Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1_lr3Mwp1jWCCAjQb7MO1RklDTQ.cer
File: 1_lr3Mwp1jWCCAjQb7MO1RklDTQ.cer (raw, json)
Hash identifier: 4RHD0t3d5E+gGZx1bo34EkB3z0QhMhJpE36YIR7KY9o=
Subject key identifier: D7:F9:6B:DC:CC:29:D6:35:82:08:08:D0:6F:B3:0E:D5:19:25:0D:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DDF8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA508/6889BE4CC79811F18B890F974311F970/1_lr3Mwp1jWCCAjQb7MO1RklDTQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA508/6889BE4CC79811F18B890F974311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Oct 2026 06:28:06 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: AS: 154999
IP: 160.202.188.0/23
IP: 2001:df7:b2c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 14:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187896 (0x2ddf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 14 06:28:06 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A91AA508, serialNumber=D7F96BDCCC29D635820808D06FB30ED519250D34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:1b:61:02:ba:6e:d0:17:c3:be:01:e5:57:
3a:51:40:39:2e:41:2e:10:74:79:c1:0e:b3:30:c5:
61:5a:55:27:84:8b:e8:68:70:cb:3a:bb:b5:6f:eb:
80:26:95:e2:57:20:08:8a:d4:c1:63:1e:44:42:0e:
2c:20:98:9e:44:e4:36:98:23:50:d5:d9:92:4c:1c:
cb:b1:eb:21:a7:53:c0:04:f7:3b:b9:e6:7b:cb:90:
7f:72:cb:04:c7:7a:80:d0:2d:b1:fe:74:04:4a:08:
58:49:e5:56:1d:b6:53:17:5e:e2:46:b7:cd:08:d8:
fe:a7:42:9f:54:cd:af:13:e0:d7:fb:21:5c:81:1e:
b1:17:33:ed:a4:07:64:cb:11:bb:fc:58:6d:3f:b3:
a7:4f:b0:31:a5:b9:98:25:3f:f3:ba:b7:29:f9:2c:
65:55:93:f5:b6:77:41:fb:dd:97:d6:83:88:64:01:
24:fe:d8:4c:95:5e:dc:0d:e6:07:72:c8:74:44:88:
9a:d6:04:ab:d8:92:92:34:8e:c9:40:a4:2b:19:4b:
9e:24:02:4b:5b:64:e6:51:f3:0b:cb:dc:ab:cb:a7:
b1:e2:ae:30:9e:c8:d8:ac:1b:d3:14:b3:6e:d9:a4:
a6:58:ab:f9:d6:8e:57:e6:52:77:b0:9a:37:f9:f5:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:6B:DC:CC:29:D6:35:82:08:08:D0:6F:B3:0E:D5:19:25:0D:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA508/6889BE4CC79811F18B890F974311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA508/6889BE4CC79811F18B890F974311F970/1_lr3Mwp1jWCCAjQb7MO1RklDTQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154999
sbgp-ipAddrBlock: critical
IPv4:
160.202.188.0/23
IPv6:
2001:df7:b2c0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:6d:db:56:c1:7a:41:74:31:d6:9d:3f:c8:40:b8:67:a1:4b:
e6:b1:f3:27:af:ab:87:0f:c9:6e:67:33:e8:77:67:9f:8a:00:
2a:f9:77:fc:d0:7d:75:59:11:88:39:26:4c:1c:0a:09:4d:0b:
96:51:eb:3e:11:c3:19:a4:8a:a0:fb:31:0a:9a:e0:d4:f3:ff:
87:99:1a:8f:71:51:a1:51:2f:fa:94:56:a0:a3:4a:4d:69:e6:
f3:f9:f3:76:7c:6a:50:aa:f6:10:24:fc:c5:e6:a6:a4:68:62:
fd:68:a1:3b:f0:9d:70:b5:79:04:18:db:35:59:5a:23:f7:59:
ff:2b:be:17:b8:b1:5b:76:04:e8:4b:26:30:26:e0:f8:bb:06:
1e:d4:4d:77:34:b1:e6:cb:4a:f6:9d:08:57:06:f6:0e:64:3a:
73:ad:e4:c5:23:44:b5:38:cc:b5:c3:06:28:ea:8b:7a:99:8e:
2a:6a:3a:7d:10:a4:98:a7:f0:7e:d3:99:08:c7:6e:51:25:a3:
2c:09:d8:6c:e7:32:ce:e0:0e:57:d6:96:6b:ff:db:13:20:bd:
1b:97:02:52:16:c5:91:0b:f6:ab:0e:d4:d2:ea:26:40:55:84:
8c:c1:1d:f5:69:ce:1e:55:14:9f:1b:c3:d3:fa:78:1c:09:bd:
25:8b:10:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:47:47 2026 by rpki-client