Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
File: 1OdEGcvjVoAT4bz3doRyhsGYhFo.cer (raw, json)
Hash identifier: y/hW1KRQlMVh7btPUxdLftuAJ08QmgRZKy2Oes2hU60=
Subject key identifier: D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AF11
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Apr 2026 01:45:19 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 153662
IP: 163.223.32.0/23
IP: 2001:df5:2fc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175889 (0x2af11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 27 01:45:19 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91A547E, serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:26:0e:67:c5:31:49:42:1d:a1:4d:0f:9e:
35:de:8f:82:ec:d4:3f:62:16:46:b2:9e:ec:50:91:
da:16:1b:ff:0f:57:56:ce:f4:b6:fc:1c:03:1c:ac:
d4:f9:55:8a:8c:da:e9:4e:47:c5:c5:2b:b8:6f:57:
0d:44:00:09:d1:13:59:f2:a5:03:05:27:d3:9a:92:
f5:03:67:bd:d8:d0:45:7f:61:13:1e:5e:53:52:be:
c8:99:46:f3:10:af:2e:cb:19:76:45:6c:03:2f:04:
a9:32:6b:41:30:91:ab:a5:89:0d:72:d7:b1:6a:af:
3a:55:8c:25:c4:b8:01:01:2e:03:fb:72:f0:ea:83:
9f:bb:15:65:a5:b6:95:b3:48:9b:4f:9b:0a:43:cb:
2f:fa:be:c9:ce:c7:d5:da:2c:7f:8c:a4:76:24:ff:
ba:59:d1:c5:71:30:c5:34:9a:d0:2a:6b:71:04:e0:
0b:16:bd:4f:f9:8f:0d:f0:82:45:7f:f3:7d:75:bc:
80:39:87:2d:3e:a5:0b:b0:12:7f:a6:0c:5b:81:87:
3c:9e:ce:1a:ca:bb:8c:0a:40:36:4a:82:34:8c:de:
89:42:6a:49:af:08:e9:4e:1a:7f:fd:78:35:03:68:
ec:c9:de:f5:26:a0:55:cb:23:a7:2a:67:e1:4c:d3:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153662
sbgp-ipAddrBlock: critical
IPv4:
163.223.32.0/23
IPv6:
2001:df5:2fc0::/48
Signature Algorithm: sha256WithRSAEncryption
97:af:8b:93:60:d9:d3:f2:df:67:ef:02:1a:f4:3c:25:1f:ec:
a2:a4:7a:6e:ae:2c:44:a3:9b:1e:57:2b:48:88:71:c0:89:e3:
71:ac:51:f6:bd:38:bb:5c:9d:e2:21:57:f6:e8:ea:4c:64:63:
e6:f0:f4:d0:90:73:a0:c9:b1:85:a6:f8:7c:71:61:47:83:f8:
e3:bf:dd:49:d0:8d:f5:16:0e:85:b8:e0:9c:e0:c5:28:5f:bd:
2e:e7:b4:83:5c:5a:fa:ea:fc:f7:3f:ff:3c:9c:ad:2b:8a:cc:
66:49:ac:97:3d:aa:a1:89:c6:8d:e3:3d:47:2c:57:f6:e6:61:
7d:f4:83:00:10:1f:19:5f:47:86:8f:ef:bc:22:f8:ad:87:e8:
40:df:13:52:36:1c:6a:c3:3e:42:c5:b7:a8:40:e4:7c:de:b9:
9c:9e:ff:d4:f4:f8:6f:23:7c:07:fd:de:60:54:a8:37:da:96:
d0:47:ee:9b:97:2b:a9:a4:49:f1:c2:05:ee:73:e9:55:40:3c:
82:a4:8e:57:57:aa:01:59:a6:bb:41:11:5b:9f:31:da:b4:48:
d7:1e:40:b6:96:29:cc:2e:08:68:57:02:04:3e:3c:63:d3:4a:
97:de:b9:5b:4e:c3:90:70:4a:7e:b3:b3:60:ae:a5:35:3a:ce:
74:1c:46:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:18 2026 by rpki-client