Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer
File: 5xwH8WXnzqxZZwZkFuelJyaY7w4.cer (raw, json)
Hash identifier: X4d6sEbwzOBxqNfoM/icOIktr59yR1iE0qCxHP+dQWo=
Subject key identifier: E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F14
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:09:32 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 154462
IP: 2402:4320::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171796 (0x29f14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:09:32 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9193C07, serialNumber=E71C07F165E7CEAC5967066416E7A5272698EF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:b0:80:70:03:b2:14:62:e2:75:35:30:d4:
8c:3d:c2:2e:45:87:d2:44:91:67:bb:64:7c:20:e7:
4b:cd:b9:54:e2:f6:ac:0d:4c:5d:9c:f4:64:94:4b:
75:5f:f0:07:12:83:fb:b5:19:a3:14:4b:0a:8c:17:
3c:1e:ee:4f:46:5d:09:5d:14:e3:05:e7:9b:2b:fe:
67:3e:00:45:a5:23:34:80:84:b9:01:2a:ad:cf:94:
52:ff:e8:87:cc:39:99:3c:2e:c8:64:e9:51:8c:6a:
b6:e9:42:72:e1:fd:8b:f9:69:3a:31:c3:26:83:df:
47:0a:9b:01:d5:eb:90:be:b6:ac:ce:15:d6:b3:2e:
48:a3:6d:5d:16:c3:24:c2:c2:74:25:a7:7b:4a:70:
3b:1b:0d:43:74:e1:31:52:b5:15:66:5a:0a:aa:33:
a9:eb:85:34:8f:c4:39:3c:41:33:9e:d8:8d:1c:5c:
ef:47:0e:87:96:ac:2b:3c:7f:c0:8a:b2:93:24:fd:
ca:bb:a8:f8:5a:28:05:44:c5:ba:44:99:1a:23:51:
2f:4c:02:6f:82:c1:76:25:94:9d:b3:dc:db:4d:4f:
90:fc:09:5b:80:c0:71:02:2a:a0:fa:93:a2:37:2a:
9b:aa:f6:90:99:90:b5:6a:d2:31:a2:43:53:5a:a2:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154462
sbgp-ipAddrBlock: critical
IPv6:
2402:4320::/32
Signature Algorithm: sha256WithRSAEncryption
1f:2b:62:47:30:7b:56:77:2c:73:73:f2:00:37:58:a8:2a:09:
c1:a0:a2:66:e9:45:69:f4:97:aa:df:96:7a:f1:87:09:a3:a3:
f8:01:1a:0b:56:5e:a6:5a:74:73:58:20:89:ff:bf:c9:cd:14:
38:52:ca:aa:39:1f:3c:58:bc:4c:b4:99:5d:4e:c2:1b:1a:ba:
f2:70:bd:10:0a:da:02:ba:24:5e:fb:50:8c:be:4c:c2:6e:2e:
10:96:9b:2d:93:09:37:f4:17:f5:ba:14:dd:f1:e8:d6:c4:17:
c2:af:7f:5a:8b:57:61:61:d1:23:d6:ee:7d:d9:8d:f2:6d:10:
92:42:07:60:fe:0b:ff:ca:0b:ca:95:f6:60:a9:5b:e7:42:ce:
32:2d:20:98:6b:11:00:40:de:0c:9f:ee:a9:98:fc:23:f1:44:
41:84:1f:a5:cc:68:34:a1:8d:9a:38:c2:cc:3e:24:e9:f2:17:
f1:c5:de:1d:8d:87:ca:04:af:02:b6:ce:fe:72:e5:7a:2f:0b:
d2:b9:75:bd:af:6c:13:ae:dc:b6:a7:41:81:6d:c2:63:c7:fe:
26:17:e8:ec:ff:fb:63:4a:10:01:fc:c9:19:e6:a9:1d:35:b3:
51:ca:c5:02:e4:76:61:81:78:a1:83:7e:84:3a:27:f1:6a:21:
13:a9:63:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:46 2026 by rpki-client