Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
File: 4Loijq-YEvBn0v87-AaJVpjJOXc.cer (raw, json)
Hash identifier: c53zcsk290GW2c/CJbgB3e9EvHh4LuYtlIekAB5SbyM=
Subject key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C56D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Jul 2026 13:38:53 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 38186
AS: 55331
AS: 153339
IP: 27.126.176.0/20
IP: 103.237.72.0/22
IP: 115.126.0.0/17
IP: 116.212.112.0/20
IP: 118.99.0.0/18
IP: 118.102.8.0/21
IP: 119.47.80.0/21
IP: 163.53.216.0/22
IP: 202.59.152.0/21
IP: 2404:ee00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181613 (0x2c56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 13:38:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:52:5d:9f:de:4c:f2:58:cf:4b:83:ed:79:
51:b8:c2:a3:1f:45:e9:bc:f6:e1:e3:2d:d5:ff:8f:
be:bf:f0:2b:57:64:8a:8e:44:54:29:e8:59:ea:1f:
6a:3f:b3:96:90:40:83:55:da:1b:7f:90:58:f6:7f:
88:b4:66:5b:1b:cb:60:49:89:8f:d8:c5:f5:1d:5e:
90:a8:92:e7:1a:a2:5d:e8:b0:aa:b9:0a:53:13:01:
d5:3e:a6:0f:69:3f:f4:dd:57:b6:98:d0:c8:36:2e:
ef:c8:fd:66:ad:8f:26:b0:f8:31:1a:e9:bb:ca:cc:
b1:21:ae:8d:ae:ae:b9:66:18:69:46:fe:ab:1d:c2:
40:bb:f8:a5:38:26:a0:25:56:13:6d:bb:71:a6:e8:
ee:68:40:f6:54:08:1a:45:50:b1:99:5d:5a:c6:93:
17:58:c0:af:7a:2b:32:9b:34:41:88:76:25:bf:17:
6d:ee:22:f3:70:97:fd:30:34:db:b9:14:ea:16:bb:
74:f7:28:26:05:5a:bb:60:a4:fb:0a:36:c3:ae:aa:
7f:e7:20:4b:4c:67:ff:39:7b:54:2a:a8:67:f5:e7:
77:58:d9:52:2a:a8:4b:d3:af:9a:67:9f:5d:dc:39:
59:da:e8:2e:ee:74:c3:14:b0:28:e5:0d:f7:51:83:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38186
55331
153339
sbgp-ipAddrBlock: critical
IPv4:
27.126.176.0/20
103.237.72.0/22
115.126.0.0/17
116.212.112.0/20
118.99.0.0/18
118.102.8.0/21
119.47.80.0/21
163.53.216.0/22
202.59.152.0/21
IPv6:
2404:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
4f:69:f9:42:10:3e:49:f9:f6:2c:39:b5:00:e9:31:40:9e:3c:
5f:77:aa:d4:58:7f:72:19:57:b6:f3:e7:ed:df:00:a1:8e:b3:
82:72:81:13:b2:d2:79:84:9e:2f:d3:40:27:63:9e:5f:4c:89:
cf:e4:9a:c8:b1:85:5a:0e:f9:9b:3b:0f:09:37:fc:a0:0c:b2:
c4:e5:e8:a0:8a:9b:ba:f5:f9:6b:d2:1a:eb:eb:05:2a:7d:1b:
f0:3d:7b:9a:4d:a8:37:65:2f:aa:82:34:0c:7c:35:b0:e8:d2:
69:63:83:8f:29:55:98:2f:c8:79:1a:d5:5a:0f:f2:4f:e2:d6:
0c:ef:98:ec:d5:c5:74:57:3c:1e:07:c7:13:76:fe:8c:e4:c0:
f9:35:27:96:1a:79:88:e9:47:ce:0d:bf:a0:ff:f0:33:11:41:
c1:71:77:03:56:75:c4:c3:93:46:9e:dc:90:d2:bd:01:2e:a0:
76:46:4c:ca:66:17:60:17:19:79:c2:10:e3:a7:14:d1:6d:b2:
26:92:f2:37:d8:b6:55:68:78:f9:bb:2d:26:b2:5e:b4:6d:9d:
4a:11:bc:e5:2e:4d:e4:29:4f:96:2c:ac:af:06:32:74:ea:4a:
e7:41:4b:e2:f5:52:f1:21:da:13:54:92:67:0f:b0:a0:b4:cf:
52:a5:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:33 2026 by rpki-client