Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer
File: NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer (raw, json)
Hash identifier: eTfa1GZSGoo/DMAqCXYWEa59lotJUdwRqfBmyrIfcY4=
Subject key identifier: 36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B393
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 09 May 2026 09:37:53 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 154658
IP: 2001:df7:640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177043 (0x2b393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 09:37:53 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91E0727, serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:22:bd:f9:80:95:ca:f6:78:22:ce:8a:93:
d8:3a:d1:e7:c4:8f:f0:97:af:23:16:23:c2:44:e8:
ed:e1:2a:f9:5a:b3:94:02:86:63:98:07:65:4e:a6:
c8:a4:ef:05:9f:c6:c2:1c:69:d1:c3:04:de:1c:3b:
7c:e5:e7:06:11:a1:53:56:ee:b4:2a:ca:12:89:33:
92:1c:96:33:8a:0a:bc:dc:04:5a:55:86:c7:0e:7b:
ec:79:4f:97:5f:8c:2b:49:b3:5d:c4:df:e0:3d:b3:
a5:5d:c3:09:c1:55:6c:26:71:ef:34:67:4f:f5:83:
ed:b6:3b:5c:bd:e6:9f:6d:3f:4e:d0:dc:9b:d5:57:
30:de:15:bd:44:dd:85:4b:a6:85:7d:68:4f:f9:04:
93:cc:ea:47:0e:9b:cf:04:0a:72:4d:5f:5f:37:ab:
d8:24:49:75:cf:c3:25:2c:82:72:c9:9a:6e:9c:57:
a9:c5:10:4f:f6:1e:90:13:55:ce:9f:6f:13:a8:c5:
c4:1d:d6:0f:96:f6:31:c4:37:bb:91:db:de:96:94:
21:78:dd:2c:e6:a7:4e:73:68:90:7a:5a:71:55:95:
65:f7:b5:83:c8:a9:39:38:f3:d6:e9:78:0e:0c:dd:
37:d2:1a:8c:15:bb:64:27:8e:43:71:b5:f8:a5:83:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154658
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:640::/48
Signature Algorithm: sha256WithRSAEncryption
6f:ff:20:df:72:a7:be:99:d7:f3:c6:6f:e3:2a:f0:df:29:1a:
78:11:b4:6c:fb:ed:5d:84:79:4b:53:e0:60:0f:8b:f6:96:c7:
01:39:43:a7:2d:cd:e9:89:38:a2:0e:29:74:be:02:59:65:88:
e9:f4:2a:f4:16:38:09:1c:4b:1b:ab:94:15:ba:56:3d:dd:b5:
73:94:75:3e:24:a1:5a:88:34:a0:f5:29:70:83:8b:8f:62:ab:
20:77:3b:12:95:54:2b:55:e3:63:39:a4:3e:d6:a9:f7:d7:7a:
d2:25:d2:2e:cf:6b:98:22:57:97:8c:f5:db:bd:dd:3b:10:4e:
ca:b9:72:84:35:ef:f5:b8:3f:bd:d1:dc:6e:00:53:81:7b:56:
7a:ed:30:6d:96:90:bf:42:86:8c:7d:be:1d:4c:6b:b8:9e:f0:
a9:98:f5:23:71:e0:9b:3c:e0:e7:73:7b:fe:fe:e1:c3:96:60:
9f:2a:ae:62:7d:0c:37:87:de:8f:6f:c3:3f:0a:e3:f7:ed:f7:
20:49:7e:57:6c:92:5a:18:a0:90:02:ea:6f:a2:7d:3a:cf:12:
91:21:9c:b8:5b:37:fc:b5:46:ab:3a:be:d9:9a:5a:50:b9:57:
50:23:2c:a3:1d:63:2f:e1:f9:79:67:5f:71:ca:84:a6:0f:3a:
82:14:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:48 2026 by rpki-client