Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
File: -swzUrzjgChT2_SwQFJc_B4VLmA.cer (raw, json)
Hash identifier: 9+W2uSbbnQjxSaAtPMeKhQ4UeR7jE2w5egAIBuXCwjg=
Subject key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C686
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 12:31:56 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 152932
IP: 2001:df3:f940::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181894 (0x2c686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 12:31:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A911B22E, serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:1e:3e:cd:8d:89:40:d7:05:77:ae:3b:eb:
2a:b4:17:e8:a9:50:b6:b0:76:fe:14:32:ae:59:5d:
75:b7:bc:8d:6f:0c:ed:2c:c7:1b:4b:1d:b4:8f:df:
53:66:a2:14:35:c0:d4:c0:db:b1:87:5d:ae:38:7c:
70:e6:21:66:77:23:be:f1:3c:49:13:8d:d7:3f:06:
55:f6:88:1b:a0:bd:14:ce:0c:50:60:ea:a5:17:5f:
31:30:7e:f1:59:8d:13:76:39:0a:69:c5:a2:c7:58:
56:b1:36:1f:94:b0:be:40:e0:19:2a:a2:d0:d0:06:
35:f1:4c:06:a5:ba:a1:d2:51:de:c0:b8:fc:3c:54:
ba:aa:d2:05:0d:11:ca:4e:f9:cd:07:c5:b9:7e:9b:
3b:02:92:cd:75:42:c5:4a:39:0a:45:fa:17:16:a4:
12:ab:14:e8:97:0c:da:d9:7a:b5:cc:db:93:0d:0e:
1a:56:ee:a6:ce:46:3a:ff:18:25:f1:92:ac:f4:00:
7c:07:3d:87:a8:85:b9:18:77:8c:8e:95:ba:6d:d9:
7e:40:f9:b0:81:f9:76:19:16:74:4d:55:a2:45:84:
17:5e:e4:da:1c:d3:16:cf:e4:76:bd:bb:b0:56:3e:
9d:15:8a:7f:7e:00:58:22:67:45:53:2c:bd:1d:be:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152932
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:f940::/48
Signature Algorithm: sha256WithRSAEncryption
19:4b:d5:79:41:c3:df:f0:da:c8:fc:ca:5a:6f:80:ee:bc:79:
65:7f:b1:49:69:94:20:e9:41:07:43:3e:dc:5c:24:3b:99:da:
c1:99:99:cc:44:00:fe:aa:99:dc:27:5e:97:88:e4:95:24:18:
b2:40:2b:a5:a5:fd:fe:fc:4a:f2:42:c1:a4:b6:b5:b7:7c:4b:
b2:13:94:3a:d7:57:25:59:7e:be:fd:f6:f8:77:b1:11:db:fc:
ea:12:a1:e9:4a:58:0f:d7:34:b4:39:b5:16:29:bc:6c:e1:c8:
99:4a:40:c3:76:87:f2:ab:cd:a8:13:ef:96:cf:da:0f:52:79:
f4:a7:8b:8b:e7:6e:01:88:7e:4f:85:b0:dc:11:2f:b8:b4:1b:
6b:d1:98:93:97:e9:02:31:7c:a8:38:3d:97:a8:3d:3f:d4:5b:
be:0e:23:64:c9:5c:9d:c7:68:be:bb:ce:5b:45:e8:a3:ba:6b:
9a:fa:c3:e1:45:e1:b2:c0:19:8c:a8:32:f2:a5:d2:e1:1d:eb:
77:aa:8d:cd:80:b7:14:e5:6f:b5:a9:0c:54:8a:14:fc:3b:e5:
02:a0:0c:2a:f6:34:f8:f6:57:5b:36:46:b5:21:fe:20:5c:ab:
e4:c3:7a:cf:c3:6a:76:92:b2:9a:90:cb:0d:cd:75:a9:fd:e1:
0b:71:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:35 2026 by rpki-client