Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
File: zek5HqgTnkArRtHYhD5Aqx0i0vM.cer (raw, json)
Hash identifier: 8NXyVSNqiVLO2qv9aK7rfi/ANwgxoclSZZUn+GeFX0E=
Subject key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D924
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Sep 2026 07:18:51 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 138568
IP: 122.50.10.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186660 (0x2d924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 29 07:18:51 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:85:95:64:7d:c0:05:78:67:5b:71:4f:dd:
6f:88:7f:a6:59:94:36:3f:5e:53:2c:84:ac:da:7a:
f4:6e:e1:91:1c:ee:de:be:1c:9f:2e:65:4d:c5:4e:
0a:f8:1f:a3:72:12:e2:05:b9:c9:10:f8:dd:08:22:
0e:ac:dd:21:ba:76:a2:8a:d1:26:62:94:54:e5:a0:
34:fa:e6:c9:04:b7:e8:8c:bb:bc:1c:20:b9:cc:ab:
80:6a:6c:c7:4c:45:a9:2d:be:cc:b1:19:68:af:0a:
2b:87:57:e8:9e:40:23:98:ae:83:01:e2:62:13:03:
7b:65:04:30:8d:b1:70:6a:4f:c3:6d:4f:a8:1b:1f:
7e:6d:05:6a:97:b2:13:36:93:bc:eb:96:c1:fe:d2:
c5:ec:a0:c8:86:ff:a6:ca:bf:f1:42:da:ae:db:4c:
1f:ed:25:66:e3:88:02:40:5e:a8:91:21:a9:e6:d4:
50:85:e0:18:3f:86:41:1b:d5:55:92:b0:59:72:4f:
14:12:75:d6:79:15:d1:7b:af:a6:d2:f8:ef:7b:71:
79:18:ac:8c:0a:7a:1d:cd:4f:9d:d7:f2:9e:b2:e0:
52:9c:ec:1b:6f:b1:4e:fd:e6:6b:69:31:e9:6f:1a:
ae:81:db:f4:f0:40:db:99:b7:94:0e:cd:b3:4b:c3:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138568
sbgp-ipAddrBlock: critical
IPv4:
122.50.10.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:6d:11:4d:19:cc:9b:96:45:61:af:88:27:8e:5b:67:20:b2:
66:29:ec:2c:94:af:df:a3:67:aa:08:5a:aa:26:07:50:68:13:
a6:f8:7c:2f:fa:82:9e:bf:7a:4c:86:b6:e1:6e:38:b1:16:75:
18:f0:da:78:bf:3a:54:28:c6:6a:d4:9d:31:f0:1a:ca:41:51:
df:71:29:d1:db:f4:d0:92:9d:b8:c5:b2:2e:12:ac:01:e6:c4:
2e:f4:9d:75:22:38:c5:52:93:87:2c:67:ef:7c:d9:63:d2:55:
30:0e:ed:80:52:ac:1f:fb:5a:48:b3:bb:1b:08:95:21:21:c4:
94:59:5d:11:2d:de:97:7a:2b:7d:a8:98:fd:c0:3a:3b:b5:f0:
83:70:04:13:e4:5f:8c:54:72:1f:97:8c:d0:3d:82:85:06:58:
d8:96:1f:53:3e:78:c7:eb:3a:9f:02:41:4a:e7:67:9b:4f:b1:
18:6c:a2:e9:9e:4e:b3:70:35:83:2a:de:ea:99:aa:d6:53:b9:
85:59:ee:a9:89:d1:c0:b3:6e:81:80:11:6a:ca:4a:b9:52:14:
eb:7c:64:63:27:3a:cb:64:00:69:d8:b8:a3:23:90:6c:82:86:
68:1d:1a:5d:92:7d:c4:07:41:bd:b1:bc:d0:6f:60:da:38:0f:
42:64:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:30:48 2026 by rpki-client