
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
File: zHlrmVsFkPGFeCONcFkd1SRJXVA.cer (raw, json)
Hash identifier: 2wxil1AqOoiIEyre0avKr9VrVY15CFFFZCgArzSmTYk=
Subject key identifier: CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C358
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Jul 2026 01:39:12 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 132263
IP: 2402:64a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181080 (0x2c358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 7 01:39:12 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9132336, serialNumber=CC796B995B0590F18578238D70591DD524495D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:98:fc:e6:2f:6e:b5:52:52:c1:58:42:99:
39:2a:9e:af:1e:d5:bd:d8:1d:75:0b:80:7b:26:c1:
73:b7:05:11:40:2a:3a:cb:a6:1e:93:df:c4:29:53:
4e:3e:1e:22:59:dd:24:7d:95:61:d1:c9:2b:76:a9:
3a:d7:fb:be:5b:46:f0:bf:49:fe:68:75:cc:c6:6d:
a9:ce:24:28:ad:60:de:06:1a:31:3f:92:e1:7a:a8:
f2:49:24:43:38:c8:30:27:45:d0:45:03:db:a5:b5:
bd:9a:85:60:1a:aa:49:65:a9:9b:64:52:6a:77:95:
d9:37:11:fc:ba:46:49:ce:ae:88:c3:56:40:bf:62:
fa:d8:1f:da:92:e6:bd:6a:4d:43:02:94:f6:5e:07:
22:86:f4:f7:16:12:a5:f8:a6:36:d4:49:70:5b:e9:
b2:f0:66:5b:bd:43:34:f3:be:8b:9a:98:6d:e0:09:
1a:c9:fa:bb:5d:ea:3e:f4:44:a3:92:41:9d:de:b8:
30:08:5a:6f:45:17:2a:2e:c4:98:ff:58:12:84:c9:
4d:5d:cb:64:ae:c6:56:4f:59:a7:e4:a2:08:66:d4:
13:00:c1:fe:93:a9:26:fe:94:46:e5:42:36:66:1e:
4c:64:a9:28:4f:1f:6f:63:26:80:09:2d:ad:40:11:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132263
sbgp-ipAddrBlock: critical
IPv6:
2402:64a0::/32
Signature Algorithm: sha256WithRSAEncryption
21:32:8e:53:7e:e3:f9:84:6a:84:6a:44:b5:57:dd:d5:67:5b:
1f:d1:8e:71:2b:20:d8:b9:a6:5b:c2:fc:bc:e6:3e:48:df:4a:
ed:65:87:04:c8:88:bc:48:b1:a0:52:b0:e1:d0:91:84:ed:a1:
58:3b:e8:48:39:02:7f:09:d3:9b:c1:60:56:a6:ff:e3:52:a5:
58:5b:16:3c:6a:81:05:2d:69:19:da:39:93:fe:d5:ed:5a:aa:
4c:a1:44:95:74:1a:51:d6:99:7e:75:5d:c4:c9:77:1a:3b:51:
c5:d1:d2:1c:5a:1c:80:cb:7a:e8:c6:1e:e8:fe:06:e1:7f:04:
f0:60:b2:a1:ea:be:7e:b9:ff:bf:4c:bb:ad:a5:62:24:b4:6f:
e8:8e:c3:3c:39:06:cd:a4:d3:21:90:6f:89:63:ad:b4:c8:ec:
13:f2:8b:da:d8:6f:03:33:f2:3a:6f:52:21:a2:01:b2:f8:1e:
1a:f0:1a:91:49:57:91:55:f1:fe:49:e8:e8:88:aa:91:9a:b4:
ff:5b:3f:06:cf:cc:70:e9:0e:31:6d:55:9f:4e:5d:38:3d:5d:
25:56:21:7c:fa:6e:2a:da:1c:4f:90:64:28:1f:b9:d4:e2:ed:
bb:60:5b:6d:6c:e7:d4:a5:31:be:55:8b:9f:41:b7:32:8e:34:
de:a6:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:06 2026 by rpki-client