Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer (raw, json)
Hash identifier: z1RC5o8/UaJcngSQdZDPzo9tPnswoZoy5mIQRgmtUKc=
Subject key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE28
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Apr 2026 13:10:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 153725
IP: 163.223.178.0/23
IP: 2401:f860::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175656 (0x2ae28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 13:10:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:24:9a:55:b3:f3:34:38:f0:3f:02:08:f6:
95:80:bc:4b:a9:53:ec:f2:30:93:05:f6:ae:d5:2e:
5c:8a:35:cf:02:1c:16:f3:c5:83:5e:2f:4b:ee:8d:
10:dd:a0:fd:75:40:9e:12:ad:04:f2:60:b9:8c:09:
33:02:f6:92:c5:af:01:5f:8f:03:b3:cc:86:12:33:
ba:65:60:56:6c:a0:88:98:43:f5:aa:7e:a7:8b:6b:
d6:51:c5:e0:a8:37:07:28:01:64:6a:22:a8:95:8f:
79:59:b7:4c:f1:22:80:0d:d7:d2:8d:06:12:cd:4b:
0b:23:b9:cd:d9:cb:b2:bd:14:99:ae:80:a0:e4:76:
4a:1a:e1:b9:d3:2d:f3:0c:35:2c:be:71:3b:de:bc:
6a:32:ac:b3:d9:77:be:e7:af:38:d1:a7:4b:af:49:
8d:ce:b0:1b:fc:a9:a4:d5:3a:bc:6f:2f:7c:8d:8a:
f2:1f:83:d9:cb:7f:04:3f:8d:43:65:52:5b:45:2c:
97:dd:2b:12:b2:67:e5:54:0b:0b:a1:39:d8:c8:09:
b7:4d:af:1d:75:dc:3e:ca:95:52:10:39:86:be:13:
ea:f5:da:28:ef:9c:62:6e:ba:73:9e:91:ac:ef:c5:
2b:9f:76:59:c2:69:ac:e3:0b:7f:96:8c:2f:ce:cd:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153725
sbgp-ipAddrBlock: critical
IPv4:
163.223.178.0/23
IPv6:
2401:f860::/32
Signature Algorithm: sha256WithRSAEncryption
40:85:a2:ea:9e:8c:2b:47:30:23:0a:9a:25:c1:8e:a4:36:37:
65:c7:3a:5f:5c:ad:34:45:4e:76:5b:dd:01:cb:1a:7d:26:69:
d5:45:f7:ac:aa:96:ed:0c:f6:4b:a2:0e:c6:a3:e1:39:ce:5a:
fb:5f:99:8f:a6:e5:22:0d:9a:3a:4a:04:9d:79:60:a6:d2:3a:
a9:31:02:98:1e:21:d7:a3:df:1c:81:80:ad:8b:7a:7b:a3:d5:
63:75:84:18:f9:3f:55:33:93:34:fa:5f:3a:5b:ba:64:22:1d:
24:e6:20:6b:53:d1:60:d8:14:db:90:e6:2a:36:dc:c8:46:a9:
54:62:8f:0f:b4:08:64:0d:51:3d:4f:3b:c3:44:d5:f7:db:de:
89:87:42:e9:47:87:f5:62:69:47:f6:b8:d4:59:e6:87:f4:68:
45:99:a4:ae:60:fe:69:c2:47:b0:b5:5f:00:f0:f5:9d:4f:a0:
78:7d:84:eb:27:6a:d3:1f:ab:d0:6d:50:db:09:e4:fa:8b:60:
03:7c:e5:29:79:dd:b9:da:ee:b8:c8:91:d0:9b:fd:18:29:7f:
62:0a:bb:f8:e6:d0:cb:8a:fe:e5:0d:f1:6b:7b:1b:14:db:ce:
d4:3e:81:6a:4a:2b:6d:95:1a:b7:24:9e:81:7a:c8:08:0a:87:
1d:74:4e:b6
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAq4oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyMjEzMTAxOFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQw
QzgyNzYwRThFREI4Rjg1QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsSySaVbPzNDjwPwII9pWAvEupU+zyMJMF9q7VLlyKNc8CHBbzxYNeL0vujRDd
oP11QJ4SrQTyYLmMCTMC9pLFrwFfjwOzzIYSM7plYFZsoIiYQ/WqfqeLa9ZRxeCo
NwcoAWRqIqiVj3lZt0zxIoAN19KNBhLNSwsjuc3Zy7K9FJmugKDkdkoa4bnTLfMM
NSy+cTvevGoyrLPZd77nrzjRp0uvSY3OsBv8qaTVOrxvL3yNivIfg9nLfwQ/jUNl
UltFLJfdKxKyZ+VUCwuhOdjICbdNrx113D7KlVIQOYa+E+r12ijvnGJuunOekazv
xSufdlnCaazjC3+WjC/OzT2TAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU/4zL5hh1
Wh9Rmb0MgnYOjtuPhbowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVCQzk4L0FCQUZGNUVBMDYxMjExRjA4RTlBRTUyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1QkM5OC9BQkFGRjVFQTA2MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWho
MVdoOVJtYjBNZ25ZT2p0dVBoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlh9MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBo9+yMA0EAgAC
MAcDBQAkAfhgMA0GCSqGSIb3DQEBCwUAA4IBAQBAhaLqnowrRzAjCpolwY6kNjdl
xzpfXK00RU52W90Byxp9JmnVRfesqpbtDPZLog7Go+E5zlr7X5mPpuUiDZo6SgSd
eWCm0jqpMQKYHiHXo98cgYCti3p7o9VjdYQY+T9VM5M0+l86W7pkIh0k5iBrU9Fg
2BTbkOYqNtzIRqlUYo8PtAhkDVE9TzvDRNX3296Jh0LpR4f1YmlH9rjUWeaH9GhF
maSuYP5pwkewtV8A8PWdT6B4fYTrJ2rTH6vQbVDbCeT6i2ADfOUped252u64yJHQ
m/0YKX9iCrv45tDLiv7lDfFrexsU287UPoFqSittlRq3JJ6BesgICocddE62
-----END CERTIFICATE-----
Generated at Wed May 13 01:39:15 2026 by rpki-client