
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer
File: cnTOXaBB8mCNjIJt7g5xWhhxUro.cer (raw, json)
Hash identifier: +swvRE+zM3oWHAvbFI8M6ZpMk7vyJiIoKxT3Yk6AFec=
Subject key identifier: 72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AF75
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Apr 2026 08:30:47 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 150727
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175989 (0x2af75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 28 08:30:47 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91A2FF9, serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:8b:9c:90:f7:78:40:9b:7f:c2:1a:22:7a:
61:0d:4d:17:d6:f8:2f:1f:4a:4d:53:a2:b8:bd:9b:
6b:89:0e:32:71:7b:14:37:f0:6c:5c:e0:18:d0:fc:
34:c7:20:2b:2d:89:e0:0c:7c:2d:d5:f2:73:52:6c:
60:d3:ab:11:4c:c0:74:00:12:a1:49:af:13:b6:a6:
86:fd:b9:1d:8c:73:ac:6d:89:4d:fe:db:08:5f:52:
9c:8f:96:28:c4:75:a2:2c:76:10:72:68:a6:50:c1:
f3:de:58:28:6c:bb:fa:34:83:a2:c4:87:87:f0:d7:
30:59:04:c1:c2:ef:75:b0:90:aa:06:85:a3:7e:5d:
aa:07:ec:9b:dc:60:fa:97:99:b3:70:8d:8f:e4:db:
b3:de:7a:ae:45:ae:8c:2b:f0:0e:4b:ba:f3:7c:78:
d0:f0:97:5e:f1:8c:89:4a:cb:e1:fa:b5:43:b1:22:
d8:cb:2c:fc:20:f8:a0:ff:f3:04:13:b5:3f:fc:fc:
8f:0c:2f:ee:a0:c8:16:b2:a4:a6:0a:65:c4:6a:f7:
af:07:89:d1:21:3e:f6:ab:d9:0b:78:f8:a1:89:32:
ec:b4:3d:18:c9:a3:ca:b9:4f:80:87:25:3a:3a:52:
be:22:c1:0b:1e:d7:83:59:53:ff:e3:ad:87:d3:f8:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150727
Signature Algorithm: sha256WithRSAEncryption
d4:ae:65:08:69:35:d4:f8:42:cd:f7:f2:c6:8a:81:84:b3:f7:
5c:19:25:a6:ac:e8:cb:56:24:ab:b9:35:fc:e3:95:3c:cb:41:
8c:0f:a3:0e:89:44:0b:25:30:ee:ee:9b:c8:9f:e7:8a:1d:c5:
75:45:38:88:a4:0f:e6:4b:c2:be:35:58:7b:1a:e5:68:fe:b1:
bb:ca:e6:bf:c0:33:9c:bd:09:9c:27:70:a2:35:1b:dd:a0:61:
ee:ed:14:32:00:3e:95:f1:ea:d3:1a:45:c6:6f:8f:fd:1f:44:
ec:50:30:e7:87:e0:df:5b:5e:c7:8a:bd:94:c4:c2:7f:70:ce:
d0:84:b3:ef:72:3b:55:c0:89:8d:03:34:d1:b4:a4:e7:b4:b5:
f2:29:4f:66:5c:0e:b3:99:87:38:8a:ad:83:ac:3d:8b:a3:4c:
e7:72:f5:b4:49:6e:92:15:62:81:fa:7a:37:5f:d2:24:6e:37:
c6:8b:14:9d:a9:38:72:69:e5:f7:e4:42:5b:87:f6:7b:1d:4b:
fe:91:60:64:7b:7b:72:36:8c:b8:8d:18:f9:98:32:21:de:80:
d4:b3:63:e7:c0:61:0e:a2:d8:a5:3c:96:6a:30:b8:d7:db:15:
f5:2b:2e:d2:0b:d3:5f:95:30:ab:ff:b0:6f:7a:e8:23:cb:23:
52:ac:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:52 2026 by rpki-client