Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer
File: 76QjuvW_0YkxbmUDHozq9aP_oUs.cer (raw, json)
Hash identifier: jLcgTtMM+hjdTH+KfSL/OrHhyEW7kqYU2oUTUZMJ53I=
Subject key identifier: EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B1A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 May 2026 14:45:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 153749
IP: 163.223.220.0/23
IP: 2001:df5:4d40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176548 (0x2b1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 14:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91F264C, serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:e5:a9:42:a1:3c:2c:df:14:20:5d:63:b4:
f7:a8:a4:28:33:f9:63:e7:42:fd:c8:03:a4:47:18:
1c:5f:65:a7:84:50:d1:fb:67:36:78:e8:d7:60:41:
b3:bd:78:ed:f4:8b:22:61:d5:06:4a:af:4d:90:7b:
9a:9b:88:de:46:82:b0:ad:b0:cd:de:44:86:5d:66:
d3:2d:e8:1a:75:f2:73:54:92:3a:2d:93:6b:de:4c:
4e:99:e6:ed:e9:75:5c:4b:cb:98:71:de:cb:ef:cf:
49:b5:9e:33:0f:8a:43:03:fb:15:3e:ce:d9:c8:11:
fe:a7:07:ed:45:e2:7a:95:86:74:ff:8c:5f:d0:b8:
a4:d7:64:ba:02:3c:06:50:1f:86:93:33:31:e9:2a:
5d:2a:1d:6d:1f:61:50:60:ef:c1:ee:6f:7d:e3:95:
71:97:b0:8d:75:22:7c:19:5a:1e:b4:9d:da:ad:f6:
06:3b:c8:cc:ee:e6:43:c2:fc:c4:83:17:0f:05:21:
be:05:3e:ae:19:96:59:17:55:ea:ec:71:ac:7a:f6:
e9:0b:8f:a3:64:ef:0a:b9:57:38:68:16:23:dc:37:
77:27:27:1a:21:49:8a:fd:cf:d2:2e:14:87:d3:6a:
9a:a2:3e:db:30:62:74:a7:9d:46:36:c2:46:14:05:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153749
sbgp-ipAddrBlock: critical
IPv4:
163.223.220.0/23
IPv6:
2001:df5:4d40::/48
Signature Algorithm: sha256WithRSAEncryption
25:32:c6:ee:8a:58:25:84:a1:28:c3:61:b3:f4:d2:18:05:2d:
b2:19:bc:3f:f5:87:37:34:76:74:d5:59:67:0f:5d:7e:86:fc:
ac:1b:02:d4:34:af:01:c6:21:8f:84:14:76:29:31:1d:50:04:
6a:df:df:86:2e:8d:3f:cb:84:0c:97:dd:0c:31:74:96:87:bc:
ad:0b:87:a2:5b:17:bb:fc:fe:94:c4:4f:4f:89:0a:67:b2:4a:
46:fe:d6:66:86:45:17:73:15:1a:ec:3b:10:54:19:86:4c:02:
39:72:32:2c:1d:f1:01:ca:f9:fb:5f:4b:91:c1:9a:19:90:ac:
56:d2:34:37:92:ea:36:69:50:2b:50:e5:8c:9f:11:35:67:08:
12:ec:f9:99:4f:05:8e:d6:c9:ae:bc:65:8c:b9:12:4c:e1:10:
28:f6:4d:6f:76:ed:21:93:e4:ce:3c:c5:f0:12:ef:0e:61:44:
dd:ca:fd:62:4b:7e:5b:6e:15:55:ee:48:c8:27:c1:39:3e:27:
3e:63:68:2a:46:42:f3:80:90:c7:10:b7:70:af:83:6b:fb:dd:
53:36:ad:b8:15:43:aa:a1:07:e6:03:d2:ef:14:8e:b1:53:db:
fc:dc:10:b6:80:9f:03:27:c6:5d:6d:7a:42:97:1d:97:08:51:
8c:37:ac:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:17:20 2026 by rpki-client