Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer (raw, json)
Hash identifier: YfwPeqBwjNf7yndl0uL0NdGRwVfKrIgVNTt1g9BzSqg=
Subject key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C18E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Jul 2026 08:26:13 +0000
Certificate not after: Fri 30 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 132475
IP: 2001:df5:9440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180622 (0x2c18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 08:26:13 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:13:66:46:73:07:95:ec:d8:d6:ae:4d:dc:
dc:5b:f8:e3:29:73:22:c7:0a:7c:0f:9d:4c:02:f4:
30:55:98:34:69:7c:d1:63:3a:28:95:f4:03:42:58:
52:7c:b8:d6:63:b2:89:a5:67:ce:e7:1f:4a:db:59:
24:95:5d:48:9a:fb:1c:1c:f1:fb:4a:25:74:f6:33:
77:e0:26:f6:b8:09:4b:6b:16:4d:2a:ca:52:78:7f:
4d:95:07:28:62:d9:57:92:b3:03:49:bf:84:92:19:
1a:9b:6f:15:ba:ef:9e:36:45:bc:3a:9b:b2:e0:6a:
4a:15:e6:6c:8d:c7:89:a6:75:95:60:f5:cd:e8:b1:
e5:bf:19:e1:e1:fe:8f:b1:6e:21:21:98:12:b2:46:
10:2b:e3:2d:ab:2c:51:47:6c:9b:3d:65:1c:17:f5:
ad:bb:7d:30:6b:0a:5f:95:50:6a:c4:74:3d:c3:57:
2d:64:a5:ab:a2:34:72:78:a7:75:8e:33:d7:92:c8:
09:0e:f7:04:e5:37:38:da:b4:dd:50:12:27:b2:51:
97:4c:9f:f1:b1:72:7a:21:67:18:02:dd:2d:c5:dc:
76:97:47:b2:c2:73:8e:4a:2c:60:11:f0:c0:56:c2:
20:48:4e:69:00:be:6d:69:4b:43:b5:33:ce:2b:4c:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132475
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:9440::/48
Signature Algorithm: sha256WithRSAEncryption
a6:88:8f:5b:86:78:8d:e6:17:cd:eb:72:12:ca:d7:c8:7d:ea:
c9:d5:c7:9d:98:03:ed:c1:cb:3c:cf:64:ca:c0:52:b0:fc:44:
a8:e4:7a:75:2c:94:8d:16:a2:a3:1c:99:71:71:51:e3:07:24:
f7:07:f9:8b:c2:94:8b:b2:e5:8c:bf:19:fd:8d:1f:50:6c:3b:
6b:51:09:6a:e3:85:bb:3a:e1:bd:9e:2b:4b:9e:91:df:8c:8c:
00:9e:3b:aa:d9:11:aa:b0:a0:26:51:4f:8f:23:30:4a:87:23:
73:3a:f5:70:d3:8b:e6:df:84:8d:e0:e4:ce:26:6a:35:98:49:
68:44:08:ad:4f:c5:7c:dc:9a:94:7f:a0:0c:97:41:95:d6:52:
42:64:df:73:fb:ed:04:c0:d2:5c:49:e4:36:27:a8:7d:58:d2:
ca:fc:28:ed:ec:2a:52:eb:24:10:cb:86:51:6d:16:2d:be:b7:
da:b9:60:cd:df:36:db:e0:f5:26:b1:00:af:2f:71:f8:e7:2d:
55:9c:ed:d2:8a:2b:f1:3e:5e:78:c4:a8:97:8b:1c:50:34:77:
4f:e4:1e:c6:02:9e:01:0c:75:9e:ee:b1:f4:88:6e:6b:2d:11:
60:e6:2d:b0:54:d4:66:2c:01:5b:44:26:06:b2:97:ee:6d:ec:
43:ac:94:df
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAsGOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcwMTA4MjYxM1oXDTI2MTAzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEVGODcxMTAvBgNVBAUTKDBCNkNEMTI3RDA0RUVDM0U4RUU0MTgz
OTE5NDE0RkQ3RUYzOUQ5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSmRNmRnMHlezY1q5N3Nxb+OMpcyLHCnwPnUwC9DBVmDRpfNFjOiiV9ANCWFJ8
uNZjsomlZ87nH0rbWSSVXUia+xwc8ftKJXT2M3fgJva4CUtrFk0qylJ4f02VByhi
2VeSswNJv4SSGRqbbxW67542Rbw6m7LgakoV5myNx4mmdZVg9c3oseW/GeHh/o+x
biEhmBKyRhAr4y2rLFFHbJs9ZRwX9a27fTBrCl+VUGrEdD3DVy1kpauiNHJ4p3WO
M9eSyAkO9wTlNzjatN1QEieyUZdMn/GxcnohZxgC3S3F3HaXR7LCc45KLGAR8MBW
wiBITmkAvm1pS0O1M84rTGa5AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUC2zRJ9BO
7D6O5Bg5GUFP1+852SQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFRjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RUY4Ny8zQ0JFMzlBMjM4QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlC
TzdENk81Qmc1R1VGUDEtODUyU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgV7MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9ZRAMA0G
CSqGSIb3DQEBCwUAA4IBAQCmiI9bhniN5hfN63ISytfIferJ1cedmAPtwcs8z2TK
wFKw/ESo5Hp1LJSNFqKjHJlxcVHjByT3B/mLwpSLsuWMvxn9jR9QbDtrUQlq44W7
OuG9nitLnpHfjIwAnjuq2RGqsKAmUU+PIzBKhyNzOvVw04vm34SN4OTOJmo1mElo
RAitT8V83JqUf6AMl0GV1lJCZN9z++0EwNJcSeQ2J6h9WNLK/Cjt7CpS6yQQy4ZR
bRYtvrfauWDN3zbb4PUmsQCvL3H45y1VnO3SiivxPl54xKiXixxQNHdP5B7GAp4B
DHWe7rH0iG5rLRFg5i2wVNRmLAFbRCYGspfubexDrJTf
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:34 2026 by rpki-client