Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
File: oQCGP_euS0zjitmLfMw3suVvSQk.cer (raw, json)
Hash identifier: 3B8wOp80M1p0KHhWtIvZB3eISW0dSllvMs2dkp4l7/w=
Subject key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A3BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Mar 2026 09:20:22 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 132467
IP: 163.128.24.0/23
IP: 2001:df6:cd40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172986 (0x2a3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 11 09:20:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:91:e7:89:93:52:61:5b:73:4b:4b:ec:d0:03:
d5:be:fa:61:ea:8b:6e:f6:bc:bd:8f:45:d6:c4:6e:
28:be:f2:17:8f:a9:ad:7f:cb:0b:24:3f:10:7e:bd:
c3:9f:3e:d8:35:4c:e4:bb:4c:47:ea:6b:85:da:2f:
46:30:db:34:10:92:d9:bb:e3:48:1b:2d:bb:7e:01:
8f:ea:e9:60:ad:16:a3:e6:45:36:e6:d7:17:19:d2:
bf:6b:5b:5e:f9:2c:23:99:52:aa:46:e1:1c:bc:04:
88:79:46:7f:80:59:4b:8c:5d:92:0e:5b:e1:54:be:
46:db:2a:44:38:40:93:c0:63:18:c2:68:72:af:89:
07:a2:de:f7:0d:51:7a:70:ff:f3:26:b3:c0:7a:bf:
e4:c9:f0:54:de:d2:95:ce:51:28:3e:66:a8:aa:a8:
87:59:c3:92:11:2e:45:06:c4:b7:01:71:37:74:4e:
9b:7d:4a:2d:c5:7d:0a:0f:d4:4a:98:76:3c:98:a6:
b0:7d:27:42:f7:e3:d0:e0:cb:47:2c:5f:60:69:96:
27:44:18:95:24:3a:05:7d:36:ae:25:87:95:cf:63:
01:ec:cf:b1:c0:76:92:e3:2c:56:82:ca:f2:a5:9c:
f4:ec:ad:08:43:6e:39:98:19:b4:dc:e2:f4:4b:d0:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132467
sbgp-ipAddrBlock: critical
IPv4:
163.128.24.0/23
IPv6:
2001:df6:cd40::/48
Signature Algorithm: sha256WithRSAEncryption
b5:4c:cf:9f:46:91:67:f5:86:3e:6c:7a:b5:40:2a:9d:fc:fe:
96:72:c7:c2:84:dc:27:63:8c:03:68:bd:2a:d7:c7:a1:2a:92:
3c:c6:60:1a:d6:f9:e3:55:ed:0f:9e:3d:ec:67:cc:7b:cc:f1:
37:b6:99:82:b9:64:ac:80:ca:75:cc:7e:96:24:f7:f6:19:fa:
08:1f:7d:e6:c3:32:8e:db:a0:e0:e7:2b:50:a3:64:16:a8:0a:
4c:b7:fc:1c:f0:d1:85:65:d1:fd:51:8a:7b:a7:3e:29:b2:48:
5b:f1:ca:5c:5c:07:f7:fe:6f:f8:77:18:ab:62:02:1d:cb:e2:
22:10:a0:98:b6:c8:82:c3:e3:d0:4d:0b:42:e2:f5:36:fc:3e:
ed:09:d2:1b:84:41:84:35:5c:82:a9:89:91:89:e1:9b:84:79:
dd:9d:b8:3c:e3:44:38:a1:96:d0:bf:14:d8:7e:c5:10:8c:58:
a7:64:26:ab:c3:cc:6a:69:d7:02:5b:43:38:c4:58:b1:42:6e:
f6:af:30:cd:1f:e7:65:6f:d6:62:b9:10:6a:f1:ca:f0:01:6b:
c4:a0:f3:11:fb:fa:40:56:ea:80:f2:89:8a:4b:4e:7d:43:b3:
50:72:74:73:78:3c:8a:cc:61:16:53:f9:8c:63:84:e0:5e:de:
43:87:f3:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:35 2026 by rpki-client