Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
File: E7lE6lgzzbdBH9TsaqHJYs87CIA.cer (raw, json)
Hash identifier: hVl2UO8Z9MkwzNtA9afEJI7I2VuqWoSNkK+VYm4anwA=
Subject key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5246
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Mar 2026 14:39:21 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 35820
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21062 (0x5246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 19 14:39:21 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:77:ad:b6:35:31:9f:79:2d:4b:e2:ed:f8:
27:ea:09:95:87:80:c9:ca:9c:48:13:43:33:7d:7f:
2c:7f:78:fa:a7:5d:5f:e2:53:9f:27:da:bd:65:97:
0c:5f:49:0a:65:73:db:cb:23:90:16:13:3e:2b:1f:
3b:b4:c7:ea:c9:69:38:93:92:43:d3:00:3f:61:01:
56:58:02:77:83:ee:5c:d7:e8:cb:18:d8:6c:17:bb:
b3:a1:d6:14:32:bc:b9:55:a3:51:66:80:8f:2e:8c:
5e:72:87:a0:a2:f6:49:20:d5:32:b6:13:d0:ed:0c:
47:b9:4a:bc:64:5e:5d:42:a9:d0:9a:db:2a:17:3c:
82:b9:be:81:a1:ca:16:aa:6c:20:46:21:0c:aa:0d:
a4:02:9b:e5:fa:f9:a5:57:71:14:ed:a7:87:4c:ea:
f5:43:16:ab:95:08:1e:a9:e2:37:1c:18:94:4f:11:
fd:78:2c:0c:a0:e3:13:1e:53:a6:a2:f1:36:20:d4:
c0:87:09:79:bb:5b:2c:3a:5d:ed:2d:b9:c3:6a:5c:
c4:63:fd:57:16:c8:b3:f5:c1:53:d6:3e:32:fd:30:
7e:73:ca:a0:ae:5c:1a:52:82:db:e5:12:1d:2f:3e:
37:8b:a7:2d:16:dc:d2:5b:1b:5d:8c:42:df:de:12:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35820
Signature Algorithm: sha256WithRSAEncryption
65:6b:c3:23:3e:d2:3c:b6:e7:91:17:95:7f:4e:61:db:c9:39:
95:c0:d3:a1:d2:fb:59:36:6d:a4:c9:45:e2:6a:9f:2f:94:b7:
32:1a:4b:0a:22:80:ca:69:14:a7:7e:f5:04:5f:b6:13:85:10:
75:42:1a:92:54:4e:0a:57:16:63:6c:95:5b:31:77:21:57:cd:
a9:ab:ba:b1:f5:08:fd:c6:38:4c:a3:45:87:fc:26:79:8f:5f:
2b:79:b0:71:0a:23:41:92:e0:3a:b6:65:41:70:dc:b0:b6:59:
01:2f:fe:16:b8:11:46:b8:ed:f1:9a:48:b4:5c:bc:c9:66:5f:
fc:c9:c2:1c:bc:d2:d0:f9:89:c2:9e:c8:b3:01:9c:87:75:d7:
7b:3d:a1:1d:f5:21:25:44:ce:b5:19:74:19:e3:b1:7f:7d:6d:
d5:47:67:a7:a2:78:36:88:eb:65:39:75:d7:5c:40:9b:34:14:
22:9e:71:08:46:c6:37:23:39:f7:70:28:21:31:31:f6:31:7e:
c3:48:0e:86:45:d1:fc:f9:e2:29:15:b3:72:78:33:73:77:cd:
a8:3f:31:93:34:66:05:83:81:8c:0e:7b:e9:fb:3c:e0:80:ff:
5e:c5:1d:bc:3d:97:4c:42:7d:0e:97:99:52:68:f4:34:35:6e:
d3:71:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:34 2026 by rpki-client