Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVZfOC7NGS_QQkpxnNcG0bey5ak.cer
File: eVZfOC7NGS_QQkpxnNcG0bey5ak.cer (raw, json)
Hash identifier: 2n2Th4fK3jtDk4UPrfHN4VGkwUrXn/xjQP5Qs8RkP4E=
Subject key identifier: 79:56:5F:38:2E:CD:19:2F:D0:42:4A:71:9C:D7:06:D1:B7:B2:E5:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B496
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/eVZfOC7NGS_QQkpxnNcG0bey5ak.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 May 2026 04:54:09 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 154679
IP: 2001:df7:9c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177302 (0x2b496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 14 04:54:09 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A916DD4C, serialNumber=79565F382ECD192FD0424A719CD706D1B7B2E5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:e1:45:d6:0a:00:57:8d:b9:03:6b:c4:79:
9f:cd:97:c1:43:87:c5:0d:a1:93:00:d9:33:d5:27:
ad:5b:59:5b:31:31:d6:d2:25:8c:71:b2:ed:49:a4:
13:68:70:3a:42:fe:be:2d:35:27:29:cc:81:53:a9:
88:12:3d:b9:05:8b:ba:45:50:bc:ed:ff:e8:92:a8:
94:3b:3e:27:ff:44:50:e8:b8:c6:99:28:8c:70:4d:
9a:d4:d7:43:9a:39:7e:ff:14:32:cd:8d:ba:6d:ed:
5a:20:fd:fc:a5:1b:f3:6c:6f:46:e6:5a:86:ff:6f:
34:ac:18:a2:63:76:21:b7:5e:a7:2f:28:f5:f6:30:
16:b8:04:ed:b8:c0:26:c4:cb:25:94:67:85:c9:55:
5b:69:64:96:01:ff:ba:f9:8f:b5:1d:a4:be:a1:43:
70:37:45:f1:0b:9e:45:f7:de:89:b2:6e:1d:ec:78:
00:e6:4d:ea:11:c0:35:1e:bc:41:73:08:75:1a:80:
6e:53:1b:76:f2:cb:14:6b:ed:88:8c:cf:a3:17:44:
38:8e:63:c9:e2:6b:4d:34:55:86:b3:45:8c:b3:8f:
2e:5b:33:26:a1:67:96:28:c8:74:03:eb:41:77:f7:
d5:78:95:57:e5:16:ef:8b:0d:ab:49:4b:2a:64:c8:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:5F:38:2E:CD:19:2F:D0:42:4A:71:9C:D7:06:D1:B7:B2:E5:A9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/eVZfOC7NGS_QQkpxnNcG0bey5ak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154679
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:9c0::/48
Signature Algorithm: sha256WithRSAEncryption
d5:78:f4:06:e8:17:4d:fe:e6:9a:bf:55:66:65:7b:e4:f5:8d:
ae:95:d4:32:61:43:ae:db:c0:45:ae:34:3c:05:82:bd:25:76:
bc:c1:e2:07:76:35:a5:ae:05:bb:1c:b7:a9:8f:5a:a0:9a:c7:
b3:43:59:e2:fa:de:0d:50:6e:9b:bd:72:be:e5:fa:bc:98:d2:
8a:37:c8:fb:64:ac:bb:84:54:fa:23:c2:1f:7c:d8:69:ce:b4:
53:5e:89:55:5d:78:1f:62:3c:5d:0a:be:c3:51:97:e0:5a:11:
4a:58:d8:9a:7f:de:00:4c:35:dd:ee:6e:e7:22:79:87:d7:3b:
e0:b0:17:ed:ba:08:83:6f:c7:40:90:78:ca:bb:e0:d3:e3:50:
37:bd:a7:dd:d4:11:57:5b:d1:cf:c0:9d:cf:78:77:d0:d0:cb:
ff:bd:6a:98:ae:02:cd:51:04:bf:36:4c:87:1d:a5:bf:91:4b:
5c:47:9e:33:5a:ef:b2:c0:70:e4:4c:48:b4:73:86:e1:c9:1a:
e5:af:86:f2:31:12:e4:e2:8e:08:e2:b5:3b:73:cc:66:e7:9f:
09:e5:b0:da:7c:ad:2f:99:ac:af:55:56:53:29:01:fa:51:cb:
e4:b9:8b:2d:19:94:9d:1d:c4:a1:58:d8:b0:fe:cc:27:7b:c9:
2e:5b:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:44 2026 by rpki-client