Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
File: 8XD1e07KEpakIh1wemTkKYk7h9Q.cer (raw, json)
Hash identifier: rw2zBIL17nV5wK/0MOuyEQzGJZx77AxPXYo9rhK7wBU=
Subject key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F9E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:11:50 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 152117
IP: 36.50.2.0/24
IP: 2401:5260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171934 (0x29f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:11:50 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:0c:4a:3d:df:f7:a7:84:82:83:5d:3e:c8:
11:83:31:ed:1d:88:76:c0:a6:2b:ce:dd:af:c9:8d:
eb:8f:59:d3:9d:52:c6:4b:cd:13:f8:8e:fc:d8:e3:
65:3d:5f:ac:8c:7c:29:ba:08:49:19:2a:af:5f:ee:
1f:a7:61:af:8d:d6:4b:23:67:78:e5:94:de:d6:be:
3d:86:2b:f1:42:4f:44:34:cb:83:eb:a9:d7:96:67:
fe:ac:ea:65:5e:d1:74:64:51:dd:66:90:33:0a:61:
78:f4:60:fe:9e:87:b5:68:89:97:fd:10:4a:b7:33:
aa:27:4c:a4:00:e2:8c:22:6f:2f:f4:90:e9:da:59:
75:fa:5a:94:6c:d1:bf:60:04:c7:0b:ef:e7:79:6d:
16:d8:41:bf:cf:21:4e:50:2a:96:e4:6f:48:1f:8f:
4b:1d:86:ea:bc:53:c1:c3:ed:e0:d8:e0:b8:c7:9a:
eb:2a:dd:79:5b:9a:35:f7:ae:ac:c5:c9:15:9f:8e:
52:63:82:b8:48:13:a1:ae:d7:73:9f:d4:4d:c8:69:
97:12:eb:d4:5e:c1:36:ea:32:e4:59:9d:e3:89:ea:
c7:db:0a:17:3f:71:4e:af:60:25:4f:01:5d:bd:9b:
cf:f8:9d:df:bf:1f:6f:dd:62:f3:5b:7b:d9:c8:8f:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152117
sbgp-ipAddrBlock: critical
IPv4:
36.50.2.0/24
IPv6:
2401:5260::/32
Signature Algorithm: sha256WithRSAEncryption
4e:e4:32:29:26:04:ac:0a:5d:cb:a1:df:52:44:60:75:98:20:
e4:94:14:fd:3c:c8:2b:be:d5:79:39:ba:25:5f:80:f7:3f:b6:
02:4f:70:9c:6d:35:89:ab:1c:88:75:e7:d3:db:c6:f5:a6:f4:
96:86:64:b8:87:7d:2e:b3:72:51:d9:a6:75:b5:e2:30:9c:48:
58:8b:23:b9:17:7e:92:04:e3:c5:81:55:05:eb:1d:86:b0:5c:
ad:a7:62:a5:2a:03:27:f5:a4:8d:4f:25:90:6c:05:52:e9:5c:
a3:3d:0d:56:2a:5f:ea:8b:fe:05:db:7b:3b:d3:ab:7d:8b:00:
62:08:98:82:97:fb:6b:c2:19:1e:8c:3f:00:38:96:cb:79:cf:
69:ff:e5:70:b0:18:2d:5c:78:94:db:97:26:af:0c:9b:20:3b:
7b:2c:d2:d8:e2:d4:76:cc:44:96:d4:f7:f5:f9:97:76:30:97:
da:fa:b6:05:3b:bc:da:d2:84:cf:45:94:18:84:8c:2b:a7:0f:
1b:56:b3:c4:12:79:83:80:d5:6d:e4:7b:80:24:25:3d:ad:b7:
54:e5:b7:85:d0:f6:68:4c:2f:81:3e:ca:e5:34:01:3d:5d:ce:
77:62:33:17:35:bd:e6:60:68:f8:57:23:9d:6a:c2:46:81:fd:
6c:af:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:01 2026 by rpki-client