Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer
File: lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer (raw, json)
Hash identifier: EnOWSBzq1t015zarkvxSMMudhQk7lrQZH7F3wFWxfCk=
Subject key identifier: 94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B238
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 May 2026 14:39:02 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 152324
IP: 2001:df6:fd40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176696 (0x2b238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 4 14:39:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91CDF78, serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:d2:60:b5:ee:fd:33:d5:88:85:7a:f0:57:
0f:56:6e:c6:60:ae:a1:4d:10:7d:7c:5d:e5:3e:03:
c6:2e:05:f8:7b:ed:f0:30:5b:d7:98:09:99:1f:9e:
d4:27:ac:b9:9f:9c:13:9a:65:a9:bb:78:2c:73:de:
6f:15:ea:93:97:be:f3:d0:3c:cb:9b:af:f0:1d:3b:
15:a6:31:05:0c:72:96:0b:f1:0b:70:ee:ce:ff:51:
69:d2:94:77:eb:a5:94:e7:fa:25:7f:fa:1f:7e:dc:
64:93:70:75:16:15:fd:ea:87:2a:f7:27:82:49:a0:
2c:bc:76:42:d3:55:a0:e6:d3:0c:c4:63:01:29:07:
e9:0f:1f:2d:36:83:5c:fa:ad:86:8e:3e:05:3f:20:
ce:51:4d:62:0f:fc:99:01:43:d0:f2:bc:71:73:3d:
61:95:01:87:a4:d0:03:2a:ad:72:4d:8e:bf:a3:8f:
30:bf:e9:4b:59:50:59:f5:61:44:5d:8b:10:22:e9:
3d:16:11:67:95:96:0e:e1:50:ee:96:1d:90:f9:a6:
be:a6:dd:07:80:b9:a7:e3:64:4b:0d:15:ca:66:d3:
15:3d:ef:dc:3a:e0:9d:1a:19:f1:aa:40:d7:d6:06:
df:a2:e9:d9:d7:91:34:5d:fa:48:19:9f:90:4d:e1:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152324
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:fd40::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a3:29:d3:2f:81:20:ce:e7:1c:94:67:d4:18:dc:4e:59:c9:
20:94:7d:a3:76:4f:e4:66:8d:21:be:02:dd:b7:b1:6b:2d:c0:
1b:ee:fa:51:ce:4e:99:5e:bc:0d:e1:b5:fd:21:ad:91:a5:33:
1f:56:54:1f:6c:e5:26:d2:8e:1a:02:a2:07:53:67:a1:00:56:
86:31:5e:f2:9c:93:45:a7:64:5d:06:23:85:4c:6a:d7:29:b3:
50:f1:cc:c0:60:f5:fa:73:65:d1:31:d6:b7:23:5b:77:06:ac:
c7:a1:86:eb:a2:34:65:4f:27:ed:52:28:2d:25:0f:f6:a7:63:
eb:82:f8:1f:5a:c2:44:3d:48:28:97:4d:45:55:1b:f4:5e:62:
ed:99:8c:16:c9:4b:96:3c:d4:26:6b:91:7e:10:f3:f3:1d:d0:
8f:51:55:87:3d:c7:7c:af:68:a9:13:ef:4e:ee:29:29:d7:cc:
35:3b:cb:23:c8:7a:56:e1:d9:47:f0:a7:02:01:54:8c:d4:8d:
c7:9e:eb:db:b4:13:06:93:f9:a1:d7:75:98:5c:27:e4:d8:59:
9c:06:5b:f9:33:66:9c:e2:34:b9:9b:65:91:09:3b:2e:ec:70:
ee:8a:4f:48:c6:cb:f2:d1:ef:79:3c:14:13:4b:b0:f9:05:d0:
43:60:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:55 2026 by rpki-client