Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer (raw, json)
Hash identifier: bDdBmUD1QbPI279cfpLvxEG9rF4terClK8RXERXtYko=
Subject key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A5F4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Mar 2026 04:03:53 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 9542
IP: 2001:df3:f80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173556 (0x2a5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 24 04:03:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1f:c9:5e:1d:33:dc:a0:22:8f:02:fb:a8:4b:
a2:1c:85:ce:91:4d:a2:2f:e7:76:9b:aa:bf:b5:71:
65:58:52:99:9e:28:aa:8d:4a:56:d6:ab:c9:cd:b2:
c4:e2:0e:2d:83:c8:b2:4d:19:05:da:5f:fe:1c:9a:
4c:89:b5:e4:20:db:3a:83:f1:aa:67:f7:a9:b2:b3:
01:72:1a:74:45:a0:ae:89:e5:79:e5:3e:56:c1:c8:
4a:ac:7e:f8:91:7f:ef:a9:e0:26:02:e1:c9:34:a0:
d3:98:81:c4:35:3d:8f:f2:2c:87:30:2c:3d:d1:8a:
35:d7:68:8d:94:cb:e5:b8:06:76:13:c3:55:11:30:
71:89:d4:fc:9b:63:35:03:19:d2:d1:7a:18:3d:58:
4e:d6:39:03:b1:95:64:cc:7b:da:30:1a:e2:fe:fc:
95:19:97:de:89:51:ed:57:10:2b:ea:97:3b:6f:98:
8b:bd:8b:21:c3:79:88:27:24:56:2e:48:44:de:cb:
67:48:ad:85:2b:5c:08:3f:1f:c1:21:d8:5b:5c:0c:
fa:ff:fb:eb:fa:5a:8e:a2:89:26:92:b2:43:19:9d:
bc:46:16:99:8e:10:66:6c:02:d5:2b:61:0a:75:8a:
40:21:23:f4:37:0a:ed:fb:c4:7c:85:e0:ca:cb:15:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9542
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:f80::/48
Signature Algorithm: sha256WithRSAEncryption
95:04:14:05:bd:53:5a:e7:0e:e3:3e:92:0d:2f:5c:0b:c2:d1:
65:2e:1b:c9:86:0a:98:d8:c7:fd:5e:5c:cc:e2:28:a8:c4:fd:
11:c9:92:24:81:8a:fd:e1:2b:a6:3d:c2:f3:87:fe:87:af:f6:
1c:9b:c6:e1:cd:50:3b:45:d1:52:55:9e:07:58:e0:6e:e3:39:
09:f6:90:a8:e8:1a:44:e6:94:92:1d:48:ca:df:db:98:af:ba:
24:93:07:66:16:22:79:3c:5f:36:32:2e:4c:bb:50:c8:93:da:
ed:54:69:d8:cb:cc:16:24:aa:ea:e3:ee:46:5e:e9:1b:7b:8b:
98:08:53:b6:c6:5a:9a:bf:62:c2:ea:5c:a1:6d:30:60:31:0b:
be:ef:cd:c0:7d:0e:cd:3a:5b:d0:d1:37:02:1a:9d:09:bd:47:
e5:75:06:d8:7d:89:17:9c:6e:54:af:70:34:8d:b5:d0:4e:c0:
82:d2:f2:ae:7f:eb:62:3d:70:9f:a1:61:c8:4c:5e:6d:4e:15:
71:fa:bf:49:f8:80:dd:12:35:bd:36:74:54:44:b4:f5:ce:54:
e4:d6:71:9b:73:c5:5b:af:5b:7c:53:56:77:06:0c:c2:4a:a2:
7c:ad:d2:52:6e:0d:80:67:50:06:fe:3c:ed:9a:27:bb:2f:10:
38:70:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:31 2026 by rpki-client