
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer
File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer (raw, json)
Hash identifier: /cUTQPLCQB8WS3UEGNX02BjQyKTYI3auDCPN7okjIrM=
Subject key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B9D4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jun 2026 13:57:28 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 142253
IP: 2402:6160::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178644 (0x2b9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 13:57:28 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:2a:34:84:a3:c6:a3:69:56:b1:c3:a5:e3:
1c:ab:fb:84:93:42:23:71:8c:8b:0b:91:44:85:ba:
1d:53:42:b7:36:32:86:db:cf:61:ed:99:12:b1:cd:
93:47:b3:3e:f7:4b:f0:a9:bf:72:10:24:40:61:23:
ec:63:13:24:17:98:65:ce:2c:3b:4b:66:87:89:b3:
d8:9b:99:f0:a5:79:28:33:93:55:cc:73:da:88:90:
58:8c:f3:26:2f:b9:95:19:b6:fd:75:7c:07:49:78:
74:57:9c:fb:d4:22:91:6e:4f:d4:60:36:81:17:ca:
d9:f7:10:67:d2:1f:81:86:c0:50:93:d4:44:6e:c1:
5c:cf:44:f7:78:b5:e9:2e:59:37:8c:25:75:62:67:
d9:0f:5e:32:86:27:56:57:e8:ff:62:f2:ae:04:18:
6f:37:aa:fd:44:b6:db:ef:c3:b1:9e:5f:2e:19:b0:
7d:26:61:ce:ce:cb:25:04:d4:03:f1:ef:4c:b4:0a:
1e:29:5e:90:cb:ab:fd:31:5e:01:12:1b:a7:3c:b6:
9d:38:bd:a9:97:06:ca:ab:8a:47:11:71:6a:4d:e1:
aa:7b:6b:f9:6a:f8:71:c1:06:c9:c2:c2:64:a2:2c:
8a:ec:f1:15:34:f7:29:50:1a:9a:60:e8:65:c2:39:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142253
sbgp-ipAddrBlock: critical
IPv6:
2402:6160::/32
Signature Algorithm: sha256WithRSAEncryption
62:58:6b:42:ca:ea:4b:92:c7:e6:75:49:f0:e6:9a:f9:e1:6f:
3e:17:d4:78:4b:e3:76:4a:17:24:41:2d:f9:e5:81:7e:2a:92:
1b:d7:c1:90:02:d0:69:18:53:f9:8d:f9:45:ee:49:06:78:8a:
7b:d7:af:ab:f9:55:5e:e1:b3:30:af:6d:89:39:f9:6a:69:4f:
b6:14:39:8f:86:3f:b9:aa:b3:21:1c:05:1f:85:0a:c5:e2:e8:
39:c2:da:50:bf:a4:f3:51:36:c5:cc:0c:3a:74:3e:c7:24:21:
ac:db:7e:2e:b0:53:f2:cb:56:3d:94:0b:b9:ba:6e:36:e2:ff:
21:81:6e:1c:5d:ef:06:3c:81:9a:a5:6d:be:9f:2b:bb:6c:87:
f3:c1:3b:99:4a:5a:8c:7a:97:b9:fe:f1:71:93:27:5a:e4:3f:
a3:48:21:9a:cf:0a:e8:2a:c4:8a:7f:56:38:ad:eb:55:57:0f:
35:73:ad:1f:af:13:a3:6d:ec:b3:31:fb:b7:e3:b2:c4:9e:55:
65:8d:fd:c4:f1:89:1f:00:27:32:52:b8:d9:3f:92:82:03:9f:
0d:cd:1e:1d:26:c0:f3:a5:02:b4:62:e3:41:29:46:5d:bf:e7:
4d:da:63:7b:61:47:36:66:ce:f6:79:d4:8f:75:d2:f1:3f:e3:
c1:68:95:72
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDArnUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYwMjEzNTcyOFoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0ZCQ0IxMTAvBgNVBAUTKEYyMTcwNjMwQTAxNEY4MjE4RkYzMDc1
NjQ5RjQxMjQyMDAzRDQ0NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCNQio0hKPGo2lWscOl4xyr+4STQiNxjIsLkUSFuh1TQrc2Mobbz2HtmRKxzZNH
sz73S/Cpv3IQJEBhI+xjEyQXmGXOLDtLZoeJs9ibmfCleSgzk1XMc9qIkFiM8yYv
uZUZtv11fAdJeHRXnPvUIpFuT9RgNoEXytn3EGfSH4GGwFCT1ERuwVzPRPd4teku
WTeMJXViZ9kPXjKGJ1ZX6P9i8q4EGG83qv1Ettvvw7GeXy4ZsH0mYc7OyyUE1APx
70y0Ch4pXpDLq/0xXgESG6c8tp04vamXBsqrikcRcWpN4ap7a/lq+HHBBsnCwmSi
LIrs8RU09ylQGppg6GXCOczHAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU8hcGMKAU
+CGP8wdWSfQSQgA9RG8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNGQkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDRkJDQi9CMkRGRjY1NkZEQkMxMUYwQjkzQTVGNzE2NzZGNTZCQy84aGNHTUtB
VS1DR1A4d2RXU2ZRU1FnQTlSRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiutMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJhYDANBgkq
hkiG9w0BAQsFAAOCAQEAYlhrQsrqS5LH5nVJ8Oaa+eFvPhfUeEvjdkoXJEEt+eWB
fiqSG9fBkALQaRhT+Y35Re5JBniKe9evq/lVXuGzMK9tiTn5amlPthQ5j4Y/uaqz
IRwFH4UKxeLoOcLaUL+k81E2xcwMOnQ+xyQhrNt+LrBT8stWPZQLubpuNuL/IYFu
HF3vBjyBmqVtvp8ru2yH88E7mUpajHqXuf7xcZMnWuQ/o0ghms8K6CrEin9WOK3r
VVcPNXOtH68To23sszH7t+OyxJ5VZY39xPGJHwAnMlK42T+SggOfDc0eHSbA86UC
tGLjQSlGXb/nTdpje2FHNmbO9nnUj3XS8T/jwWiVcg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:16 2026 by rpki-client