Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
File: vXIUPbev9hPoLqKQtMnCv_qIvCY.cer (raw, json)
Hash identifier: PriezvwEIoOi9WZFyahZNYc+cvBrZBQqRV+S0Y0IFmY=
Subject key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A27B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Mar 2026 04:40:13 +0000
Certificate not after: Sat 01 May 2038 00:00:00 +0000
Subordinate resources: AS: 45163
AS: 55471
AS: 131211
IP: 203.176.189.0/24
IP: 2001:df0:90::/48
IP: 2401:4600::/32
IP: 2401:e640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172667 (0x2a27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 5 04:40:13 2026 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:12:3a:55:b6:3c:73:88:71:9a:4e:28:5f:ea:
b0:15:a9:6f:b3:75:0c:b0:f9:ad:a3:11:ae:86:71:
3d:9d:9d:85:a7:38:2b:bc:57:30:3d:92:10:65:61:
6b:d6:e3:7c:c6:10:48:5e:3d:7d:a3:3f:3f:8e:86:
e5:8e:10:70:07:e5:0e:e0:e2:15:02:eb:ef:47:1c:
d5:01:53:1d:df:f9:fa:0f:33:f2:dd:73:09:5b:18:
b6:4c:88:d5:26:7e:da:8d:0d:53:24:28:dc:df:f8:
43:fb:7e:90:54:58:f6:1d:4a:dc:05:3a:ff:bc:11:
32:87:81:6c:89:5c:59:c8:57:c3:df:4c:52:a7:1b:
f5:38:ab:5a:4b:02:5b:86:11:bf:60:2e:40:68:80:
da:87:67:5f:e8:96:c9:1b:0f:27:3e:6a:bf:a2:8f:
25:9e:b5:4a:8a:b7:67:60:4b:a6:8d:92:6a:b6:6f:
ca:18:dd:d8:4d:eb:ed:be:35:21:3f:8a:e2:0e:e2:
3a:6d:6c:15:97:8e:bd:86:12:9e:7b:2b:4d:bf:c8:
16:8b:67:88:f5:ef:7f:e7:47:03:ce:31:84:9c:2a:
78:58:c3:01:41:79:c1:eb:89:a3:00:16:6b:1a:f8:
a0:02:f8:84:c5:5c:ce:82:5b:a6:a4:fe:49:32:dc:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45163
55471
131211
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
IPv6:
2001:df0:90::/48
2401:4600::/32
2401:e640::/32
Signature Algorithm: sha256WithRSAEncryption
c0:3a:1f:a6:30:7c:26:b9:44:b8:19:de:bf:6e:96:56:9e:79:
ec:04:99:32:de:4d:c3:5b:15:77:ad:20:d8:97:b7:6d:d1:a2:
b2:c2:a2:cd:2b:64:ad:a7:aa:8f:ba:52:d5:48:b3:c1:a5:89:
e9:6e:b8:51:43:3a:16:51:0f:22:d3:e4:99:a5:88:f8:f2:6a:
f1:bb:e9:a1:5b:3c:90:b2:21:dd:ee:ab:22:87:fc:f9:cf:c0:
1a:eb:17:70:1c:8f:b5:a1:55:85:71:b4:b1:96:da:eb:76:c8:
99:60:10:51:de:c8:06:79:b4:43:97:cc:9f:b7:6c:67:61:cf:
8d:1b:b0:6e:b4:7a:4d:2f:0f:b7:43:4f:71:6a:31:cf:3d:4a:
14:ba:80:6c:51:0f:ca:74:43:0b:dd:22:cc:6d:c0:0d:62:23:
89:55:3a:b3:97:df:87:ee:79:83:3c:cc:14:d3:79:38:9b:a5:
23:dd:29:b0:f5:64:1a:fe:0b:be:c2:55:89:94:9a:d4:f2:97:
17:68:3a:cd:37:bc:30:a4:1b:46:83:b2:d4:38:42:35:d1:d3:
d4:ca:84:3c:13:cb:ce:52:e7:0e:c9:f0:b9:1c:6d:e0:aa:d2:
2c:c1:6c:63:3d:1d:f9:88:1d:fc:99:97:dc:b7:b8:c1:38:e4:
71:5f:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:58 2026 by rpki-client