Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
File: cL0eSV4lCyLieYKWlpeFotd9c38.cer (raw, json)
Hash identifier: mO5cyPbjUGmgdkCQjhHCz0F5WHUuS/A0P4gwdJorISY=
Subject key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B164
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 14:47:55 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 55489
IP: 202.128.99.0/24
IP: 2001:df1:43c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176484 (0x2b164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 14:47:55 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:c1:e8:5d:4f:cb:47:2d:f5:a9:81:80:ea:
35:b4:fe:13:6c:09:ed:05:64:aa:f1:18:a9:db:68:
80:92:d2:56:03:44:5f:0f:84:2f:46:04:3a:38:88:
b7:41:98:49:c6:76:6c:02:95:63:3a:18:27:27:22:
80:23:22:7c:21:72:b4:19:de:e0:ff:76:2b:05:c6:
57:7a:67:1c:f6:e7:64:d4:a9:c3:1f:1f:64:37:21:
7a:7d:7b:06:a9:e2:60:ce:2f:9f:7e:be:c4:8c:01:
00:8b:f8:ad:45:01:77:c6:b9:e4:f6:38:b6:26:0d:
0e:dd:16:ba:51:fa:35:bc:e6:f2:c5:80:5b:a1:e4:
29:c2:60:4e:3c:cd:a4:b0:96:a4:55:37:0b:27:8a:
ac:1b:50:e3:e9:fa:ba:fe:41:9c:a3:84:ab:74:de:
2b:a2:d4:aa:70:6f:bc:6d:cc:d3:29:65:b2:6b:ec:
c4:71:87:0a:2c:b7:0e:90:24:ae:dc:33:32:e5:0c:
f1:85:83:09:64:3b:02:67:15:06:af:7f:04:3f:64:
d1:04:d2:13:e4:08:3a:8e:6a:54:28:41:3e:21:20:
7f:9c:32:19:62:27:0d:e9:7d:2a:42:f3:14:0f:3c:
85:4f:1c:45:13:fc:63:4c:10:6e:62:0c:af:fd:dc:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55489
sbgp-ipAddrBlock: critical
IPv4:
202.128.99.0/24
IPv6:
2001:df1:43c0::/48
Signature Algorithm: sha256WithRSAEncryption
44:25:d1:2f:ba:c0:bc:cf:24:e0:19:93:eb:2f:a9:3d:b3:07:
d9:c8:09:5e:51:2c:31:a8:45:b7:20:bb:73:e8:07:f3:ee:cc:
b6:4b:71:48:dc:f9:77:7e:ad:cb:53:b5:70:b1:1e:c5:e4:3c:
04:d4:0f:3b:b6:fb:99:c7:59:2d:5a:e7:29:0a:d0:97:62:aa:
c2:0e:7a:b5:14:91:cc:ec:12:54:4b:dd:49:b6:b5:0c:a6:49:
3c:66:18:c2:02:3e:37:f6:a5:b3:cb:ac:ee:48:b8:30:ac:fa:
c6:2c:06:be:02:56:a5:a5:a2:fa:af:36:0a:25:ff:20:93:65:
45:23:5c:76:72:9a:47:be:69:f5:d2:f4:e9:a3:c2:b3:7f:45:
f5:57:dc:59:41:48:41:ab:df:ee:11:f9:c2:59:f9:cd:54:10:
51:cf:ae:9f:66:19:a1:2b:d6:91:1e:5e:ec:45:c2:f7:9f:94:
5e:48:3f:f2:c9:c4:41:16:b4:9c:26:98:0d:43:a1:7e:ee:20:
e8:37:06:c1:1a:c9:29:da:91:48:f7:26:4e:48:4c:66:13:44:
87:21:1a:94:24:c3:2d:04:4a:fb:43:14:5a:be:c5:50:26:12:
82:64:68:06:16:af:f4:22:c2:fb:7c:29:7e:c1:a2:89:f1:f1:
1b:ff:cc:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:01:51 2026 by rpki-client