Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer
File: A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer (raw, json)
Hash identifier: tnxNUTng4+n4FJutUOKHba2A+d09RXgTC7ed+CtfZPY=
Subject key identifier: 03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CED7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Aug 2026 04:25:26 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 9515
IP: 45.249.63.0/24
IP: 2402:6e60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184023 (0x2ced7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 21 04:25:26 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A911E3C6, serialNumber=03867130401AFB1283677BC07309EA94C708C76F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:eb:b5:b8:1d:0f:38:38:01:9a:35:21:e8:
8f:83:12:05:e2:b9:3f:68:8a:e2:f7:b6:0e:64:8d:
08:bb:98:2c:ed:54:4c:a7:83:5b:a6:ad:ec:b1:65:
4b:07:f8:39:a8:99:48:a7:36:d2:c6:86:81:5c:d5:
ad:de:a9:35:87:ab:0b:6b:13:6d:2b:09:23:5a:16:
c3:a0:8c:ba:d6:c7:fc:db:eb:19:4c:8d:6c:e4:4d:
d6:e3:f8:bb:c9:0d:a9:75:6f:61:12:4f:6b:42:6b:
ba:3d:e0:80:a5:78:d3:bc:56:37:ad:ab:e3:05:f0:
e1:53:12:c4:22:93:9f:b3:c4:34:3d:c7:f7:59:19:
9d:c4:06:57:0c:27:35:35:5d:22:c0:6c:6c:24:b5:
e2:88:41:89:64:a6:5b:e7:93:b0:55:48:bf:b8:e0:
e9:a0:ac:f6:17:c1:2c:66:c7:06:69:20:1e:f1:ab:
93:e8:34:be:2d:3e:a5:34:b5:45:ef:34:c6:50:25:
d8:12:0e:2e:ab:54:ba:79:6c:e0:c7:b3:62:08:b1:
15:da:fb:01:67:57:7b:a0:3b:22:f2:9d:19:39:d2:
16:d0:a6:d9:dd:1c:65:c9:95:ce:b6:49:f6:36:ff:
57:61:42:1e:3f:f2:76:aa:ca:97:98:4c:59:10:95:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9515
sbgp-ipAddrBlock: critical
IPv4:
45.249.63.0/24
IPv6:
2402:6e60::/32
Signature Algorithm: sha256WithRSAEncryption
80:60:06:ce:50:b0:bc:66:9e:01:df:d0:7b:76:c9:c6:53:17:
15:cf:78:f8:e2:07:01:6d:af:c7:cc:20:3a:5d:a8:a3:49:6a:
78:14:88:39:c4:71:11:a4:d5:72:f1:7d:59:ad:52:f0:e0:ee:
c6:42:25:ed:12:4c:87:fd:87:e5:88:bd:8f:c3:26:64:42:fa:
ed:30:1c:cc:ed:86:e7:b3:c6:80:a4:7c:46:21:e8:ca:af:fc:
a6:08:7c:7a:87:2b:b2:18:22:cb:d2:1b:5b:da:0f:4f:f0:a0:
ee:3b:5d:ec:f3:23:22:e2:0d:82:09:7c:99:9a:0e:a9:b0:72:
aa:93:3c:35:72:72:52:e2:52:4d:8e:16:e3:d9:21:c7:51:ab:
04:e5:41:17:39:a5:7a:57:af:b6:09:26:70:7b:b6:9e:c1:11:
6d:05:e9:57:fe:8c:f1:8e:d1:d7:90:b0:10:84:3b:f5:86:4d:
60:a6:9d:49:c9:c4:3c:3e:7b:b1:94:b1:da:5e:38:d4:34:d4:
7d:f9:b9:2d:ef:c6:0d:13:0d:14:7f:10:fc:64:5e:df:e2:ea:
87:63:ec:f6:e2:60:33:5a:71:42:68:a3:21:2b:1c:65:c8:ed:
2b:df:cb:e0:0e:ec:80:f0:36:6c:07:67:70:25:43:d9:03:bc:
33:bc:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:34 2026 by rpki-client