Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
File: tSBT1BwEGQhTHAz26tfzlryctl4.cer (raw, json)
Hash identifier: A9xyhvKD2C0Xby05jZ4fr1rmx2UhjKznpdXNfx56m8c=
Subject key identifier: B5:20:53:D4:1C:04:19:08:53:1C:0C:F6:EA:D7:F3:96:BC:9C:B6:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ADC7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Apr 2026 08:17:28 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154636
IP: 2001:df6:f4c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175559 (0x2adc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 21 08:17:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91CD883, serialNumber=B52053D41C041908531C0CF6EAD7F396BC9CB65E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:14:3b:03:d0:6e:c9:f7:a4:23:84:a0:f2:
88:4c:9a:3b:08:b4:a5:61:b2:bf:e0:7f:38:50:7a:
96:31:96:ff:2f:6c:0b:39:62:f0:5a:45:0d:a2:98:
7c:c6:7a:c8:2a:55:14:c4:e9:7d:65:3b:9a:26:6c:
4a:f9:d0:fa:49:e0:76:76:0d:f7:f2:11:05:97:1e:
5c:e2:02:9a:72:04:cb:43:fc:55:ae:9d:08:f0:03:
77:a2:a8:e4:b1:3b:ce:bb:34:bb:72:27:d6:50:67:
d9:03:f3:e4:c5:f2:b3:26:d5:55:29:5e:68:16:9b:
49:08:97:6b:07:c7:49:08:3b:79:25:bd:5b:65:3e:
c7:f3:ae:76:34:51:b5:dc:da:01:bc:8c:94:8c:53:
5b:56:da:f1:ef:4a:a5:15:20:7f:32:1e:97:7b:8e:
72:27:6c:99:f1:a5:b6:c4:c2:4c:fe:1e:72:cd:21:
99:7f:f9:4f:85:94:00:3f:2c:c2:be:c2:b5:f5:86:
51:78:d5:f2:c3:c7:ed:cb:a0:ff:6f:08:19:03:44:
2e:3e:70:14:2c:0d:53:74:5a:b9:76:df:f8:c9:22:
03:04:ba:eb:72:b6:cb:c2:c8:0e:27:24:2f:5d:e7:
2d:6b:4b:9f:5f:2e:0a:f5:23:b1:c8:3a:a6:da:27:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:20:53:D4:1C:04:19:08:53:1C:0C:F6:EA:D7:F3:96:BC:9C:B6:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154636
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:f4c0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:28:fe:a5:e0:37:74:1e:5d:52:df:5f:39:d5:20:61:71:b2:
08:c6:43:14:77:5d:32:a5:8b:e7:ca:dd:e6:d3:cf:99:75:f8:
03:67:f5:64:05:92:0c:36:0f:9c:f2:eb:f9:8a:5a:4b:de:c0:
3c:3b:94:7d:0d:45:83:ef:98:06:fe:a9:92:8c:eb:43:47:25:
5c:0f:8c:27:f5:92:8a:8f:c0:dd:96:cd:fc:24:d8:23:90:88:
6c:5e:28:a3:7e:1f:0e:5d:c4:74:99:c7:bc:b4:71:c3:5a:83:
70:1f:66:4c:ee:35:ff:20:35:fa:8d:e0:08:fe:cd:53:d9:1a:
19:37:26:3c:8b:64:57:a9:64:e0:1a:2d:d7:bd:7f:fe:ed:f6:
1f:37:00:b0:e5:2a:6b:9e:97:89:01:56:64:1b:61:07:6a:23:
eb:b0:67:39:95:a7:98:2e:dc:85:25:5f:f9:d4:4d:10:c4:dd:
63:ac:bc:79:dd:98:90:40:5a:30:46:7c:3f:f5:28:39:80:96:
6c:09:c9:0b:47:61:93:6b:13:04:dd:d9:53:ca:4b:bd:7c:05:
d5:08:bb:c2:04:2e:69:4c:07:f8:23:d7:b6:0b:1a:d8:20:46:
55:f9:ef:5a:f0:7d:e0:7b:23:31:6c:d9:10:fa:61:57:a8:bb:
4d:73:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:53 2026 by rpki-client