Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
File: qEIODiButOkMWHKN1D91Dc_DzIY.cer (raw, json)
Hash identifier: twM4K1RaG8y4s3oWIC07qTidHZTIuQgOfRsM5dJaGPE=
Subject key identifier: A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C625
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jul 2026 00:48:20 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 131249
IP: 2001:df7:3540::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181797 (0x2c625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 21 00:48:20 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91DCF4D, serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:5c:71:a7:f5:8a:1f:8f:fd:36:86:cd:83:
04:f1:21:aa:3c:d9:56:e5:12:81:aa:87:ec:f5:aa:
d2:e7:95:2d:37:73:db:91:13:29:0d:14:51:50:c0:
bd:c6:5b:3d:3b:db:68:fb:81:f4:b5:91:6b:23:b0:
22:77:93:bf:b2:aa:5b:77:4e:28:d1:b1:c7:f3:21:
e2:5b:d8:2c:05:f6:83:a3:7b:0f:62:96:64:cd:3f:
f4:12:2e:11:ca:e5:8d:2a:85:e9:63:39:18:65:81:
1b:b2:c3:a8:95:fa:82:bb:88:8e:3e:03:02:77:10:
0c:8f:70:9b:a3:29:00:58:4e:8e:19:da:a7:4d:21:
32:bd:d2:ff:68:74:a2:31:a1:44:1a:c0:dd:a3:e8:
9a:03:46:9d:a5:f3:7c:d5:a5:e9:39:61:11:ee:5c:
64:69:ed:f9:a1:fb:6a:83:fc:77:bf:ce:ba:fb:79:
fc:08:78:47:cd:65:65:99:7a:cd:58:09:d5:4e:b1:
ef:0c:e9:a0:59:56:ce:98:48:0b:d5:aa:20:88:d9:
bf:de:74:ac:ec:6e:74:5a:e0:2d:04:20:c8:17:84:
bc:c1:fa:3d:4f:57:9e:3a:37:12:0c:81:27:b4:f6:
b8:5c:75:56:7d:72:1d:b6:b8:b2:1a:d9:46:f6:c1:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131249
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:3540::/48
Signature Algorithm: sha256WithRSAEncryption
84:6c:8a:30:10:86:2a:df:26:c9:de:d8:f7:3a:44:ff:23:45:
94:31:55:8e:a6:4a:36:23:c8:b0:45:48:39:e7:8f:af:b1:27:
bd:2c:6a:2e:81:98:55:cf:33:8e:34:71:e2:6f:1d:a0:a4:40:
a3:0f:94:e9:65:aa:83:66:7f:e1:69:7a:81:2b:9c:c8:a8:47:
f8:9b:c1:64:8b:2a:a2:5c:41:f0:2e:a4:68:46:20:68:0b:75:
4b:2c:c6:53:f7:a2:88:1a:7f:86:74:6a:b2:b4:28:23:b4:ed:
be:1b:6a:4e:04:4e:72:0f:ed:1b:ff:39:09:78:69:7e:ac:f9:
7d:48:b6:ef:09:67:15:af:e6:aa:87:ef:9d:5b:ca:b4:1d:3f:
65:58:b8:a5:58:a4:18:7f:a9:3c:73:ca:68:ac:24:fb:59:99:
fe:bb:48:11:1a:e9:84:7d:ca:e2:5e:be:1d:3d:9a:52:26:d7:
59:b0:b9:2f:b1:b4:15:27:16:b0:de:be:85:32:18:be:3a:7b:
ae:ce:b7:87:36:98:31:09:e6:1b:f5:78:7a:56:ee:aa:0a:ec:
93:d7:5d:cb:62:a3:16:e4:5f:8b:59:94:c3:8a:18:2b:31:0a:
30:d8:ba:3c:91:cc:56:02:da:0e:09:98:fb:1b:5a:3e:56:74:
b3:c3:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:50 2026 by rpki-client