Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
File: _Ern2eP0GafSBKVMedHz76mn1sg.cer (raw, json)
Hash identifier: g/Onh6CkOk9zPQ96LgcQteUUmUUqeUpe4iQ4PRGoaFA=
Subject key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B0F3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Apr 2026 22:24:52 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 58.84.28.0/22
IP: 103.197.44.0/22
IP: 2402:5b60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176371 (0x2b0f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 30 22:24:52 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:45:6f:e2:d8:12:d2:a6:e9:50:57:75:01:
14:91:82:6e:de:ce:7d:ef:bd:a1:8d:5c:01:5c:ea:
92:cd:93:c8:ad:c8:66:58:51:39:a8:af:b0:cb:1b:
29:33:02:21:d3:15:32:e5:cc:75:6e:bf:dd:19:47:
33:0c:4d:7d:4d:c2:d6:db:2e:7b:09:6b:3d:50:c1:
18:77:27:98:96:6e:a7:61:10:e7:58:1a:88:67:91:
5e:79:cc:96:9f:37:6a:9b:75:8f:ba:0b:2d:38:95:
9b:28:a0:f9:d2:b2:e3:0c:39:dd:d0:cf:cf:bd:d2:
64:cf:2b:09:7c:25:5f:6b:2e:da:0e:e6:9a:83:95:
2f:a2:d8:65:22:7f:eb:a4:37:ae:0d:72:67:17:55:
36:ca:4e:18:19:61:ac:cb:c4:d3:97:12:3e:23:15:
2d:eb:ea:f5:55:26:4e:d5:0e:c6:2c:fa:e5:da:75:
49:67:cd:1d:13:d6:1d:7d:a7:34:78:41:c3:c9:90:
1f:51:aa:42:d9:55:32:67:12:b0:53:a7:ed:93:96:
07:f2:eb:91:33:a6:34:d1:54:45:98:8a:e6:dc:43:
06:dd:9a:6a:16:fe:ea:9f:a7:f6:fc:db:aa:53:84:
fa:b6:33:45:81:35:20:61:2b:f7:6c:4f:43:44:37:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.28.0/22
103.197.44.0/22
IPv6:
2402:5b60::/32
Signature Algorithm: sha256WithRSAEncryption
b6:a3:20:f3:09:87:03:94:eb:36:ef:00:bd:f0:e6:84:f4:cb:
a5:16:ef:4b:00:3a:4d:0f:94:8b:a3:0b:b0:43:09:4d:73:cd:
34:37:73:de:e8:f6:b9:d4:05:77:a7:97:8f:77:26:cb:0c:b0:
a3:16:30:bb:50:af:82:18:5d:c9:a2:a1:51:c4:db:c8:a6:c7:
10:b4:26:03:64:a8:68:3b:11:67:d1:35:a7:69:b8:5d:22:e1:
fb:52:a5:7e:35:96:4b:25:09:4c:34:b9:c4:4f:c3:1e:5f:51:
cf:e3:d5:cd:af:23:47:30:12:f4:42:e9:df:17:5b:6b:03:13:
3b:42:03:99:a9:f8:0d:dd:79:ae:00:f7:03:aa:c4:f8:75:70:
2c:04:d0:fc:dc:7b:e4:4d:b8:aa:59:5e:0c:20:06:8f:a2:cd:
fb:50:64:f6:ef:7a:26:16:dd:a1:da:f0:ea:dc:6d:8f:e5:68:
d7:72:38:cb:82:8c:c4:1c:28:18:4d:67:79:25:f2:52:e0:a7:
fe:68:1a:9c:01:64:d7:c9:23:0f:04:a0:fc:53:52:9a:fa:5b:
ba:30:f9:f6:40:d3:af:37:e9:1c:9c:33:54:38:3d:b5:76:06:
11:1e:fe:7b:be:d8:bb:d2:b0:c7:45:cf:3f:0a:a5:a7:df:59:
91:75:52:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:07:04 2026 by rpki-client