
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
File: QuOGLXRTXCypqrN6cZW1keruIeU.cer (raw, json)
Hash identifier: sugIYnteCsZ7X0CW/dNCU1/VCnvdFfwJLCuLMEgXYts=
Subject key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B115
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 06:24:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 153726
AS: 154648
IP: 163.223.173.0/24
IP: 2001:df5:4740::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 14:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176405 (0x2b115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 06:24:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:d0:94:37:1d:01:75:5f:3e:99:b1:33:eb:
a8:53:76:50:ab:b7:b2:e1:f8:27:9c:43:b1:d0:48:
7f:28:1d:a5:79:00:9f:fd:7f:31:21:34:a0:8e:45:
32:a8:0b:95:36:90:62:2c:8c:f2:ec:7c:99:f6:d1:
28:4c:16:93:d0:5a:97:c6:d4:21:25:eb:04:58:66:
98:4c:d2:67:b6:4b:7b:13:b4:9c:03:e8:ee:49:e6:
3c:29:47:de:2a:a4:71:5a:01:e3:ff:b2:2f:5f:80:
c0:a9:cd:18:dd:61:ab:c4:5b:b0:75:22:5d:16:ed:
5c:7b:91:32:7c:95:16:c2:64:13:c0:28:b9:fc:e8:
e1:3e:76:c0:4c:96:3a:90:8f:11:8b:00:e3:ce:55:
82:c5:55:ff:27:02:18:48:5c:d7:0b:8f:df:b5:c2:
b2:e6:40:70:b9:a2:30:01:41:a3:13:5c:74:61:c1:
e8:c2:39:16:43:1a:c9:55:3a:64:2d:c2:8d:b6:bc:
52:a2:86:95:eb:84:28:24:a1:b0:8c:fe:4f:0c:65:
3f:89:6e:ea:f0:4c:af:96:85:ca:53:e5:71:d0:40:
e1:31:c4:5c:d0:11:68:b1:2c:39:c5:9d:86:21:97:
53:44:35:51:11:0b:28:53:66:d6:a7:b0:f0:85:8e:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153726
154648
sbgp-ipAddrBlock: critical
IPv4:
163.223.173.0/24
IPv6:
2001:df5:4740::/48
Signature Algorithm: sha256WithRSAEncryption
7a:04:35:74:a8:78:8f:0d:49:dc:4c:42:78:a6:c4:ff:f3:ab:
d6:e5:fa:51:80:36:f0:f6:56:0f:87:e1:16:88:7e:8e:97:de:
14:45:ef:ea:13:97:16:5c:da:99:7c:ae:45:cf:a3:26:97:18:
3f:d8:69:43:a6:a5:eb:e2:62:25:41:9c:84:61:13:62:23:ef:
21:01:d2:e1:66:6a:bd:cb:5a:9a:ea:b2:81:9b:fb:97:fd:32:
3a:bd:f4:f1:f2:21:ae:de:c3:66:45:3b:05:35:26:5d:3e:4c:
e1:81:a6:21:3d:c9:9f:17:85:ac:08:ed:3d:39:e8:51:cb:2d:
df:7f:e7:e2:3a:f0:f2:59:a3:06:d9:b3:d6:70:19:e6:96:31:
d5:1a:66:1f:09:10:39:bd:09:39:73:e9:c3:7f:cb:e3:0e:5c:
b7:43:2d:06:a4:9c:0e:29:09:fd:20:53:db:da:25:28:b2:ae:
35:d5:c3:ca:4a:ee:cc:90:fe:d1:23:f5:0b:36:a0:2d:82:2c:
a7:ac:d1:aa:60:65:c8:88:f1:8b:e0:04:a2:74:f0:70:ce:25:
7c:a3:bc:c1:fb:fc:5d:a9:10:9c:64:59:78:b3:14:0c:ae:e0:
e3:6f:9f:b7:6b:3e:df:00:ef:62:e1:7c:06:ae:fa:29:9a:4e:
1e:9c:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:27:55 2026 by rpki-client