Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer
File: sh-7koheKG95wUMeEHecbxfbntc.cer (raw, json)
Hash identifier: dJIjUVhdGfbFtdyV1uI/eT1FITzio2TJ+ImfNiyvitU=
Subject key identifier: B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CD5E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 Aug 2026 16:49:31 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154828
IP: 2402:6ee0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 00:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183646 (0x2cd5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 14 16:49:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9114747, serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:e5:e9:87:d6:03:f4:f6:e7:8a:ca:1d:35:
77:b1:24:8e:71:29:d7:e8:f3:ba:6e:04:5f:4c:96:
98:da:f0:0e:66:f3:3d:f4:1f:3a:93:24:84:f6:a0:
19:bb:83:16:21:10:af:47:a1:4f:69:d8:de:ce:f7:
be:dd:54:7e:39:00:94:0d:41:2c:57:ee:06:f0:d0:
97:ac:ba:c6:88:6c:2b:bc:19:15:ec:f5:c9:b6:bf:
ae:29:9a:fe:99:69:6d:ab:07:7f:a0:06:cb:c2:da:
70:c1:26:73:f9:22:ab:7f:20:6d:fb:de:50:2e:1a:
cc:56:a6:bd:16:10:db:d9:02:8f:cb:1a:48:71:d7:
d3:6f:88:50:97:cf:69:bb:3e:e0:52:68:a1:8e:f4:
79:cd:7f:99:89:5b:1a:e6:63:55:09:fa:c4:da:db:
4d:cb:af:dc:6a:dc:15:ff:c3:c5:a6:19:90:8b:ad:
55:7c:85:fc:8f:01:ba:75:50:c1:25:72:3e:d6:ee:
23:e0:3a:99:21:1a:83:4a:ec:70:e4:85:83:1b:e5:
20:55:dd:a0:db:16:74:49:68:b1:5c:50:83:fb:26:
75:80:26:ed:f4:04:45:5b:8c:45:f8:e9:ba:b5:8f:
96:b6:e6:2b:4c:64:ee:33:e8:e6:5b:6d:29:16:b4:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154828
sbgp-ipAddrBlock: critical
IPv6:
2402:6ee0::/32
Signature Algorithm: sha256WithRSAEncryption
50:44:aa:5b:45:cd:57:b5:b5:0f:83:7d:7f:f9:df:8d:1f:c3:
19:fe:42:38:0a:2f:8c:7c:73:63:29:cf:fc:0c:c6:9e:70:97:
fa:8a:7f:ff:2d:f9:f4:8f:ff:3f:13:5c:03:1f:b3:58:4e:01:
08:4b:77:1d:a8:99:f6:27:be:c1:ef:07:1b:19:21:2b:35:4f:
88:86:fa:35:77:61:23:61:a2:9e:6c:6a:3d:7c:3b:6a:e3:73:
44:72:07:d2:ad:16:55:fb:12:8c:b3:0b:86:75:c7:8f:78:d6:
01:76:04:74:d9:91:97:9b:54:96:6f:32:07:2e:3d:f7:e2:a9:
28:50:2e:24:a8:46:91:50:21:83:6f:d6:91:af:e6:94:bd:af:
bd:90:63:76:fd:ee:81:bb:c5:a3:43:21:a1:fa:bf:2f:d4:75:
23:1d:54:20:67:06:0a:2c:58:3c:c5:13:23:07:9d:9a:74:ba:
18:55:2e:7e:d7:16:97:83:9a:20:0f:dc:77:f9:a6:96:21:54:
05:ee:34:79:2a:f4:8e:de:39:be:45:49:27:94:78:be:9f:25:
a5:68:d5:3f:62:ea:15:53:0a:a9:95:c4:f8:fb:ca:8a:10:ef:
3b:9e:dd:26:cc:d2:05:e5:8d:59:f4:5d:49:f7:fe:d4:80:6e:
36:62:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:20:22 2026 by rpki-client