Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
File: iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer (raw, json)
Hash identifier: 4JAkkVcBrk63/T8uvMR1LEU2kH2lvCpfaPj8ihbZfBA=
Subject key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B5B4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 May 2026 02:53:52 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 45176
IP: 119.15.156.0/22
IP: 2405:dbc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177588 (0x2b5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 20 02:53:52 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:f3:f5:41:5a:f0:42:a9:96:fc:55:d5:05:
d0:b0:c8:3c:3d:07:a1:71:70:9b:90:1a:27:9c:36:
e9:b6:8b:55:ed:4f:a9:aa:77:8f:5b:71:34:25:ac:
c9:d5:28:49:f2:83:0a:ea:f4:e9:ff:01:2a:3a:41:
11:70:ea:e0:76:e1:47:ca:e7:ab:27:5d:d6:6e:c8:
5e:90:70:5f:02:dd:b0:a7:bb:c2:3f:08:0b:b3:ce:
f4:c5:3a:cb:56:ab:5a:fd:ec:b8:23:80:e4:11:11:
5e:fe:8d:06:0a:a0:a1:7f:ee:78:8b:f6:ac:05:47:
05:e9:2c:9e:89:25:c0:94:13:f3:f7:90:a7:09:54:
38:94:7b:cf:09:37:01:30:bb:74:c4:77:ed:ce:f9:
e0:7d:21:e5:59:9f:6b:ca:8a:52:a8:e0:c1:5b:7a:
06:56:e6:11:81:7d:b7:1f:e0:30:b0:de:99:d0:e6:
5f:b9:72:1e:b2:5c:43:07:31:18:97:ba:fa:a4:3b:
61:ee:7c:10:5f:74:81:2a:82:e8:a6:49:29:bd:11:
0d:35:47:b6:ea:72:32:52:f5:a0:fa:67:74:3b:4c:
cd:87:d6:a3:51:10:06:39:ae:5f:87:44:c1:25:cb:
be:eb:fc:2d:b3:29:d3:3f:01:2c:c7:bd:42:08:2f:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45176
sbgp-ipAddrBlock: critical
IPv4:
119.15.156.0/22
IPv6:
2405:dbc0::/32
Signature Algorithm: sha256WithRSAEncryption
20:ef:7f:7b:41:bf:51:7e:bd:cb:fe:9a:3d:39:21:30:56:62:
39:46:44:88:8f:2e:49:24:8b:b3:c8:7e:6e:57:d4:f8:20:25:
4f:99:a7:09:3f:8a:44:29:24:9c:ba:5a:43:a9:b8:71:f2:c0:
3d:c7:c3:3c:ee:81:ba:29:26:2e:c7:cd:61:e9:42:9c:4d:ac:
d2:35:ed:93:9d:25:1e:22:3e:cc:99:5b:75:24:44:99:35:16:
dc:6c:87:39:71:e0:f1:b4:af:46:2b:f4:71:1e:34:17:87:50:
c8:bb:96:10:b9:12:89:4f:f0:ea:0d:21:75:87:98:0f:8f:4e:
7d:25:c9:06:ac:4a:bc:5b:62:66:fc:11:61:47:33:36:3c:38:
f5:f4:38:92:ac:5b:0f:b9:28:f8:3f:28:45:0d:ca:c1:36:4b:
a6:db:5c:95:c2:5d:bd:d0:23:f8:6e:59:06:a7:0e:3d:28:a6:
db:d7:ef:c2:5f:e2:ad:f7:23:df:87:cd:bb:6e:1b:d0:ae:95:
47:38:ca:5c:3b:6c:6f:c8:06:ea:41:d2:5b:3d:f4:24:af:fa:
f9:fd:74:9e:44:dd:3d:dd:af:0b:81:0b:d6:32:53:b1:15:8f:
0a:c9:46:db:75:93:71:09:6d:8b:ac:32:83:c1:b0:b0:d7:ae:
34:72:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:48 2026 by rpki-client