w2orICICbECJsAeNUN6ni3BdiDPP2yyLJPxHYeoAxj
Wms0JkaiVKzaPSCh0sPylr7V8UnS2CYnQR7dYtIaTl8jQ5ulISaUSzLQxpXMMyXq
OruP1STgCTyThQjyzZomtP4cp9Vg4axjEq8N5Kc9+zmIKyWER4XeqtkXiT5khzMG
IM2PHMC8E8dsy8qmUBqjyLZhdzxQ+woX6aRh5S0/VPrL
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:32 2026 by rpki-client