Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
File: mT30slnW8G6m6DO22jLrJ_SWtOk.cer (raw, json)
Hash identifier: ZIqHB6/6j/t2/x2dAnMwBA8uc8kYtfh86njktGpPupw=
Subject key identifier: 99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A524
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Mar 2026 00:51:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154549
IP: 163.128.56.0/23
IP: 2001:df6:d340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173348 (0x2a524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 19 00:51:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91D08D8, serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:da:a3:56:a2:77:a3:77:6a:0a:ea:ea:d4:
cc:78:e2:bd:7d:e8:49:30:29:36:1a:81:a2:75:44:
6f:ec:8d:42:9a:f1:43:43:db:53:dd:ce:63:73:e8:
7e:7a:54:32:27:6e:82:e9:38:75:08:d3:cc:b1:32:
82:72:ce:c5:e3:bf:bb:d2:1a:91:3a:cd:5c:5b:1f:
90:41:07:fa:4d:b9:2a:69:dd:8a:47:9b:3b:d6:73:
c2:71:8d:f2:af:6a:e7:32:54:44:2c:1a:af:5f:48:
a3:f5:0e:32:f1:5b:42:36:62:6e:30:ab:3c:8a:08:
d4:9d:70:55:34:ac:9c:3e:57:ae:80:b8:dc:3b:ae:
ae:53:d7:2b:f0:93:fc:1b:f4:27:ba:7c:4f:bf:de:
fb:68:de:8b:69:6c:a5:26:63:09:66:cb:df:2b:3e:
60:1a:41:75:47:5a:5b:b6:2d:59:c6:33:07:48:03:
aa:8c:31:92:c3:cc:65:ba:61:ed:91:4f:8b:cf:97:
0b:78:e1:c2:27:0a:b8:8f:84:6d:ee:ad:f7:5a:e5:
b1:35:bb:78:c9:3d:19:e1:47:64:20:c6:fa:00:4a:
46:06:fe:1e:9a:89:3b:0f:46:ad:9f:b3:8e:d7:11:
b4:67:b8:62:87:4d:74:dd:2c:64:03:d8:87:95:8b:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154549
sbgp-ipAddrBlock: critical
IPv4:
163.128.56.0/23
IPv6:
2001:df6:d340::/48
Signature Algorithm: sha256WithRSAEncryption
81:99:e9:18:0e:01:f3:c9:13:eb:38:58:61:65:b6:64:3e:a5:
ed:7d:ed:31:20:a3:31:a5:71:02:58:91:71:fd:c7:03:0d:48:
38:97:3b:80:5e:e2:71:9b:de:6e:7b:1a:6b:a7:06:0e:73:ac:
ef:90:da:08:97:75:95:98:df:3f:f7:d5:e6:d4:93:c1:b1:47:
9c:70:85:8c:93:57:e7:8d:cb:98:9f:23:b8:46:10:25:81:17:
c5:43:48:65:d5:fd:35:d8:8a:53:51:e0:4a:3d:f3:19:a7:1e:
46:fa:77:90:57:e2:08:2c:15:d7:b9:a5:f6:60:7f:81:6f:17:
a6:1f:89:9b:15:e4:e9:b3:19:f7:8a:84:f3:01:26:7b:a2:ae:
18:8c:96:c9:df:14:4c:d8:1e:55:4d:56:40:a6:01:96:a7:a7:
f6:cb:c9:52:bc:a8:05:35:81:aa:01:9b:ef:3b:6a:59:55:9b:
f9:8b:81:0f:43:ba:d6:55:71:b1:9b:e7:f8:2e:63:c8:73:81:
99:42:04:80:25:77:6f:71:80:6b:ed:4c:ef:9f:d4:58:91:49:
93:5b:68:49:61:51:1c:d3:97:f7:74:72:05:78:99:df:86:72:
e4:18:bb:8a:64:34:19:6b:02:49:6a:f7:8c:2e:aa:a4:5e:d9:
e0:c9:da:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:56 2026 by rpki-client