Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
File: T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer (raw, json)
Hash identifier: zboqdWePg/qxpu1HWI3e9kXG10DDNdU29uUBAOtaT7E=
Subject key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A5FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Mar 2026 11:37:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154560
IP: 163.128.100.0/23
IP: 2001:df6:d840::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173565 (0x2a5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 24 11:37:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:04:79:25:30:28:fd:10:d9:92:a7:3c:bc:
17:5a:cf:1b:b9:8d:6f:f7:0b:4b:20:27:45:98:38:
dc:0a:1c:82:c4:41:61:99:58:9b:69:44:1f:89:78:
e9:57:a6:6c:1a:c2:d5:3c:1d:ee:6e:d4:bb:cb:f5:
dc:79:70:9b:f5:54:66:02:ca:06:01:65:a6:2a:84:
34:44:8b:b7:7a:ad:71:de:af:dd:fc:e7:06:97:67:
ea:40:4c:10:f6:00:41:21:ff:ce:7b:83:0b:5a:d1:
c4:b1:42:20:76:25:b7:af:55:50:f0:70:46:92:54:
e2:e8:56:a9:6b:f7:ea:4f:15:25:c1:94:7f:08:47:
94:28:19:45:ff:ed:75:42:be:cd:09:f1:a6:d2:90:
01:ce:ac:51:fa:5c:d7:fa:a0:c7:9a:48:ab:b4:28:
97:a3:9d:83:92:c7:83:c2:65:cf:ad:7b:6f:f1:1b:
52:7c:8f:90:bf:ca:f4:0b:65:01:c1:08:b9:70:f2:
e2:67:f6:d3:69:a4:3e:67:f6:77:82:10:7f:d8:c8:
ae:b4:ce:e5:c7:a0:00:09:5e:bf:8d:cf:bd:68:69:
ed:55:48:33:86:13:18:03:37:a8:2d:6e:47:41:85:
44:a5:64:7f:c2:9f:17:24:48:11:b2:a4:cb:15:00:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154560
sbgp-ipAddrBlock: critical
IPv4:
163.128.100.0/23
IPv6:
2001:df6:d840::/48
Signature Algorithm: sha256WithRSAEncryption
a6:e3:a5:06:0a:e3:b3:0f:48:c0:af:c2:fa:25:92:a1:33:6a:
f8:6a:fd:18:61:a1:dd:bb:81:48:1d:c8:95:10:60:5a:4e:3a:
86:ff:58:e4:90:88:86:03:30:4e:25:89:37:0e:ec:3f:35:80:
9f:a0:53:53:3a:76:68:a7:52:50:52:1f:c5:7a:ef:2d:58:63:
36:21:92:35:c4:6a:29:b1:a4:b1:6f:54:10:ef:f4:8d:cb:34:
0f:32:24:19:6d:58:4c:13:09:f3:d5:11:b4:cc:90:dc:8d:7e:
84:04:08:46:12:d6:df:6c:ce:68:f0:21:55:71:ed:e6:7b:3a:
e1:91:db:13:91:4b:46:7a:de:c4:b8:9f:a1:59:bb:b8:c1:c7:
18:19:40:27:d6:a9:81:05:5f:c0:c0:50:03:b7:e4:39:99:84:
49:65:7b:ac:1d:e8:89:5e:9c:f5:98:0b:c5:bb:b1:52:46:7d:
4d:f0:e0:c5:35:98:c5:37:64:be:87:26:e6:8f:98:de:8b:14:
0e:71:00:a5:a6:3a:58:08:ce:bf:90:d7:b2:ae:fa:49:53:ef:
a5:93:bb:93:87:31:12:20:14:ef:ee:3b:d1:6a:08:10:73:c1:
7c:f3:bc:1d:60:97:a5:1e:51:70:d2:3b:0b:44:8e:39:bc:61:
aa:3b:44:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:54 2026 by rpki-client