Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer
File: A0kndy5R4IVbEP1QK4FvJDRhm_I.cer (raw, json)
Hash identifier: d5KaqBOnL4kgvxTUPAoIZ9bbOuzXY/j48irHVMInAPw=
Subject key identifier: 03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B0E4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Apr 2026 14:45:33 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 142048
IP: 2402:5b20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176356 (0x2b0e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 30 14:45:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91676C8, serialNumber=034927772E51E0855B10FD502B816F2434619BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:a0:f5:24:45:ed:df:82:7f:95:fc:d8:73:
17:6e:30:24:8f:7f:73:3c:9a:e6:1a:6c:65:97:5e:
00:6a:09:54:ea:51:61:cb:48:e1:39:9f:4c:d9:b4:
f9:22:8e:3f:5f:9d:2a:d0:2a:4b:89:91:e5:35:dd:
a2:1d:e2:6d:36:49:fa:24:dd:e7:78:3a:80:fe:75:
c6:2c:b1:da:32:0e:88:1c:46:75:b2:8a:db:16:e3:
d3:bd:77:6c:85:fb:43:29:92:d6:03:10:16:83:d0:
7d:81:03:1e:f8:06:f3:8e:cb:d4:b9:ef:4d:1e:0e:
ad:39:46:50:5f:69:86:38:18:20:fb:87:1b:99:56:
e0:3f:00:dd:df:b7:4f:9b:67:84:e4:d3:62:9e:a1:
18:c7:a1:56:f9:9b:c3:d7:37:a3:7e:bb:fb:66:ca:
69:d1:61:f5:7e:d6:fd:62:e5:2d:82:61:53:1b:36:
1d:b8:4f:28:23:db:96:26:50:4b:cc:3a:df:db:0f:
6a:d5:96:ad:7d:1b:66:88:1c:c9:b9:58:a5:65:6d:
38:65:db:64:a5:0d:7a:78:5c:6c:f2:4e:8f:b1:f4:
22:f0:eb:e3:0a:71:45:9d:f5:59:8d:78:31:1e:b0:
94:58:5e:4e:ef:80:30:d6:9c:b6:8a:92:e0:f5:68:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142048
sbgp-ipAddrBlock: critical
IPv6:
2402:5b20::/32
Signature Algorithm: sha256WithRSAEncryption
82:80:f7:23:c5:86:98:dd:44:2a:a5:93:d0:1f:f7:f9:0c:52:
b9:fb:f7:2f:0e:13:18:92:f8:d9:59:30:8b:cd:51:7c:83:18:
60:ac:43:ab:6b:a5:5e:de:47:65:08:a8:f8:4a:aa:77:db:cc:
d3:dc:f7:05:a8:5c:4b:a9:41:ec:a7:6a:09:fa:b2:9c:1b:17:
ed:4a:15:68:c4:c2:cb:f9:02:04:17:66:35:2a:6c:7c:aa:aa:
24:3a:40:3a:f7:ca:09:84:69:26:73:6d:6b:85:0d:e5:63:68:
29:df:9c:fb:06:93:7f:80:bd:76:64:48:e9:f8:45:28:e0:34:
ee:c7:db:69:51:b8:4b:a6:87:9f:84:17:51:9c:e3:a7:dd:39:
03:e8:c2:24:14:33:da:1c:cb:cb:23:c1:08:e9:5e:d3:fd:50:
b3:98:94:0a:26:1a:c9:19:b3:e4:d1:33:ac:9f:da:ac:06:67:
0f:c8:54:53:35:7e:46:7e:19:8d:48:9f:d4:b9:07:97:05:a9:
13:a6:d6:8b:0f:5c:4b:b7:f8:93:26:ca:64:91:5b:25:92:66:
cb:b2:36:39:47:ec:4f:01:7b:f2:8a:f8:02:bf:82:e1:73:e5:
25:84:3d:c5:f5:8e:d3:f5:e6:a0:ea:2e:ed:74:35:c3:7d:0b:
f9:95:fe:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:24 2026 by rpki-client