Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer
File: MTDg-yrjCHHxtEx3xUL__P4dl0A.cer (raw, json)
Hash identifier: Mzyh/+USJXzs0+GwMQbb1l7sc/SDDajm+pjXdCTLhgM=
Subject key identifier: 31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A316
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 08 Mar 2026 07:17:40 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 142179
IP: 2402:4660::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172822 (0x2a316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 8 07:17:40 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91B8833, serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fb:d3:e1:f9:46:ed:a3:7b:dd:af:60:41:ed:
60:d0:cf:f7:9a:a4:de:db:a6:c4:36:20:61:bd:c7:
9a:57:fe:e1:b2:8e:25:a8:35:40:2c:8f:76:be:69:
49:95:20:0d:de:ef:bf:16:29:84:38:47:ab:8c:8e:
2e:e8:3d:c4:cb:60:62:49:59:c0:13:43:16:38:c5:
5f:9d:46:b0:ab:e4:b4:b0:dd:67:e2:13:bb:ec:7f:
4d:3e:9a:bc:40:00:b1:bc:e9:ce:e8:58:70:83:18:
66:d3:79:71:39:31:be:a1:48:35:3c:0a:09:d1:f4:
14:9b:8d:8f:2f:22:7e:e5:0b:85:82:87:67:6e:69:
47:6b:13:33:3e:73:71:4c:69:50:f9:3c:d3:35:22:
b5:f9:cd:73:fc:75:0a:46:4f:06:2e:46:ae:d5:fc:
99:1d:6c:de:df:34:59:4f:c1:0a:76:5e:1f:9b:fe:
62:02:40:dc:3f:1d:e4:7b:4d:48:28:67:e5:d0:6d:
b8:51:b9:1c:a0:e6:9f:90:38:1e:ce:cf:ab:fa:a2:
a6:1a:61:2a:be:b5:fc:60:e3:07:39:5f:a0:66:84:
36:7f:08:8d:5a:27:31:18:e8:56:e9:53:a0:60:8d:
ae:67:1d:05:d1:65:74:e0:7a:6a:d0:48:d0:f1:6b:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142179
sbgp-ipAddrBlock: critical
IPv6:
2402:4660::/32
Signature Algorithm: sha256WithRSAEncryption
2a:73:af:f1:e0:32:6f:dd:13:2d:99:d5:6c:39:64:68:df:d1:
49:05:98:8b:e9:19:b8:bc:eb:c2:f9:7e:3d:bf:02:31:24:a4:
88:73:b9:31:7c:a6:bc:e5:7f:64:4c:34:f3:3b:de:aa:bb:2e:
df:7c:2f:a1:e2:a5:80:c8:bc:ff:bf:d8:7f:59:72:c8:21:dc:
4a:9e:9e:df:27:d4:f9:c8:ac:dc:f0:9d:fb:1f:ef:b7:f4:3a:
db:f7:82:69:f8:0b:8b:de:ad:b4:ee:94:1b:c1:c7:c7:35:0f:
6f:bf:f3:7d:73:2b:ca:ed:61:80:bf:21:2d:e6:95:61:1f:84:
b8:06:58:13:87:8f:bc:18:be:dc:a3:31:d1:53:8a:d6:c2:1b:
9a:d5:0b:7b:95:02:d6:f7:51:2a:7d:4c:3b:0d:ce:95:e4:02:
18:c7:5f:7a:61:b1:e5:d4:03:22:5c:4c:6d:d2:2d:df:54:6b:
dd:d4:04:f0:37:28:43:f3:4f:63:e5:dd:28:13:6d:45:84:4f:
48:55:24:12:b1:37:49:01:a0:10:38:aa:fa:e9:f1:3e:db:67:
ba:6d:6e:92:99:35:40:1e:45:ca:1d:1f:86:f1:3f:70:d9:f8:
1f:fd:ed:7c:6c:eb:17:27:77:59:84:45:11:46:dc:06:12:e3:
b9:ab:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:20:56 2026 by rpki-client