
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.cer (raw, json)
Hash identifier: 4wZDuT6RwUqoyA+NyPEtGQuZLnwErvKsP6JzLqNICnc=
Subject key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ABE6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Apr 2026 14:55:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 153681
IP: 163.223.60.0/23
IP: 2001:df5:3440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175078 (0x2abe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 14:55:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:ec:b4:6b:ce:2d:38:6c:24:64:ff:db:35:
78:b8:99:d7:bb:0d:48:6e:88:47:b4:04:e6:e0:38:
ac:91:0b:92:70:49:9e:7c:04:12:23:40:8e:5f:22:
5b:27:4c:fb:f6:5d:5d:39:81:99:7a:f7:3c:a7:fe:
04:09:cd:c8:cf:77:ef:48:7a:b6:64:04:3c:b9:0b:
24:c8:f0:fe:37:b3:2c:ee:58:e3:01:2d:08:3e:de:
7a:e6:96:3a:ea:7a:93:ac:0d:6d:53:60:ef:8b:55:
a8:6e:ee:ae:9c:71:4a:87:b5:34:42:25:e0:75:57:
4e:ce:2d:4e:d0:0c:6c:28:e0:80:61:4b:1f:49:63:
96:ea:56:72:16:db:06:f1:cb:7e:e7:cb:94:d2:7b:
da:41:27:13:53:df:f7:64:91:fe:0a:14:c2:1f:7f:
a7:11:b4:37:53:1b:6d:16:24:aa:11:1f:b1:99:c9:
f0:d5:c7:35:de:4d:5c:bb:c2:b2:0e:fa:0c:d8:91:
4b:02:3d:ca:86:fb:88:9a:48:86:d1:52:51:61:dc:
0a:fa:e4:46:54:b2:97:bc:09:d8:bc:13:42:3d:3f:
f9:76:5f:fa:70:be:c8:e1:e8:15:06:a5:c8:ed:37:
97:54:1f:79:7c:8d:8a:ac:92:86:e8:0e:aa:c1:13:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153681
sbgp-ipAddrBlock: critical
IPv4:
163.223.60.0/23
IPv6:
2001:df5:3440::/48
Signature Algorithm: sha256WithRSAEncryption
38:5b:72:ba:a9:ad:fb:02:0a:73:ca:07:9f:1e:8b:82:d3:42:
1c:3b:34:51:1c:21:f0:d7:fb:c0:61:0b:8e:43:23:2d:96:97:
2d:95:76:64:7b:bc:aa:4c:48:71:b7:45:b2:3c:4d:49:b3:ba:
36:5b:fc:7c:61:78:d1:b4:f0:9c:6d:08:34:5f:e4:82:73:b9:
ce:84:3c:4b:bd:06:f2:f5:16:33:c3:af:2a:d6:73:3b:76:c7:
e8:6d:4d:e9:5b:ee:83:09:f9:0b:e8:a7:87:a3:bb:82:c6:66:
64:3b:a4:13:f5:0a:cc:25:a4:e3:83:50:fc:4f:b3:42:37:4a:
eb:0f:54:02:bd:67:e3:fa:6d:8f:f4:d4:f8:b8:1d:06:94:8e:
8e:09:14:2f:fa:67:45:af:28:d7:4d:c4:5a:d6:e5:32:d0:0e:
2b:39:c6:db:e1:a5:85:41:ee:75:e5:26:7d:c0:8a:a3:2c:d0:
d1:53:0e:0f:1b:6c:70:66:7c:b6:9a:be:0b:7d:4b:02:42:5e:
39:bb:11:cd:11:e5:ab:c5:62:f6:70:55:6d:af:62:3d:ef:d8:
82:f4:69:75:3d:4b:21:7a:d8:ae:78:5b:24:0c:8e:fe:15:41:
6f:76:57:9d:ab:64:73:5f:aa:88:bf:72:2b:93:05:74:7e:42:
29:80:06:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:02 2026 by rpki-client