Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx4030HvGT5CWD7bdCuoUK9Vzj0.cer
File: lx4030HvGT5CWD7bdCuoUK9Vzj0.cer (raw, json)
Hash identifier: WvmdeJP7zXJPcGpXlQv0Pf8xLCIt8FEHpPL8OpAzSAw=
Subject key identifier: 97:1E:34:DF:41:EF:19:3E:42:58:3E:DB:74:2B:A8:50:AF:55:CE:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C70F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/lx4030HvGT5CWD7bdCuoUK9Vzj0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Jul 2026 16:01:38 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 153372
IP: 2401:ce60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182031 (0x2c70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 16:01:38 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A914C9DC, serialNumber=971E34DF41EF193E42583EDB742BA850AF55CE3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:8c:05:6c:e9:58:8f:07:88:fb:9e:8f:5f:
60:cf:88:31:c7:cb:70:0a:6b:e3:c7:78:f9:e2:87:
6d:eb:2b:f3:3e:d1:1a:f3:8b:3f:23:b8:bb:fe:46:
c6:2e:08:40:f6:b1:aa:99:a2:f0:80:3e:16:65:05:
33:00:3c:69:a1:d0:d1:b1:ab:c0:78:bb:96:31:73:
f7:3c:ba:d4:b8:b2:dd:e1:ab:a7:76:0b:d3:3a:db:
9b:4c:50:cb:06:13:66:be:9d:64:0b:3f:50:5c:0a:
e4:cb:04:5e:71:f8:19:a6:23:4c:03:14:f4:54:8b:
2d:0c:78:17:f2:86:09:98:d3:b3:68:1c:50:32:1d:
30:1f:c5:49:e0:0a:dd:8b:8f:25:74:60:b7:27:84:
71:7d:e2:44:0c:7c:b5:e6:fb:1c:a7:b2:e3:31:5d:
45:46:23:3a:c6:6a:5b:46:67:60:a6:9e:11:38:63:
3a:91:ea:62:13:20:d0:e3:83:65:17:e5:eb:64:8e:
d2:fb:ac:82:00:1f:41:73:d5:91:55:c8:13:0c:8f:
28:38:e2:e8:be:de:3d:c6:a3:03:42:7b:6f:a2:67:
55:9f:bc:2b:68:60:87:6b:e1:19:8f:df:c2:df:84:
01:26:d3:b5:33:17:ea:77:fc:8e:e1:92:86:4e:cb:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:34:DF:41:EF:19:3E:42:58:3E:DB:74:2B:A8:50:AF:55:CE:3D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/lx4030HvGT5CWD7bdCuoUK9Vzj0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153372
sbgp-ipAddrBlock: critical
IPv6:
2401:ce60::/32
Signature Algorithm: sha256WithRSAEncryption
88:8b:d0:8b:bf:66:5c:75:da:78:34:83:06:9d:47:5e:2a:9b:
2b:66:0e:ae:a8:45:6c:c0:3c:40:82:b3:2e:0c:18:ff:f0:3a:
87:6d:dd:a4:a9:71:13:aa:11:96:84:02:94:cd:c8:f6:6b:c1:
9a:36:76:a7:f5:44:01:7c:a1:c4:85:9b:a5:ff:c5:db:fc:04:
50:8f:1b:30:e8:0b:11:90:4f:46:40:2e:0a:ae:8f:ad:88:b9:
bf:20:10:24:61:f2:5d:09:ba:8b:0e:a9:47:b1:92:d0:dc:18:
5b:65:cf:8a:ab:15:b1:eb:70:77:ee:66:c8:8c:e5:b4:91:01:
45:9b:2c:80:7d:e9:7e:4b:87:89:b7:30:11:3d:03:39:15:ae:
a3:3a:20:e9:69:93:56:66:a8:1b:53:ae:6b:19:9d:51:b4:1a:
6c:a8:6c:a7:44:f3:ab:3c:17:05:36:0a:f7:5a:c3:8a:eb:f8:
c9:31:54:4a:84:81:c8:5a:12:85:c2:91:19:7e:64:20:47:97:
78:98:73:97:ca:c2:c9:e2:77:dd:66:3e:2f:ee:f3:f1:2b:12:
0f:11:ae:15:b2:27:4a:67:58:e2:5b:5f:00:52:ac:36:ee:e3:
ee:74:1c:d9:d6:d0:f3:1a:99:ec:a0:7e:1c:1b:cf:ca:23:99:
fd:c8:d8:91
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAscPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcyMzE2MDEzOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNEM5REMxMTAvBgNVBAUTKDk3MUUzNERGNDFFRjE5M0U0MjU4M0VE
Qjc0MkJBODUwQUY1NUNFM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChMIwFbOlYjweI+56PX2DPiDHHy3AKa+PHePnih23rK/M+0Rrziz8juLv+RsYu
CED2saqZovCAPhZlBTMAPGmh0NGxq8B4u5Yxc/c8utS4st3hq6d2C9M625tMUMsG
E2a+nWQLP1BcCuTLBF5x+BmmI0wDFPRUiy0MeBfyhgmY07NoHFAyHTAfxUngCt2L
jyV0YLcnhHF94kQMfLXm+xynsuMxXUVGIzrGaltGZ2CmnhE4YzqR6mITINDjg2UX
5etkjtL7rIIAH0Fz1ZFVyBMMjyg44ui+3j3GowNCe2+iZ1WfvCtoYIdr4RmP38Lf
hAEm07UzF+p3/I7hkoZOy7vDAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUlx4030Hv
GT5CWD7bdCuoUK9Vzj0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRDOURDL0M3Mjg1QUFBODZBRjExRjE5QjI3QzQyQjc0QTMwRkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0QzlEQy9DNzI4NUFBQTg2QUYxMUYxOUIyN0M0MkI3NEEzMEZCQy9seDQwMzBI
dkdUNUNXRDdiZEN1b1VLOVZ6ajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlccMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHOYDANBgkq
hkiG9w0BAQsFAAOCAQEAiIvQi79mXHXaeDSDBp1HXiqbK2YOrqhFbMA8QIKzLgwY
//A6h23dpKlxE6oRloQClM3I9mvBmjZ2p/VEAXyhxIWbpf/F2/wEUI8bMOgLEZBP
RkAuCq6PrYi5vyAQJGHyXQm6iw6pR7GS0NwYW2XPiqsVsetwd+5myIzltJEBRZss
gH3pfkuHibcwET0DORWuozog6WmTVmaoG1OuaxmdUbQabKhsp0TzqzwXBTYK91rD
iuv4yTFUSoSByFoShcKRGX5kIEeXeJhzl8rCyeJ33WY+L+7z8SsSDxGuFbInSmdY
4ltfAFKsNu7j7nQc2dbQ8xqZ7KB+HBvPyiOZ/cjYkQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:40 2026 by rpki-client