Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/87TgHnx3HLQliWfWZ_92HsnqOtg.cer
File: 87TgHnx3HLQliWfWZ_92HsnqOtg.cer (raw, json)
Hash identifier: DGX/pQ/sM7pB/or41hVSmQ8MEew1ngLPNj/euSVC1m4=
Subject key identifier: F3:B4:E0:1E:7C:77:1C:B4:25:89:67:D6:67:FF:76:1E:C9:EA:3A:D8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A4C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Mar 2026 12:16:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154554
IP: 163.128.78.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173249 (0x2a4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 17 12:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A919202C, serialNumber=F3B4E01E7C771CB4258967D667FF761EC9EA3AD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:20:40:2a:ac:12:77:81:30:82:5e:0a:ef:
3a:b3:10:91:1f:e3:55:08:66:01:74:b4:be:2c:61:
f0:7d:70:75:11:18:7c:fd:43:82:61:b8:c5:11:6e:
02:0a:2e:05:45:b2:dd:94:41:4b:fd:4a:ae:22:cc:
62:8c:50:2a:c3:fb:94:42:af:6d:e3:5b:35:12:d9:
76:09:dd:82:8e:cd:07:f7:7a:1a:21:95:33:0c:2f:
5c:c0:ca:c3:b1:19:7c:ee:f5:43:69:4f:6a:6d:80:
3b:be:7c:b1:8e:54:0e:3c:31:b4:04:c9:f6:ab:e0:
e1:5b:8d:55:23:61:89:ce:66:b2:64:1e:0d:ee:d2:
1d:2d:df:72:8d:74:e5:60:98:c9:f8:7e:52:e4:25:
2e:d4:32:19:42:80:99:fd:a7:5a:08:2f:e4:c4:d1:
cd:f5:33:1b:39:ba:cb:b4:07:33:0c:1e:bb:c1:8e:
27:18:75:35:9e:06:40:1a:81:34:92:f6:bc:2c:f5:
f9:de:f2:a3:66:2e:e3:a6:8f:61:78:28:d2:dc:f9:
d5:ed:30:74:9b:93:18:4c:22:e9:8a:0f:b2:c1:5c:
b6:80:76:8d:55:99:f8:23:a3:54:cb:21:fa:eb:06:
a9:58:3f:03:b2:e5:02:04:79:a2:b8:5c:99:18:81:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B4:E0:1E:7C:77:1C:B4:25:89:67:D6:67:FF:76:1E:C9:EA:3A:D8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154554
sbgp-ipAddrBlock: critical
IPv4:
163.128.78.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:30:1d:69:5b:1e:6a:a2:70:41:9c:a9:77:a2:48:ce:71:66:
e8:df:42:44:81:69:79:94:4a:b3:ed:ea:ac:e3:b5:db:14:a2:
e0:60:ac:c8:00:27:12:7c:81:c0:f3:ec:2a:17:e0:70:c4:15:
10:2f:ce:0f:67:ef:8c:fb:fc:18:8e:86:61:8f:41:fc:0b:ea:
69:a6:2c:0d:10:a3:46:90:b3:5f:99:cc:64:e1:4f:ce:b6:83:
fa:6a:1c:d3:52:d7:19:c2:e8:92:4a:a0:a5:92:80:16:48:bc:
63:96:e2:de:d9:9d:65:c3:b2:af:52:df:79:d8:a5:12:bc:e0:
59:f7:22:0a:65:db:56:a0:92:a5:d2:04:3a:62:7a:cf:df:f8:
57:f9:9d:b0:1d:bf:4d:e3:d9:2c:4d:27:c0:4a:0a:4f:47:f7:
de:3d:e1:f2:60:cc:c0:5f:5f:4e:6f:e5:61:52:0b:b9:2e:db:
81:0b:ae:c3:28:15:ee:d0:ab:4a:3c:ac:31:52:b7:96:e4:a6:
54:35:ff:e3:03:a8:86:45:ff:37:cc:69:8d:b8:08:37:28:41:
9b:33:24:80:6b:8a:77:b1:56:a9:3a:e5:d8:5f:bd:28:25:2b:
77:6a:bf:f6:a8:12:b6:32:6b:d9:9a:27:09:2a:87:8d:34:3b:
15:b5:3b:e5
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAqTBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMxNzEyMTY1NVoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTIwMkMxMTAvBgNVBAUTKEYzQjRFMDFFN0M3NzFDQjQyNTg5NjdE
NjY3RkY3NjFFQzlFQTNBRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChICBAKqwSd4Ewgl4K7zqzEJEf41UIZgF0tL4sYfB9cHURGHz9Q4JhuMURbgIK
LgVFst2UQUv9Sq4izGKMUCrD+5RCr23jWzUS2XYJ3YKOzQf3ehohlTMML1zAysOx
GXzu9UNpT2ptgDu+fLGOVA48MbQEyfar4OFbjVUjYYnOZrJkHg3u0h0t33KNdOVg
mMn4flLkJS7UMhlCgJn9p1oIL+TE0c31Mxs5usu0BzMMHrvBjicYdTWeBkAagTSS
9rws9fne8qNmLuOmj2F4KNLc+dXtMHSbkxhMIumKD7LBXLaAdo1Vmfgjo1TLIfrr
BqlYPwOy5QIEeaK4XJkYgdk9AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU87TgHnx3
HLQliWfWZ/92HsnqOtgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkyMDJDLzJEQzg5MjRFMjFGQjExRjE4MjU4RTI2RDJGM0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MjAyQy8yREM4OTI0RTIxRkIxMUYxODI1OEUyNkQyRjNEOEM2Ny84N1RnSG54
M0hMUWxpV2ZXWl85MkhzbnFPdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlu6MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo4BOMA0GCSqG
SIb3DQEBCwUAA4IBAQBsMB1pWx5qonBBnKl3okjOcWbo30JEgWl5lEqz7eqs47Xb
FKLgYKzIACcSfIHA8+wqF+BwxBUQL84PZ++M+/wYjoZhj0H8C+pppiwNEKNGkLNf
mcxk4U/OtoP6ahzTUtcZwuiSSqClkoAWSLxjluLe2Z1lw7KvUt952KUSvOBZ9yIK
ZdtWoJKl0gQ6YnrP3/hX+Z2wHb9N49ksTSfASgpPR/fePeHyYMzAX19Ob+VhUgu5
LtuBC67DKBXu0KtKPKwxUreW5KZUNf/jA6iGRf83zGmNuAg3KEGbMySAa4p3sVap
OuXYX70oJSt3ar/2qBK2MmvZmicJKoeNNDsVtTvl
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:09 2026 by rpki-client