Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer
File: JuWb695DQKtmcU_i2e3_bMyBofk.cer (raw, json)
Hash identifier: v5/Ag0ROtWvcbVD2SyoY7G2nFmzDf6lER6xuvIDbBEE=
Subject key identifier: 26:E5:9B:EB:DE:43:40:AB:66:71:4F:E2:D9:ED:FF:6C:CC:81:A1:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ADFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Apr 2026 00:49:34 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154643
IP: 2001:df6:f640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 14:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175610 (0x2adfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 00:49:34 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A913C35A, serialNumber=26E59BEBDE4340AB66714FE2D9EDFF6CCC81A1F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:95:0a:45:a9:70:ed:96:cc:cf:b0:47:d7:
41:66:2b:62:4f:00:51:85:d0:2b:fd:1e:ef:f4:00:
85:e3:40:a1:b6:7e:a7:bc:d5:4d:88:d9:f0:9d:3f:
58:0b:c0:ab:f0:90:f8:89:f0:63:f5:cb:95:da:12:
d1:1c:bc:bf:6c:62:3a:8c:30:f7:68:87:d5:7f:74:
17:f9:ac:1b:78:a1:0e:9f:1c:4a:1d:a9:24:78:bf:
ff:15:3e:11:b2:3a:6b:8f:48:73:dc:0f:b7:ae:12:
b6:09:03:55:61:ab:74:31:f8:49:55:bb:dd:be:87:
90:e1:5b:17:d6:96:94:dd:3d:d3:42:e8:6f:83:50:
c6:5c:40:f7:eb:71:c0:69:97:91:f0:33:a6:c2:23:
97:fb:b0:ca:f1:e9:49:6a:00:f0:79:b0:ee:62:f1:
95:9b:87:43:f9:eb:90:93:0d:58:d0:a4:e0:2f:22:
7e:b8:5b:8e:25:ec:14:44:3d:ac:81:d4:6a:8b:fb:
23:86:49:86:d7:96:5c:7f:60:14:0c:3b:49:b1:c3:
1c:8e:7a:51:a7:8e:0f:1e:71:05:5c:ea:ac:4d:8d:
18:a3:5e:6f:5c:a9:2a:d4:95:1d:90:6d:e7:12:24:
b0:18:41:9f:91:b5:b7:8d:30:e2:66:c5:ec:7d:ce:
9f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:9B:EB:DE:43:40:AB:66:71:4F:E2:D9:ED:FF:6C:CC:81:A1:F9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154643
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:f640::/48
Signature Algorithm: sha256WithRSAEncryption
48:00:94:91:25:be:a5:19:3c:ad:d4:33:cb:be:44:92:d5:b3:
21:71:4b:48:78:24:f8:64:20:42:fe:81:15:7a:1a:28:0b:72:
a2:b7:ef:b8:1e:b1:61:71:74:71:5a:b9:1e:1f:b2:7c:8b:f8:
71:ec:06:7e:6d:b7:74:ed:22:59:8a:e0:60:e1:e6:72:a1:dc:
98:ab:f6:47:be:57:ab:46:a8:e6:00:a2:e7:0a:46:f4:f8:e3:
6b:46:21:9e:73:6c:1b:94:c6:79:fc:e1:8f:5d:a9:39:97:f4:
2e:71:61:d9:fe:85:b6:02:6b:db:56:a8:8a:14:42:6c:6f:97:
ac:02:74:cb:53:07:8e:24:42:b7:8c:1b:49:19:63:ba:e2:48:
14:70:7c:33:63:ff:21:6c:ca:03:d3:16:e8:29:80:a9:d6:d5:
83:41:32:6f:d0:dd:a7:e9:17:c4:a9:9d:14:d0:bd:5d:d7:8e:
ee:b8:04:ef:50:f2:0d:84:71:09:65:f3:3a:ca:ca:be:5d:82:
d3:20:69:d6:6a:d0:72:72:d3:14:93:7a:0f:6d:64:55:10:48:
27:8c:c6:29:77:8f:b0:e6:3f:0a:c5:f4:f4:66:38:aa:2a:cf:
d1:50:39:32:6f:36:43:ea:7d:9c:63:9d:6c:dc:66:5f:1c:1d:
16:fd:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:36 2026 by rpki-client