Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
File: P20pux90eTz4jHg3KFY7vUPoCj4.cer (raw, json)
Hash identifier: TFglKm53ofvVrvAVFMjIbYtUfK3ZU/837adT4tsQ2s0=
Subject key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A56A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Mar 2026 13:37:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154515
IP: 113.29.248.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173418 (0x2a56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 20 13:37:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:ae:90:60:64:ad:c6:25:a4:8c:8e:0b:07:
3a:bd:24:59:42:a3:30:3b:41:b2:fe:92:b9:d0:2b:
8d:75:e4:b5:ef:1c:1e:4d:08:fd:99:74:31:a0:0a:
7f:0d:c1:e0:20:30:f7:47:44:68:84:9c:90:b8:01:
d4:8b:a9:cb:4d:e8:5c:d1:ce:81:8f:13:42:2d:a6:
da:42:72:4d:c5:c2:88:01:98:4d:33:f5:8f:4d:26:
d9:9b:1e:ab:7d:1a:01:c9:f8:b4:ab:60:ba:43:2a:
03:7c:4e:6d:94:8b:79:15:6b:e7:fd:9c:fe:ff:22:
30:2a:e6:90:fc:bf:b4:9f:76:17:18:46:b5:b2:a6:
42:ab:df:b8:7d:6f:bd:d5:e6:88:4d:54:10:fd:9f:
05:c9:23:1b:be:88:ef:86:a6:96:2d:64:13:a2:b8:
ab:04:91:47:d6:e4:74:69:a9:87:04:61:e6:ae:e9:
9c:fa:3b:7c:85:1b:e9:bb:a0:7c:4a:5c:e8:d7:e9:
9a:bd:f6:c5:46:64:63:ce:18:e3:a4:6b:26:cb:8a:
1b:a9:f2:ba:79:78:c5:52:9f:67:c7:e3:fd:a0:40:
9c:a8:44:c6:c1:a8:f1:d2:01:e2:d5:ad:1a:52:7f:
23:b1:1f:36:dc:82:78:55:8f:ad:40:ea:fd:f2:61:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154515
sbgp-ipAddrBlock: critical
IPv4:
113.29.248.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:43:9b:51:8d:7a:46:78:05:be:b3:26:bd:50:f3:3b:f2:80:
2d:36:c3:66:ce:59:72:87:4b:65:7f:20:62:16:93:26:d1:30:
c9:b1:49:62:ed:7b:cf:56:a7:52:d8:a5:14:cc:62:4d:36:05:
49:07:52:ce:40:ad:de:57:9e:bd:19:25:74:43:32:10:20:88:
0c:29:10:7f:27:0a:ad:9c:b6:39:90:3b:20:4b:a0:59:0f:00:
1a:6b:bb:b2:77:19:59:60:f6:f3:82:2d:60:e6:26:af:6a:ef:
6e:13:a9:5d:be:65:63:71:65:ce:ef:d0:f2:68:bc:31:5b:de:
7c:5e:36:fc:f7:08:2b:e8:a7:3b:c6:c4:18:e6:95:20:08:ec:
8b:1c:e5:59:b4:ef:00:15:20:96:ab:15:62:f4:01:25:0e:1e:
64:dc:5b:ee:3c:ec:d2:7f:cf:df:0e:d3:f2:30:7a:c4:59:76:
20:08:3d:0b:17:95:79:19:e5:33:d8:2c:b4:72:17:62:31:f3:
9d:4c:ea:2d:58:ff:43:b2:c2:da:30:c4:0c:c4:07:b3:d7:43:
16:98:bc:0d:61:77:71:42:29:e0:78:19:e6:c7:74:e3:b6:59:
d6:60:28:df:9c:5a:0b:ae:45:54:8f:5e:ab:d1:8e:4c:14:b2:
ea:26:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:16 2026 by rpki-client