Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
File: 9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer (raw, json)
Hash identifier: 9NZ5muNSJJf0CU9Kl6GDm+1X3/e2v19ytMOe6YbpeVQ=
Subject key identifier: F4:48:6B:2E:C1:DC:33:0F:77:BA:82:F5:3D:1A:F3:92:62:79:F8:27
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AF6E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Apr 2026 00:40:44 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 132721
IP: 2402:5960::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175982 (0x2af6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 28 00:40:44 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9131667, serialNumber=F4486B2EC1DC330F77BA82F53D1AF3926279F827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:d6:ea:c3:2a:fa:08:1c:a9:ae:8a:2e:28:
9a:aa:64:57:94:f9:7f:c3:b7:c9:66:0a:41:c9:82:
b3:1c:dd:62:f3:3a:4f:12:30:0e:dd:fe:7b:9e:a4:
86:77:e3:95:81:4a:05:17:20:a1:95:f9:ad:00:49:
63:54:f5:81:82:28:f4:4a:34:57:9c:43:63:fa:9e:
17:45:6a:b7:9e:4d:f5:7d:23:d3:b0:b1:79:0b:05:
4b:48:3c:50:99:27:e9:de:be:3b:36:01:e2:97:b5:
4b:50:48:64:3f:ac:63:82:82:54:a3:1b:b5:45:02:
88:3d:26:67:1a:b5:4c:af:87:7c:b8:63:72:30:5f:
c9:7f:c0:06:c0:5e:b3:38:99:37:eb:47:64:b6:43:
b0:ca:82:14:8e:4d:40:c4:b0:8f:c4:c6:71:4a:90:
40:63:95:15:52:1e:30:48:18:ed:86:97:31:a6:be:
37:8d:d8:5a:69:91:71:db:c2:27:2b:2c:cd:d2:fd:
59:0f:85:84:09:9e:a1:54:f3:cd:15:f1:59:19:5f:
82:f5:0b:2a:60:9b:86:ed:d9:59:fb:76:73:f1:4e:
8a:7e:70:94:44:f8:a3:61:ec:1c:23:74:9c:dd:cc:
a9:1f:32:48:32:73:d0:9e:f1:34:e4:78:ba:12:02:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:48:6B:2E:C1:DC:33:0F:77:BA:82:F5:3D:1A:F3:92:62:79:F8:27
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132721
sbgp-ipAddrBlock: critical
IPv6:
2402:5960::/32
Signature Algorithm: sha256WithRSAEncryption
63:01:83:a2:5f:53:3d:54:5c:22:43:15:c1:52:92:4f:2c:fe:
99:e4:e8:1a:eb:f6:f5:10:6c:e9:e6:96:11:e9:99:2d:61:c3:
76:7a:cd:03:79:53:9f:fe:5d:03:f5:2d:2c:22:74:f4:d6:fb:
28:c7:5e:66:d5:df:10:b2:b0:d9:04:fe:8d:a1:ec:f8:96:c1:
f7:33:33:35:4c:e2:39:70:df:1b:b6:2c:09:ea:35:44:7e:d9:
9b:06:f6:e0:21:97:0b:f4:e8:b9:0b:b8:ac:cf:51:80:bc:a2:
3f:75:7d:5f:ec:90:0b:94:7e:4e:50:7a:d3:d7:a2:fa:87:d4:
6f:5a:3a:93:5d:fc:d3:32:63:1f:a6:e3:fe:c0:02:c2:90:bb:
4e:1c:94:70:3b:0c:4b:f7:f2:26:af:48:28:49:e4:c2:19:5e:
01:bb:45:5f:21:db:6b:f3:c9:b8:6a:3b:a3:ba:40:54:5f:82:
b0:d5:a5:31:83:4c:94:fc:81:db:d2:ae:07:8b:a1:9f:3e:58:
b7:f0:57:0c:fb:e0:bb:62:8f:71:c9:11:d2:ca:6d:4d:e8:05:
8d:c1:6c:cf:63:1b:cc:7d:da:1e:f5:e7:b4:09:b9:4d:3f:9a:
fe:19:cf:b6:8c:ff:39:1f:eb:9d:52:b5:bb:b1:d6:f7:6b:40:
8b:05:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:33 2026 by rpki-client