Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
File: 4dFD2djqAiJMHLDJFey4TuKLWqo.cer (raw, json)
Hash identifier: Cm5GZx86j/qX2TnoG5sjcvKKHJkJZaWSbhCBCgFOmzg=
Subject key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A34C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Mar 2026 13:24:45 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 38079
AS: 55793
IP: 202.36.64.0/22
IP: 202.49.39.0/24
IP: 202.49.190.0/24
IP: 210.48.160.0/19
IP: 2404:d000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 23:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172876 (0x2a34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 9 13:24:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:91:0b:f6:7e:15:74:40:26:69:29:01:96:
7b:d3:f9:0f:9c:f4:2e:3f:61:3d:96:7a:88:3c:db:
02:e2:65:c6:04:fe:de:37:fc:dc:ac:bc:b3:c5:a0:
0b:54:e0:b0:2f:ae:78:f2:a4:da:d0:f9:3b:e1:ee:
46:97:71:a3:21:64:b6:cc:db:ab:d9:01:9a:a3:c9:
23:ad:2d:20:c1:ac:12:08:54:cb:cc:c4:26:8b:fc:
92:43:18:ab:d0:0b:03:4f:54:3a:26:09:22:6e:23:
6b:0f:a0:1c:ae:f9:05:74:21:67:97:9c:1c:c9:10:
4d:f0:3f:bf:2b:cc:31:f4:34:2a:94:7b:00:80:b5:
8c:d0:c4:f7:19:cc:a7:ce:56:98:2a:a4:1b:2d:f3:
7b:c7:9e:05:34:18:8e:29:75:db:bf:2b:70:69:2b:
28:98:51:a6:8f:34:4b:69:a4:95:44:92:83:61:4c:
b2:98:4f:93:7c:26:24:d7:73:03:4d:14:9d:bb:a1:
eb:af:96:e2:ba:bf:37:f1:f0:c9:d7:b1:78:1b:df:
d9:7d:8f:f2:03:f4:32:55:ec:09:1c:3a:44:09:1b:
91:1c:ed:b7:98:b5:72:4d:c9:37:72:e6:ee:37:7e:
11:0c:a3:74:db:a1:23:14:88:1b:08:f2:ba:5a:c0:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38079
55793
sbgp-ipAddrBlock: critical
IPv4:
202.36.64.0/22
202.49.39.0/24
202.49.190.0/24
210.48.160.0/19
IPv6:
2404:d000::/32
Signature Algorithm: sha256WithRSAEncryption
bd:7f:a8:ef:ab:0b:7b:13:80:23:06:81:58:65:a9:e4:71:e4:
04:8a:9c:c5:b8:e7:a4:5b:4c:4e:e0:e2:c0:65:27:ed:cf:75:
03:5e:5d:3d:f6:1c:c7:0b:94:4e:32:1f:c3:1e:b3:2a:0f:39:
74:df:63:75:52:91:c0:1e:ef:89:38:c7:4e:7e:34:99:09:a8:
95:d1:26:d2:b4:43:73:c7:68:9f:2b:f9:e5:23:30:23:76:38:
ef:c0:df:81:fd:95:b7:2f:37:d6:65:b8:27:3c:50:b4:79:da:
85:33:42:a7:53:54:e9:ec:41:48:de:c1:36:22:57:93:9c:2d:
65:99:df:67:87:f3:52:8d:b8:ce:6c:87:89:20:86:c3:e6:6d:
35:0b:fd:fe:58:c4:38:0d:85:cb:23:ff:19:4c:0f:8d:03:c8:
c0:b1:a1:ff:c7:1c:c4:f6:27:48:1b:90:01:16:9a:38:93:71:
32:14:b8:3b:94:ed:1c:30:04:3f:31:15:bc:78:a0:c5:4f:d8:
a8:db:0d:a2:8c:be:1d:03:b7:7f:01:e7:cb:9f:04:48:3c:22:
6b:ca:3e:e1:cd:69:51:dc:55:82:10:fc:bd:59:e0:f2:fc:05:
04:80:16:80:3d:7e:b4:f1:eb:4d:d9:ce:cd:43:48:07:a3:fe:
b1:3e:da:13
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgIDAqNMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwOTEzMjQ0NVoXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBD
OTE1RUNCODRFRTI4QjVBQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsX5EL9n4VdEAmaSkBlnvT+Q+c9C4/YT2Weog82wLiZcYE/t43/NysvLPFoAtU
4LAvrnjypNrQ+Tvh7kaXcaMhZLbM26vZAZqjySOtLSDBrBIIVMvMxCaL/JJDGKvQ
CwNPVDomCSJuI2sPoByu+QV0IWeXnBzJEE3wP78rzDH0NCqUewCAtYzQxPcZzKfO
VpgqpBst83vHngU0GI4pddu/K3BpKyiYUaaPNEtppJVEkoNhTLKYT5N8JiTXcwNN
FJ27oeuvluK6vzfx8MnXsXgb39l9j/ID9DJV7AkcOkQJG5Ec7beYtXJNyTdy5u43
fhEMo3TboSMUiBsI8rpawFa1AgMBAAGjggM1MIIDMTAdBgNVHQ4EFgQU4dFD2djq
AiJMHLDJFey4TuKLWqowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcwQzUzL0NFNDQ1QkQwREE1QjExRUQ5Njc0N0M1QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MEM1My9DRTQ0NUJEMERBNUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRq
cUFpSk1ITERKRmV5NFR1S0xXcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAJS/AgMA2fEwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBALKJEAD
BADKMScDBADKMb4DBAXSMKAwDQQCAAIwBwMFACQE0AAwDQYJKoZIhvcNAQELBQAD
ggEBAL1/qO+rC3sTgCMGgVhlqeRx5ASKnMW456RbTE7g4sBlJ+3PdQNeXT32HMcL
lE4yH8MesyoPOXTfY3VSkcAe74k4x05+NJkJqJXRJtK0Q3PHaJ8r+eUjMCN2OO/A
34H9lbcvN9ZluCc8ULR52oUzQqdTVOnsQUjewTYiV5OcLWWZ32eH81KNuM5sh4kg
hsPmbTUL/f5YxDgNhcsj/xlMD40DyMCxof/HHMT2J0gbkAEWmjiTcTIUuDuU7Rww
BD8xFbx4oMVP2KjbDaKMvh0Dt38B58ufBEg8ImvKPuHNaVHcVYIQ/L1Z4PL8BQSA
FoA9frTx603Zzs1DSAej/rE+2hM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:38 2026 by rpki-client