Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
File: U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer (raw, json)
Hash identifier: UVGBGOb8kwvyOMPQLXyqed9ziShdAAbaNLIhJHIZBfw=
Subject key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B459
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 May 2026 05:22:17 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 135102
IP: 2401:9ce0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177241 (0x2b459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 13 05:22:17 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:25:5a:b3:b9:16:5c:9e:3e:53:6d:75:80:
96:66:5f:ad:90:60:c7:af:0e:bd:c8:2f:d6:95:1a:
1c:63:fe:2b:7a:f2:a1:b3:c1:b9:0f:9d:01:67:66:
e0:47:40:80:46:9f:2f:7d:e2:0c:f4:05:9d:0e:e1:
aa:c6:19:03:28:b2:77:82:e5:fe:26:5a:3a:f3:2b:
ff:34:ce:bd:b3:e6:a2:f0:ce:46:30:2d:cc:e8:3b:
2d:d5:54:14:53:f3:74:e6:25:f2:df:ac:e5:fa:5f:
9c:87:61:25:86:50:dc:c8:5d:53:b5:65:48:50:19:
29:09:74:a6:cf:ec:ac:2c:6c:6e:ad:6a:f6:47:36:
46:a7:18:1f:91:f9:53:db:17:e0:ec:3f:d6:30:9e:
fa:07:88:c4:21:85:9d:dd:12:b7:7f:5a:39:06:3c:
bb:93:93:65:91:d9:7e:c4:ac:9a:3b:2c:a2:7e:63:
89:24:42:e2:e0:4c:57:b9:39:2a:50:c7:6a:0d:db:
75:7f:15:f7:62:cc:5a:21:ec:29:6c:55:21:a9:b6:
95:a5:3a:4a:d5:b4:79:02:0c:50:72:6f:14:bc:ad:
f1:a6:4d:7d:81:66:bb:a2:65:5c:0f:1d:22:73:47:
f7:f7:8f:c5:1a:b2:97:b5:24:87:52:38:a8:e8:60:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135102
sbgp-ipAddrBlock: critical
IPv6:
2401:9ce0::/32
Signature Algorithm: sha256WithRSAEncryption
88:b6:f7:12:17:ea:72:ff:e3:9b:c4:5d:a3:92:64:14:33:ae:
8c:a0:98:01:9d:e2:c5:5f:75:af:af:f9:6d:4b:0d:43:65:99:
9c:1d:59:03:f7:f7:fb:38:ec:7f:f2:3d:eb:da:ea:98:9f:88:
60:55:36:a0:34:37:9d:67:06:a8:ad:ac:2e:b5:76:ef:7f:fa:
87:67:52:76:03:90:1c:ef:c4:85:60:48:a7:91:2b:b6:1a:29:
12:2d:fb:ff:a4:57:c9:65:15:c4:8c:41:22:49:8a:2c:24:e5:
8b:9c:56:93:30:56:60:6c:94:cc:c3:ae:8d:a2:f6:1e:14:b7:
ae:cb:9e:c1:4e:f7:5d:1d:4f:1c:bc:52:29:4e:b9:12:07:79:
b1:44:ce:11:d6:ed:be:b7:65:70:c9:33:65:43:36:02:63:49:
2b:c9:3e:bc:57:7a:10:6b:78:3f:cd:8f:bc:c6:e5:0b:5a:d6:
e9:7f:9a:d0:c0:01:a5:9e:29:63:d1:9a:93:b5:b7:92:3d:52:
6d:17:b4:7f:40:27:13:dd:3e:b4:28:ed:0b:5b:50:29:d9:94:
fd:9e:cf:8f:c2:67:fd:a4:18:5f:9f:d1:88:c7:00:e9:31:e5:
71:cc:77:c1:bf:20:31:2e:25:44:87:df:1f:58:89:d0:6d:92:
a6:ba:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:44:41 2026 by rpki-client