Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7PupMcCC4HxZLjgIJiZPyxAadJQ.cer
File: 7PupMcCC4HxZLjgIJiZPyxAadJQ.cer (raw, json)
Hash identifier: Vw4RDOqzw6fRNEEM/iRe0j1AT0xrYlCbVIj+qqCL9gA=
Subject key identifier: EC:FB:A9:31:C0:82:E0:7C:59:2E:38:08:26:26:4F:CB:10:1A:74:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A422
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Mar 2026 09:54:43 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 137848
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173090 (0x2a422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 13 09:54:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A912E3B6, serialNumber=ECFBA931C082E07C592E380826264FCB101A7494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:b2:97:f4:7f:90:7b:69:69:d6:1c:15:0c:
eb:bd:eb:59:3e:0a:17:ae:af:e0:e9:3a:a5:f7:d9:
bb:73:21:a3:60:d8:99:c3:d2:03:a7:c5:26:dd:79:
3a:5c:8b:5a:69:ce:62:cb:f9:35:1c:e6:6e:29:19:
4c:df:7b:29:1e:f4:23:0b:e3:a8:3b:18:ac:61:a3:
e5:6a:0f:21:bd:24:b0:8d:54:8f:b8:91:67:2e:68:
e6:92:0f:86:a3:29:d7:57:cc:a3:60:38:4e:96:ca:
d2:01:67:b1:54:f6:1c:30:89:cb:67:15:7d:88:b7:
52:7e:63:ab:53:47:97:2c:19:d4:24:e7:55:dd:96:
3a:88:cc:89:4a:3b:b5:65:78:19:cd:72:9c:55:11:
de:a2:18:d9:f0:fc:48:7b:43:9e:70:eb:a3:23:09:
7a:5a:7b:6d:e1:d9:bf:b0:92:d1:7a:29:e2:e9:ac:
26:61:4a:b6:f3:ac:5a:ef:a7:7f:b3:05:94:eb:b5:
76:df:3c:61:f7:68:56:e8:5f:fd:d0:34:0a:38:f9:
be:c3:79:0e:f5:b1:56:bd:33:98:3c:45:ec:90:9b:
1e:52:08:50:54:ff:b1:c2:18:2e:44:7b:73:0e:8b:
47:35:0d:0d:61:b6:27:aa:cd:17:83:e9:ea:dc:4d:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FB:A9:31:C0:82:E0:7C:59:2E:38:08:26:26:4F:CB:10:1A:74:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137848
Signature Algorithm: sha256WithRSAEncryption
86:bd:0c:01:34:28:4c:1d:da:1c:f7:f9:e7:67:27:24:c1:b7:
f7:bb:11:60:2c:ca:cc:9c:a0:cf:c2:e0:59:ed:69:2c:61:25:
d4:04:c7:43:88:76:4c:de:bd:94:6a:d5:2d:2a:c3:39:7e:5a:
d7:b6:c4:33:01:ec:a1:c8:83:a5:84:8b:d5:b6:ae:47:ad:c0:
f2:fb:9e:f5:55:a4:87:07:db:ea:2d:b2:37:e1:c8:a5:a1:6a:
b5:76:93:13:4b:f4:b4:be:fd:17:77:ff:bb:3c:10:11:55:76:
e1:15:26:84:f3:86:98:c8:6c:17:ed:4f:30:72:cd:f4:12:28:
3c:88:15:15:7e:e3:7b:64:4b:75:65:70:ac:09:ad:c0:0a:86:
8b:8a:2e:c4:0e:66:e5:7f:22:61:cd:25:92:b5:1a:7b:5a:1b:
9f:a8:fc:76:77:a6:37:45:2f:9d:aa:0a:23:6c:46:7e:02:ff:
ae:78:67:9a:e0:61:8f:53:05:c2:b9:6f:f1:3d:26:25:cf:5a:
0a:2d:01:db:32:b8:d6:57:ce:9a:e3:ed:b5:5a:19:fe:e1:7a:
de:3a:74:05:d6:f9:40:35:da:f4:92:6a:df:7b:dd:45:4e:f3:
95:6b:bf:24:95:c5:2d:9b:a0:a5:52:70:ad:f8:6c:1e:d2:28:
6f:2c:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:00 2026 by rpki-client