Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
File: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer (raw, json)
Hash identifier: VO0GUi65cHRS6eXKHfCRZqNLJXIXLavjOpsOebosQ1I=
Subject key identifier: 65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A3AC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Mar 2026 03:46:11 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 9417
IP: 202.58.224.0/24
IP: 203.89.145.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 23:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172972 (0x2a3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 11 03:46:11 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91DC76E, serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:fc:34:8c:68:ea:94:9f:7a:fa:45:0d:cf:
b2:8b:0a:3c:f1:ae:5d:b2:e3:2e:d1:4c:b2:94:40:
c8:e2:ec:68:e2:9f:9b:6e:e9:cd:b4:41:b3:78:0e:
75:20:8b:80:70:9d:ac:71:34:7d:b6:b1:5a:53:98:
ff:18:25:f3:4e:0b:36:64:29:34:8b:f0:19:7c:19:
62:69:bb:bb:18:51:c3:c8:09:dd:eb:ab:db:6b:84:
2d:2a:f3:07:e3:c9:28:86:1c:f7:96:20:b9:66:3a:
dc:2e:19:bd:05:28:4d:37:9d:93:94:7e:a4:77:60:
60:7b:19:4e:30:01:4a:c2:8c:6f:cb:d9:e2:7a:67:
6c:67:d8:e9:40:fe:3d:00:fc:8c:50:ca:e4:31:aa:
47:92:68:5e:a2:37:f2:29:f3:29:a5:43:bc:7b:f7:
2a:4c:00:f5:29:60:6e:f4:d3:c0:90:c1:e1:86:dd:
96:19:4e:6c:4d:f9:ed:dd:9a:c2:17:c1:5a:c6:fb:
84:3c:4f:d6:ee:dc:95:05:69:9c:02:da:d8:aa:2a:
d9:8f:53:b4:bb:de:13:ce:e7:52:f8:bc:b3:1b:99:
f4:33:f4:2a:14:1f:c2:6a:55:d7:1f:37:86:8a:61:
d7:da:92:3f:2b:db:49:ad:2c:e6:b0:8a:28:49:b4:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9417
sbgp-ipAddrBlock: critical
IPv4:
202.58.224.0/24
203.89.145.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:23:cf:72:c9:64:35:0d:bf:02:94:1b:ac:36:1f:e0:2b:a3:
31:fb:90:1f:d7:e7:77:c6:4f:d2:c4:22:a8:58:00:68:b4:52:
dd:f8:5b:d4:e0:f6:38:f1:de:ec:d3:f6:53:8e:d6:24:7a:e8:
55:ff:cb:f8:6d:77:1b:31:15:b1:6c:3f:fb:ff:74:7d:bd:de:
25:32:34:e3:5b:76:c6:e7:ba:2c:dd:92:00:94:28:89:05:40:
46:16:6b:e7:4f:8e:09:c6:7c:9d:c6:53:ee:d5:cf:af:75:4a:
76:db:1c:19:b7:62:3d:96:88:46:e7:ca:93:d2:02:80:76:1e:
6a:a5:e9:a2:8d:82:a9:e2:ae:fc:27:b9:54:c9:3a:91:e5:35:
60:d9:32:37:78:b8:c3:ee:54:31:5a:4a:17:9c:cd:c5:24:0a:
1a:d7:5f:70:14:e8:49:aa:70:6a:0e:11:17:9f:9b:f8:2e:89:
22:e3:f6:c9:54:27:89:8f:a7:85:9c:a7:cc:21:a2:61:9a:a7:
4d:a7:8a:6f:8e:1a:08:84:53:29:92:30:bb:6d:e3:30:8c:dc:
3f:b4:62:12:fa:11:78:e8:35:d4:c4:5b:db:d8:b8:f1:7f:2a:
f3:98:8d:4b:b8:db:7f:6c:49:db:9e:6b:2f:6a:bf:a5:77:4b:
3e:27:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:41:31 2026 by rpki-client