Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
File: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer (raw, json)
Hash identifier: sg0hRXpTmEXyAwQ0YOp+kF9xez7B0HeukjY/NMgj/Bg=
Subject key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0293A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:16:04 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 38578
IP: 203.153.4.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168865 (0x293a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:16:04 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:11:bf:d2:c8:80:39:2b:8f:6d:fd:02:a4:
23:c9:50:0e:49:b3:04:03:b5:da:06:fa:67:dd:8d:
8a:5b:91:ca:cd:b8:8a:6d:d3:db:6b:6b:a0:48:1c:
7c:eb:96:4a:aa:ee:8c:82:bc:1b:9f:a6:76:67:74:
92:68:07:c3:3b:e5:41:dd:14:bb:a5:03:2b:48:f9:
5e:e4:59:66:ec:16:53:3b:a9:89:a4:37:12:43:c0:
7d:4e:05:20:5f:77:2c:c3:6d:ec:18:83:a4:f2:76:
4f:f4:c7:69:6d:61:bc:ce:f2:00:13:8f:39:a6:6c:
af:c0:1f:4e:fc:4f:cf:65:51:cb:33:88:d9:8e:36:
a6:88:45:de:9e:b5:57:6c:60:8d:ab:79:90:f9:16:
7f:50:9c:99:c3:24:c3:34:87:25:5d:b0:fe:58:77:
35:d8:de:d9:12:39:17:e1:75:9e:0e:48:5d:f1:8d:
ae:22:80:03:90:6b:89:17:46:6e:a0:ae:13:08:a0:
07:1c:d1:a7:9e:57:c5:51:4f:06:c6:fb:fc:e1:6a:
fd:cf:0e:c4:b5:b6:00:3a:0a:f8:56:93:0d:6b:9f:
50:04:ec:a4:6b:a2:b3:95:5d:bc:e0:85:a9:cc:3d:
27:ea:ce:bc:ca:cc:08:5e:66:7c:53:1c:a2:b4:06:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38578
sbgp-ipAddrBlock: critical
IPv4:
203.153.4.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:fa:bb:be:e4:2c:3f:fe:5c:06:ae:0c:70:ba:12:44:d7:d8:
fa:37:1e:4e:61:ba:d0:64:26:d3:c5:71:8d:f0:df:cb:e5:18:
af:52:75:6a:1c:5d:fd:f1:a5:55:eb:3e:65:39:f6:8f:fa:a4:
d4:be:ce:bc:f9:dd:0c:fa:75:91:7c:cc:fb:87:6e:5d:9d:64:
e9:82:cd:bb:ac:45:6c:05:f3:38:6f:bd:0a:bb:de:9e:ab:2e:
f2:52:72:bc:e9:db:5c:91:a5:a7:2f:49:7f:ac:4f:f8:1f:c5:
7f:a8:f1:d7:62:d5:33:5c:d1:53:b4:a8:bf:01:44:d8:8e:9c:
1a:03:6b:93:12:93:13:fc:b8:88:33:c1:dc:b4:f9:ad:66:d8:
03:99:c9:e0:76:ff:4d:16:55:23:f1:ab:3f:e4:4a:a0:d1:63:
27:8b:c8:2d:29:97:f3:0d:d3:5a:69:1b:cb:66:44:13:ae:b6:
24:cf:71:ba:ec:cb:c1:6a:5e:25:60:83:9b:ba:84:ff:7b:6e:
cc:01:e1:b4:dd:e0:0b:d0:e5:c6:6b:44:07:a0:8a:a0:7d:89:
50:27:67:25:7a:f8:13:3d:bd:34:b0:30:11:97:4d:16:17:bb:
4c:19:95:31:99:26:4e:10:b7:5a:71:76:b2:60:bf:35:cd:d9:
fd:41:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:41 2026 by rpki-client