Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2q1DoqkK-jxd_3sOocM1hB8Tzc.cer
File: b2q1DoqkK-jxd_3sOocM1hB8Tzc.cer (raw, json)
Hash identifier: b4Gya5bmVBy495jv+OpkJ1p8phvCJqsmG3WWf1MO8vY=
Subject key identifier: 6F:6A:B5:0E:8A:A4:2B:E8:F1:77:FD:EC:3A:87:0C:D6:10:7C:4F:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D780
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Sep 2026 02:22:07 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154931
IP: 163.52.210.0/23
IP: 2402:7760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186240 (0x2d780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 22 02:22:07 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91E1FC4, serialNumber=6F6AB50E8AA42BE8F177FDEC3A870CD6107C4F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:e4:83:c6:4b:60:e4:46:f3:07:f2:66:1e:
19:ba:85:48:d9:b8:db:ed:b9:1a:8b:ef:32:58:e6:
7a:7e:fe:93:28:ca:64:af:4f:0f:02:a4:d1:40:59:
22:2e:e6:31:d6:ba:53:b1:e6:19:6c:2d:80:91:63:
e0:fb:e5:08:62:b9:cc:bf:5f:24:10:87:42:39:79:
3c:e0:51:13:83:d2:09:01:d6:6c:c4:26:d0:b6:e2:
1b:ec:e7:bd:39:00:1e:73:92:7d:8b:d4:9b:93:e2:
1b:5a:16:b1:fd:72:cc:1f:39:11:c5:0c:4d:96:33:
f5:e6:81:da:66:89:34:28:d3:85:4e:a6:5b:59:c4:
b4:72:ef:8f:12:73:67:86:69:1a:e4:f8:89:15:12:
e9:c2:3e:1d:7c:12:c2:12:a2:43:f2:6d:56:5f:69:
09:e7:5e:80:18:5b:05:d1:ad:c2:8e:84:3d:b5:ce:
37:d2:74:df:cb:e5:67:7e:2e:00:ee:d1:1f:86:6c:
59:39:bc:db:47:12:89:6a:5f:04:0d:2b:d3:eb:08:
97:65:ec:e4:7a:d1:23:6d:98:6f:6e:9d:a7:80:23:
4b:89:8b:f4:95:54:72:ab:a3:1e:a8:4f:4f:bc:1a:
f3:3a:87:02:f2:00:6e:92:19:ec:7b:d8:a5:14:c2:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:B5:0E:8A:A4:2B:E8:F1:77:FD:EC:3A:87:0C:D6:10:7C:4F:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154931
sbgp-ipAddrBlock: critical
IPv4:
163.52.210.0/23
IPv6:
2402:7760::/32
Signature Algorithm: sha256WithRSAEncryption
40:66:52:33:68:50:5b:aa:8f:75:ed:b4:b6:fd:7a:f1:d2:90:
d2:d7:ef:b8:03:e7:80:fd:29:ca:ee:17:ac:99:9b:e9:57:0f:
9e:36:32:31:cf:e1:74:e6:99:83:8d:11:b0:01:60:7b:bf:73:
3e:49:a5:8f:03:a3:8b:f6:fe:73:94:4b:59:37:5e:06:d9:f4:
fa:fb:02:7f:71:d5:5a:70:df:02:86:87:97:1b:78:d2:02:fb:
97:48:9f:ba:1d:8a:21:2b:45:a7:db:9a:db:0c:92:84:6d:59:
91:9d:df:6e:18:f4:91:9b:a1:aa:d8:c6:b1:15:b3:17:75:ce:
08:aa:83:82:98:ef:20:9c:fe:43:bf:69:f9:b3:3f:88:8b:07:
bb:16:1b:21:08:86:e7:4a:13:56:5f:c0:91:c5:cc:7a:13:94:
f2:92:1f:a0:b0:1b:9a:82:a2:2a:5a:8f:84:9b:d3:5a:30:53:
ba:da:59:30:95:7c:76:6b:fc:85:a0:9d:30:95:42:54:a0:52:
43:23:07:73:17:71:96:26:9e:bc:af:e5:82:01:bf:37:0c:90:
aa:95:11:6b:0a:c4:3d:41:d7:a7:ea:0f:57:e5:16:0f:2a:ad:
dd:6e:cf:e1:6a:3e:2d:99:db:ee:af:28:a6:91:0a:d7:3f:63:
44:e5:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:15:31 2026 by rpki-client