Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MPmdFTShIom3CPMPAlfFY8XQoQ.cer
File: 7MPmdFTShIom3CPMPAlfFY8XQoQ.cer (raw, json)
Hash identifier: VIuKA5q+QXwl8cKjmBs3TnmdCjasl2Ju8Bk63mczCXk=
Subject key identifier: EC:C3:E6:74:54:D2:84:8A:26:DC:23:CC:3C:09:5F:15:8F:17:42:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B416
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 May 2026 05:28:53 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 154671
IP: 2402:5de0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177174 (0x2b416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 12 05:28:53 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9119461, serialNumber=ECC3E67454D2848A26DC23CC3C095F158F174284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:97:67:62:30:28:c4:20:60:e8:ac:50:b8:
38:f9:7a:7b:5d:b1:3c:99:47:39:89:82:14:a7:5c:
23:de:9f:c2:4d:b6:27:3e:67:d5:c9:00:9f:ed:cc:
a0:95:99:cb:17:c3:de:17:51:7b:47:c4:c2:7d:f0:
ec:17:21:c9:38:d9:fc:e6:f6:a7:df:c8:cd:a9:06:
d4:a9:45:58:80:2e:93:8f:72:be:55:e0:0b:89:64:
a4:a0:58:11:e6:6d:ef:e2:bc:ff:aa:bd:20:0a:0c:
67:8c:aa:c8:36:f7:5c:20:44:b9:38:1c:ac:52:e4:
bb:39:33:77:04:3e:6d:9e:6f:da:35:67:72:c0:e0:
53:71:2d:78:e4:e2:58:60:75:dd:36:19:93:d1:c6:
60:7f:be:01:96:3c:93:26:59:14:31:59:4b:65:e5:
8c:ad:ab:9f:2b:4e:78:a7:a3:e3:7d:df:8f:ef:a6:
1a:6f:d0:a0:21:b5:d9:15:be:01:24:50:4e:20:db:
b4:f2:d8:58:9c:b6:af:b3:f2:96:51:59:46:89:b8:
4f:0f:31:82:ba:ca:1e:b3:09:5e:bd:a1:87:e0:35:
56:64:a1:3f:98:9c:12:3f:7b:00:b5:61:d6:a0:8d:
55:d8:53:70:ff:66:b6:96:22:a3:d2:2d:7f:ab:69:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:E6:74:54:D2:84:8A:26:DC:23:CC:3C:09:5F:15:8F:17:42:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119461/7469E4B64DC311F185151B97AE833773/7MPmdFTShIom3CPMPAlfFY8XQoQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154671
sbgp-ipAddrBlock: critical
IPv6:
2402:5de0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:27:f1:e5:d6:1e:15:6d:e1:bd:26:a8:c8:24:6b:84:c5:f6:
59:d5:a1:95:34:b9:0e:91:f2:2e:d9:2c:a2:25:ef:d4:18:72:
d4:1f:af:38:63:f6:a9:ca:0c:e2:1f:94:8c:85:f7:e6:7d:ee:
61:e6:c6:3b:e1:5b:14:83:3e:8e:6e:6f:5f:bc:b9:80:4a:85:
8e:9a:d9:3a:d3:12:49:b6:38:34:3d:26:91:be:b4:76:37:d0:
55:cc:62:41:c1:06:cf:62:84:e0:61:be:c7:ba:a2:42:65:a6:
18:97:b7:4e:4e:55:5f:40:77:6d:28:50:34:69:75:ca:b6:2e:
39:15:14:04:74:00:72:3f:35:8a:c4:51:9a:95:ee:09:03:0f:
7a:9f:57:10:d1:16:4b:be:5e:ed:85:f2:e5:ca:f5:b2:f2:e0:
b4:c0:3e:ad:be:fc:63:02:a6:ae:a4:e8:58:ae:63:94:07:49:
c1:af:77:e6:1b:18:4b:d8:6c:e2:37:af:d3:a3:0d:12:06:8b:
24:5c:49:c6:90:af:24:2c:e5:b0:3f:2f:73:5f:26:d5:12:2a:
56:90:3b:44:fd:2d:bb:08:b0:9a:72:98:be:0e:78:ac:48:ca:
de:9e:c6:98:8c:ff:e2:a9:3d:fc:c4:0b:0c:fb:f8:db:ba:40:
14:a2:a4:48
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDArQWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUxMjA1Mjg1M1oXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTk0NjExMTAvBgNVBAUTKEVDQzNFNjc0NTREMjg0OEEyNkRDMjND
QzNDMDk1RjE1OEYxNzQyODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPLZdnYjAoxCBg6KxQuDj5entdsTyZRzmJghSnXCPen8JNtic+Z9XJAJ/tzKCV
mcsXw94XUXtHxMJ98OwXIck42fzm9qffyM2pBtSpRViALpOPcr5V4AuJZKSgWBHm
be/ivP+qvSAKDGeMqsg291wgRLk4HKxS5Ls5M3cEPm2eb9o1Z3LA4FNxLXjk4lhg
dd02GZPRxmB/vgGWPJMmWRQxWUtl5Yytq58rTnino+N934/vphpv0KAhtdkVvgEk
UE4g27Ty2Fictq+z8pZRWUaJuE8PMYK6yh6zCV69oYfgNVZkoT+YnBI/ewC1Ydag
jVXYU3D/ZraWIqPSLX+radvbAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU7MPmdFTS
hIom3CPMPAlfFY8XQoQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE5NDYxLzc0NjlFNEI2NERDMzExRjE4NTE1MUI5N0FFODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExOTQ2MS83NDY5RTRCNjREQzMxMUYxODUxNTFCOTdBRTgzMzc3My83TVBtZEZU
U2hJb20zQ1BNUEFsZkZZOFhRb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlwvMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJd4DANBgkq
hkiG9w0BAQsFAAOCAQEAoSfx5dYeFW3hvSaoyCRrhMX2WdWhlTS5DpHyLtksoiXv
1Bhy1B+vOGP2qcoM4h+UjIX35n3uYebGO+FbFIM+jm5vX7y5gEqFjprZOtMSSbY4
ND0mkb60djfQVcxiQcEGz2KE4GG+x7qiQmWmGJe3Tk5VX0B3bShQNGl1yrYuORUU
BHQAcj81isRRmpXuCQMPep9XENEWS75e7YXy5cr1svLgtMA+rb78YwKmrqToWK5j
lAdJwa935hsYS9hs4jev06MNEgaLJFxJxpCvJCzlsD8vc18m1RIqVpA7RP0tuwiw
mnKYvg54rEjK3p7GmIz/4qk9/MQLDPv427pAFKKkSA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:03:42 2026 by rpki-client