Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
File: iWAvTEQ-2KQOCJEYmHawJXdMdow.cer (raw, json)
Hash identifier: JUXPhqqW0SMnLYQRgcg/Q2tJn79fG+zY2y3ECvIbRcM=
Subject key identifier: 89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BE9E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Jun 2026 02:49:14 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 137284
IP: 2001:df7:2340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179870 (0x2be9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 22 02:49:14 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91E1EC0, serialNumber=89602F4C443ED8A40E0891189876B025774C768C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:ec:e2:62:b4:d9:99:8e:68:7a:1b:36:67:
d7:98:ee:23:15:69:29:54:3d:0c:73:b1:1b:8a:5c:
3c:91:9b:d1:e0:70:f6:ec:5e:9c:12:54:d1:52:e5:
02:55:5e:4d:f1:72:8d:5e:77:86:1f:41:f7:2e:f0:
6e:34:14:ce:bd:65:90:94:7e:73:5c:54:07:27:26:
8e:fc:1b:71:d2:d6:6f:36:0c:42:94:35:5b:fc:60:
1f:83:35:64:71:0d:59:d4:82:2d:64:52:8b:88:05:
36:a7:f2:c2:10:57:c7:d4:7d:c5:13:49:76:88:8e:
c7:87:59:84:fe:40:13:c6:4f:ff:c9:d8:d2:2c:7c:
01:8b:52:ca:fd:2c:fe:8c:ca:fb:ed:cd:42:ba:50:
c4:6e:fe:a3:42:5d:ab:99:d9:f9:ad:9f:c1:8f:07:
bd:8d:6b:b1:77:32:1c:c5:cf:97:e1:c9:78:ba:0a:
da:f0:6b:a2:c8:f6:ab:a2:de:c1:ac:60:02:a4:14:
d7:95:0f:e7:38:61:52:93:b9:be:27:80:a3:06:58:
8b:7c:7c:db:3f:00:61:c8:5a:b4:b0:1d:e0:e4:4e:
67:d6:94:2a:42:41:90:ee:2a:50:32:ed:65:ff:16:
c9:3e:43:c6:af:10:e3:fc:ee:94:41:5d:10:26:2d:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137284
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:2340::/48
Signature Algorithm: sha256WithRSAEncryption
09:52:c0:ba:3a:be:cd:e1:b3:f2:4d:08:e0:76:79:04:63:4c:
1b:8f:b2:2d:51:34:8a:5f:f0:3e:dc:9b:38:25:69:39:d2:c2:
22:24:71:9e:d5:08:10:68:73:b0:fc:db:4d:b7:ac:ad:85:1d:
ad:78:63:df:d8:38:6c:f0:25:a8:0d:01:3f:b4:89:53:37:d4:
97:48:fb:bb:df:69:86:92:86:ea:be:26:11:0d:97:68:99:cc:
08:c2:68:f5:ed:f7:13:c2:6c:8f:52:ba:de:fb:72:07:f7:82:
4a:83:76:e3:60:41:7d:09:d6:4b:d1:1d:1d:04:e3:6c:d5:24:
43:e9:6e:e1:cb:8f:e0:05:e7:4d:2b:0c:8f:a4:de:ed:3c:a3:
82:61:b1:21:83:e6:db:95:8b:a9:f5:e9:69:d5:d5:13:3b:d4:
03:78:e1:fa:b7:a3:54:8a:43:30:7e:da:5f:ca:09:05:df:53:
26:1c:f8:39:dc:a5:77:34:d3:57:51:66:b9:de:ac:2d:28:6d:
b0:6d:20:d9:42:93:3e:bd:40:68:47:2e:e7:b3:bc:ec:65:04:
bb:c9:5f:17:c8:1e:fb:32:4c:c4:a7:71:97:89:6b:7b:90:f3:
4a:b3:ad:28:b3:1b:d1:e3:5b:e6:48:65:bb:1c:96:36:c7:22:
6d:68:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 06:54:19 2026 by rpki-client