Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer (raw, json)
Hash identifier: Vyh9eMeEERe1u3HU09gA13Bl48RLpZr07a8mC6flWSQ=
Subject key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B2C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 May 2026 13:03:46 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 23731
IP: 203.175.120.0/22
IP: 2001:df0:e1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176833 (0x2b2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 13:03:46 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:43:bf:a3:a4:89:10:7d:85:a8:21:ec:52:
04:44:e7:41:d7:c3:d2:e8:95:d2:08:01:6b:25:e5:
e2:ae:d5:83:75:6a:cd:50:f4:2a:7e:0c:fd:4e:42:
05:47:13:72:6c:38:19:de:9e:1e:ae:e2:3b:87:00:
a4:ac:52:d1:cd:7d:2a:fa:eb:d2:d2:54:56:a4:70:
02:32:4d:b6:e1:fc:da:1e:e4:35:8a:60:61:9f:2a:
0d:e6:eb:4b:b3:93:6d:cb:38:fa:79:8a:8b:10:6b:
e2:f3:f5:5d:90:59:5b:74:2e:5e:de:3f:29:09:fd:
fe:00:5e:be:fc:f2:26:0d:48:d2:70:54:8a:3f:3a:
39:af:24:09:ea:94:cc:7e:c5:53:02:7a:bb:5f:8c:
03:35:19:d4:d8:9c:89:17:a7:5d:90:1f:5d:32:18:
fd:3a:35:2e:c7:df:6a:fa:b5:6f:0e:8a:7b:df:9c:
71:b1:a7:25:ce:5e:44:b2:aa:03:29:80:22:87:0c:
0e:95:af:27:00:68:e0:26:84:54:95:80:f3:3a:74:
3a:2a:bf:aa:e0:2d:28:78:c9:10:26:fe:b9:45:fa:
d0:b8:2d:01:8b:53:19:97:0d:4d:50:f1:d9:91:2b:
34:5f:3d:82:c7:c5:8a:22:86:95:fc:82:e0:f5:c9:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23731
sbgp-ipAddrBlock: critical
IPv4:
203.175.120.0/22
IPv6:
2001:df0:e1::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c2:cc:a4:ec:45:fa:ff:ba:7c:25:0d:9e:bc:a2:99:d9:b4:
36:dc:57:7a:39:1a:f3:31:98:9a:3a:29:b9:1b:90:0c:bf:3d:
f4:d8:49:dc:bc:51:09:68:9b:f7:a9:16:f4:21:71:5c:c9:9d:
5f:1c:86:62:82:a9:56:ae:a7:bf:47:ae:2c:90:b2:dc:b7:1d:
b8:3c:0c:ba:32:44:6e:ef:72:fd:28:be:6d:bd:7e:bd:7b:e7:
fa:df:96:b0:24:5b:1b:ef:c0:19:30:50:13:84:29:89:1b:8a:
79:df:41:af:92:70:d7:fd:53:c0:21:c6:77:fd:9d:4f:88:22:
d7:03:55:2c:19:ac:a3:d3:7d:bd:a0:b8:24:f0:b6:1a:68:46:
15:09:c8:55:02:a3:6e:44:c4:7c:ea:8f:29:e0:a4:67:af:93:
fc:c7:31:8a:0e:cb:96:06:df:9a:36:80:58:12:a7:95:db:4f:
32:6a:93:54:cd:da:73:eb:bf:07:7a:33:19:36:fa:53:08:e9:
9e:ae:d4:3f:40:c2:22:57:79:97:5b:eb:e3:08:da:99:9b:43:
c3:c0:ff:d5:b9:23:ce:a5:23:18:da:d6:10:83:00:99:22:93:
08:5c:b8:2f:4d:6c:c9:9e:13:fd:5b:42:b9:3f:b0:70:ea:23:
d4:02:0a:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:10 2026 by rpki-client