Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer (raw, json)
Hash identifier: PjoCHnArOxKJ/KoiI1SnjEjze133zXq9Za/Ai1JYc5U=
Subject key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DBC5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 04 Oct 2026 12:54:40 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 140698
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187333 (0x2dbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 4 12:54:40 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:12:97:9f:a9:c3:e9:b6:3d:19:4f:29:14:
dc:18:ff:2f:9e:a8:f1:58:58:6c:e9:5c:ca:f7:99:
99:80:d4:d8:de:c1:c6:60:1d:6a:93:83:40:cc:ad:
4b:f4:52:8a:8a:d8:4b:42:3b:bb:c9:43:90:4a:56:
c5:bf:b2:12:3c:f3:f0:75:ac:f9:3f:45:6e:51:94:
5c:45:da:8a:1c:61:e8:d3:5e:c6:aa:3e:1d:82:31:
25:5e:b1:90:a9:8e:47:f3:35:bd:34:b2:90:ba:e7:
af:6f:48:d2:bc:f5:be:d1:5d:49:cb:0c:dc:90:35:
a5:35:ec:fc:c9:2a:0c:bd:a9:5a:b6:aa:b3:3d:11:
8d:c8:e8:7b:f8:b7:18:18:7a:2e:b1:06:e1:fb:d1:
25:c9:a5:0c:b8:7d:0b:f0:f2:d9:ae:93:36:37:58:
76:76:f0:95:76:97:a9:ee:67:ee:9a:ca:7d:22:38:
19:34:87:f3:19:d5:00:71:b6:b4:2d:51:04:f9:0d:
62:29:dd:8e:e1:ae:b6:ad:ef:19:dd:ce:6e:28:2a:
79:67:bc:99:e2:f1:4e:72:23:73:a6:99:20:38:15:
84:70:1c:e1:d5:77:4c:dd:e7:33:de:08:ef:8e:6e:
28:d0:c4:8e:31:b3:ff:8a:53:17:4c:77:d3:b3:ad:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140698
Signature Algorithm: sha256WithRSAEncryption
d4:e8:ae:88:ac:83:65:f9:48:21:27:af:8c:1c:6f:ba:c6:d4:
3e:94:d1:38:84:ec:f6:1c:ff:b7:d6:bc:16:1d:95:dc:57:e3:
34:a4:89:f9:16:94:5d:ad:79:c5:3b:ed:46:11:d4:96:18:ac:
c4:52:79:7c:29:77:e7:0a:39:f5:5a:c5:40:0d:f4:fd:73:01:
f2:9d:03:ed:c9:5a:dc:83:89:63:23:e5:06:12:6e:c9:99:44:
12:a5:6a:e1:ae:2b:50:0e:36:e8:41:f5:ae:3b:f0:ef:ca:ca:
4f:cf:df:9c:04:7c:b8:03:6a:d0:6d:f6:e5:f6:64:bc:38:1b:
29:c9:22:0a:e6:53:b2:83:f6:17:c4:31:20:ca:2c:09:30:9c:
8a:c8:e4:31:36:8d:a8:9f:38:87:96:21:09:6e:0d:27:1c:99:
cd:46:85:0f:9d:81:11:1b:d4:f5:7f:45:0a:6b:c4:eb:cf:cd:
3b:74:83:65:84:6b:45:2d:af:08:fa:86:e8:82:4e:17:e1:33:
41:2a:cb:ba:39:0d:90:7f:34:0c:52:f2:de:12:0c:aa:56:5f:
2c:05:8f:f9:90:1e:1a:08:33:dc:49:9b:6b:4c:d9:92:2f:a9:
6d:dd:12:4d:b1:b6:c6:3a:30:67:21:3f:2c:6b:e8:7a:1f:ee:
7b:23:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:14:51 2026 by rpki-client