Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-pV__DfLKs1BxlXYgFwfKISh_o.cer
File: p-pV__DfLKs1BxlXYgFwfKISh_o.cer (raw, json)
Hash identifier: Uulg5Dl02vjS5sjx4xGxzIELYsxhaaj9BYAyIHXw7rs=
Subject key identifier: A7:EA:55:FF:F0:DF:2C:AB:35:07:19:57:62:01:70:7C:A2:12:87:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BD8B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/p-pV__DfLKs1BxlXYgFwfKISh_o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Jun 2026 10:43:18 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 137907
IP: 2001:df7:1d40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179595 (0x2bd8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 16 10:43:18 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91B49D2, serialNumber=A7EA55FFF0DF2CAB350719576201707CA21287FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:84:88:91:c0:0a:df:36:36:f5:df:d8:5a:
88:04:ce:53:da:6f:62:55:b6:7b:ea:9b:a7:06:76:
db:fc:e4:18:96:f2:c1:eb:8b:5c:fe:7c:2d:72:d5:
e2:3c:c1:5c:15:18:a0:b0:bc:96:6f:41:f9:61:eb:
70:4c:50:f0:b2:a8:4e:05:b2:5f:c3:b5:aa:b9:08:
38:fa:ae:fd:03:db:60:78:bf:0b:8d:9f:3f:63:dd:
e4:b1:ba:78:e6:21:6e:54:ea:68:d4:23:70:3c:92:
4f:f8:97:5a:bb:f2:b7:ac:f8:58:b4:b3:31:54:38:
97:ef:b6:57:8f:07:89:76:30:ae:ed:7a:79:cc:14:
21:7c:db:f9:e2:91:f7:4d:9a:c6:9d:11:2d:71:37:
97:90:0c:dd:12:e0:b0:27:ca:a9:ce:7e:bc:8f:27:
76:e7:4e:3f:b8:d5:40:d6:ff:0e:58:fa:98:3c:b5:
1f:a9:72:bf:22:e5:56:92:4b:54:dd:d3:fe:1d:07:
89:44:12:18:dd:e9:df:1a:92:f5:6b:7c:0e:ae:bd:
b5:de:7a:43:17:15:22:9a:4a:c8:43:03:be:a5:34:
78:82:75:95:0c:20:8d:ed:92:e8:e2:33:6d:e8:9d:
d7:67:8a:14:fc:e7:e2:c5:99:91:45:5a:7e:4c:f7:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EA:55:FF:F0:DF:2C:AB:35:07:19:57:62:01:70:7C:A2:12:87:FA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/p-pV__DfLKs1BxlXYgFwfKISh_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137907
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:1d40::/48
Signature Algorithm: sha256WithRSAEncryption
64:2d:b4:04:f7:3d:65:24:36:74:aa:5c:6e:73:d1:c1:bc:52:
91:05:d1:64:ec:ff:27:57:b9:aa:40:96:f3:18:19:5b:7c:41:
46:2e:24:2d:2a:0b:7e:5d:3f:65:50:24:8d:80:70:f1:42:36:
bf:80:77:30:9b:2b:3b:16:63:da:7c:99:4d:f3:2a:09:11:54:
99:7f:c3:e2:c8:cc:ca:1e:ab:25:e9:af:ee:e5:d0:d9:90:b9:
33:68:a2:f7:a0:42:e1:a7:96:0a:d3:f8:00:c8:ae:c0:d7:16:
80:f2:ba:f6:b4:b5:a2:51:30:63:cf:89:ed:e1:40:dd:67:5f:
0e:bf:4b:88:0e:ea:42:2e:2c:92:92:b8:0c:36:07:86:2b:70:
b4:61:80:dc:45:8b:ce:47:c8:01:cd:38:63:5e:05:ad:44:85:
60:d0:0d:71:95:77:57:5e:db:b1:2e:9e:9f:fb:e2:ef:8d:bc:
e7:5d:8b:2d:1f:48:29:2b:02:81:25:7d:a0:89:d1:51:00:05:
e1:da:cf:50:49:c1:c1:7e:af:a8:61:dc:5a:78:04:e0:af:b3:
e9:06:8f:06:fd:f9:1a:3b:0c:84:14:c2:bf:4f:82:e4:ae:2c:
72:45:7a:08:04:d2:8f:a2:39:1d:e2:37:1d:78:7a:81:7a:89:
81:6c:4d:e0
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAr2LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYxNjEwNDMxOFoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjQ5RDIxMTAvBgNVBAUTKEE3RUE1NUZGRjBERjJDQUIzNTA3MTk1
NzYyMDE3MDdDQTIxMjg3RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3H4SIkcAK3zY29d/YWogEzlPab2JVtnvqm6cGdtv85BiW8sHri1z+fC1y1eI8
wVwVGKCwvJZvQflh63BMUPCyqE4Fsl/Dtaq5CDj6rv0D22B4vwuNnz9j3eSxunjm
IW5U6mjUI3A8kk/4l1q78res+Fi0szFUOJfvtlePB4l2MK7tennMFCF82/nikfdN
msadES1xN5eQDN0S4LAnyqnOfryPJ3bnTj+41UDW/w5Y+pg8tR+pcr8i5VaSS1Td
0/4dB4lEEhjd6d8akvVrfA6uvbXeekMXFSKaSshDA76lNHiCdZUMII3tkujiM23o
nddnihT85+LFmZFFWn5M93WxAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUp+pV//Df
LKs1BxlXYgFwfKISh/owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI0OUQyLzJENTJCQzRDNjk3MDExRjFBRTMyRDFFQjdCNDdBODg4LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCNDlEMi8yRDUyQkM0QzY5NzAxMUYxQUUzMkQxRUI3QjQ3QTg4OC9wLXBWX19E
ZkxLczFCeGxYWWdGd2ZLSVNoX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhqzMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9x1AMA0G
CSqGSIb3DQEBCwUAA4IBAQBkLbQE9z1lJDZ0qlxuc9HBvFKRBdFk7P8nV7mqQJbz
GBlbfEFGLiQtKgt+XT9lUCSNgHDxQja/gHcwmys7FmPafJlN8yoJEVSZf8PiyMzK
Hqsl6a/u5dDZkLkzaKL3oELhp5YK0/gAyK7A1xaA8rr2tLWiUTBjz4nt4UDdZ18O
v0uIDupCLiySkrgMNgeGK3C0YYDcRYvOR8gBzThjXgWtRIVg0A1xlXdXXtuxLp6f
++LvjbznXYstH0gpKwKBJX2gidFRAAXh2s9QScHBfq+oYdxaeATgr7PpBo8G/fka
OwyEFMK/T4LkrixyRXoIBNKPojkd4jcdeHqBeomBbE3g
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:30 2026 by rpki-client