Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer
File: hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer (raw, json)
Hash identifier: pZzEHMBzo/085Ne11i5x/Gr4v+VAqeltkY5u3ErTyWA=
Subject key identifier: 85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C4E4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Jul 2026 05:55:37 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 153643
IP: 163.223.184.0/24
IP: 203.14.160.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181476 (0x2c4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 14 05:55:37 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91BF578, serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:a8:b0:57:6b:6f:49:98:08:11:a7:fc:eb:
70:c7:22:63:91:0d:4c:e6:0e:3e:a6:34:2e:86:9f:
dd:fe:1c:d6:ef:12:85:4f:29:ef:12:41:7e:5a:28:
96:8d:85:da:d7:9e:88:c2:a8:b4:ce:c3:27:87:da:
59:87:5f:5a:53:35:30:23:06:78:83:c8:0d:7c:c0:
99:06:f8:f0:8f:98:9d:6a:91:bc:4f:78:e2:ea:11:
8a:05:04:6e:70:57:fe:52:e3:de:68:c8:a5:ca:71:
bb:e6:8b:22:14:46:8d:ff:ee:56:da:08:36:04:fa:
ff:7d:3c:16:b2:17:b1:59:3e:df:89:f1:29:64:5e:
b8:af:d8:24:95:81:25:3b:d1:77:bb:b0:8b:13:89:
61:21:e1:df:0b:36:d2:a0:a1:e6:fa:a5:6a:c4:61:
99:b8:c8:65:16:0f:73:f2:6b:24:d9:ac:03:f8:49:
fb:6b:0b:03:1a:b7:4e:27:fa:8d:ab:8d:e0:76:4d:
e7:b4:b7:d9:53:9d:70:d2:99:ae:77:39:b8:75:d2:
c2:3c:27:7d:85:60:b6:d8:72:43:5a:4e:34:3c:a6:
8d:c5:50:00:5c:c9:af:06:21:0e:84:0a:da:cc:ce:
78:83:eb:13:2d:bd:02:d2:37:d0:d6:c1:89:5d:08:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153643
sbgp-ipAddrBlock: critical
IPv4:
163.223.184.0/24
203.14.160.0/23
Signature Algorithm: sha256WithRSAEncryption
46:49:b0:cd:80:8c:64:b9:43:dc:c4:e6:e5:72:26:65:d7:44:
16:66:f1:ce:20:94:82:87:b5:de:83:d1:5b:2c:c8:2c:a3:57:
b9:29:b1:b7:4d:44:3c:30:47:7f:be:95:e9:ca:c9:ba:5e:9d:
3f:9f:02:5c:03:a4:0c:65:71:ad:d5:de:7a:b0:b3:a0:76:fb:
62:5d:c7:65:96:68:23:7f:80:d0:15:0d:11:7e:dd:ff:33:70:
ac:da:80:06:06:0b:33:46:3b:cc:77:4d:ec:61:e6:23:e4:8f:
d5:ab:b9:3c:c8:f7:92:57:f8:e5:79:c5:0a:18:b4:21:14:91:
d4:96:f5:dd:f3:55:91:48:a6:66:a5:66:c1:26:54:fc:ee:3b:
c7:73:da:aa:dc:d0:70:8b:69:be:c8:0d:bb:db:85:e4:f4:0f:
56:4e:c5:0f:20:bf:95:9f:b1:ed:82:68:28:61:1c:38:3b:b3:
6f:28:32:0b:8f:11:6b:0b:3f:b3:e7:98:4a:13:e3:ec:bd:81:
4e:24:ef:b8:77:c5:51:2f:26:c6:d0:04:da:47:59:e4:d1:7b:
dc:43:b2:75:c2:04:eb:fc:44:85:4c:c2:e6:ee:cc:78:ce:8e:
d8:39:e4:ac:30:ce:70:4d:f2:cd:e1:0b:b2:ae:ed:ab:a7:02:
0b:1a:e8:b5
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAsTkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcxNDA1NTUzN1oXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkY1NzgxMTAvBgNVBAUTKDg1M0VDQjRGNzdDQzIxNDFEQkE4REQx
OEMxMjEzNUM5RDc3MEZFRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDX1qiwV2tvSZgIEaf863DHImORDUzmDj6mNC6Gn93+HNbvEoVPKe8SQX5aKJaN
hdrXnojCqLTOwyeH2lmHX1pTNTAjBniDyA18wJkG+PCPmJ1qkbxPeOLqEYoFBG5w
V/5S495oyKXKcbvmiyIURo3/7lbaCDYE+v99PBayF7FZPt+J8SlkXriv2CSVgSU7
0Xe7sIsTiWEh4d8LNtKgoeb6pWrEYZm4yGUWD3PyayTZrAP4SftrCwMat04n+o2r
jeB2Tee0t9lTnXDSma53Obh10sI8J32FYLbYckNaTjQ8po3FUABcya8GIQ6ECtrM
zniD6xMtvQLSN9DWwYldCO+1AgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUhT7LT3fM
IUHbqN0YwSE1yddw/uQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJGNTc4L0EwM0JBMjU4N0Y0ODExRjFBM0VBMEU4MTk1QTMwRkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCRjU3OC9BMDNCQTI1ODdGNDgxMUYxQTNFQTBFODE5NUEzMEZCQy9oVDdMVDNm
TUlVSGJxTjBZd1NFMXlkZHdfdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlgrMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAo9+4AwQByw6g
MA0GCSqGSIb3DQEBCwUAA4IBAQBGSbDNgIxkuUPcxOblciZl10QWZvHOIJSCh7Xe
g9FbLMgso1e5KbG3TUQ8MEd/vpXpysm6Xp0/nwJcA6QMZXGt1d56sLOgdvtiXcdl
lmgjf4DQFQ0Rft3/M3Cs2oAGBgszRjvMd03sYeYj5I/Vq7k8yPeSV/jlecUKGLQh
FJHUlvXd81WRSKZmpWbBJlT87jvHc9qq3NBwi2m+yA2724Xk9A9WTsUPIL+Vn7Ht
gmgoYRw4O7NvKDILjxFrCz+z55hKE+PsvYFOJO+4d8VRLybG0ATaR1nk0XvcQ7J1
wgTr/ESFTMLm7sx4zo7YOeSsMM5wTfLN4Quyru2rpwILGui1
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:11 2026 by rpki-client