Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
File: CfwHfzPjrWe_FHdVFno61OrLHnw.cer (raw, json)
Hash identifier: qFyP8O0xO+IOgCkJURK8q3qu0j1WT0SgOg8x6MPeDWM=
Subject key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0298AB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:40:34 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 9658
AS: 9670
AS: 17445
AS: 18005
AS: 18190
AS: 18389
AS: 38180
AS: 38262
AS: 45330
AS: 45449 -- 45450
AS: 56100
AS: 56164
AS: 58526
AS: 58635
AS: 58748
AS: 131212 -- 131213
AS: 131228
AS: 152173
AS: 152896
IP: 49.157.0.0/16
IP: 61.28.128.0/18
IP: 112.196.224.0/19
IP: 112.199.0.0/17
IP: 113.61.32.0/19
IP: 115.84.224.0 -- 115.85.63.255
IP: 116.50.128.0/17
IP: 117.104.240.0/20
IP: 120.89.0.0/18
IP: 180.232.0.0/16
IP: 202.0.91.0/24
IP: 202.164.160.0/19
IP: 202.175.192.0/18
IP: 203.167.64.0/18
IP: 2403:a000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170155 (0x298ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:40:34 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:77:60:c1:20:ec:eb:eb:b4:00:42:7d:df:
63:5c:2b:7f:5d:9f:2f:ce:85:ed:f7:84:db:1d:46:
e9:92:9d:c1:dd:6b:e1:35:d6:16:da:48:a5:a6:14:
4c:00:22:c7:36:ea:fe:91:95:c0:1f:00:0e:7e:65:
ae:11:36:68:b8:2b:9f:ab:24:7a:40:11:91:86:00:
cb:55:a5:47:00:61:3c:22:c2:7a:00:24:21:17:5e:
bf:eb:45:24:5c:c0:2e:5c:0a:d4:f5:61:4f:0f:9a:
6d:63:f6:b2:df:1f:1e:c8:17:e3:9a:e8:7d:f8:48:
cf:48:02:d3:fc:dc:de:29:af:2b:e4:27:ef:a5:cf:
3b:4d:3c:1d:a7:62:79:8e:85:60:ca:04:a3:4b:97:
df:ce:c3:02:87:f4:93:08:c3:a9:5d:36:a6:bb:2f:
38:ff:22:d2:9f:92:d7:6c:bf:7c:1a:89:77:4e:0a:
f4:ca:98:ff:f3:2c:f3:34:95:bf:eb:c9:5a:ac:d6:
71:14:7f:03:a8:79:9b:fc:84:18:3a:b4:4d:a2:d1:
0d:e9:1f:c6:7f:57:56:1e:5a:ca:cb:08:56:7e:f9:
43:a1:82:ff:59:43:1f:3e:41:ba:9f:a5:79:5e:a3:
20:98:d0:1f:83:d3:d5:f3:79:02:41:20:d9:4f:4f:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9658
9670
17445
18005
18190
18389
38180
38262
45330
45449-45450
56100
56164
58526
58635
58748
131212-131213
131228
152173
152896
sbgp-ipAddrBlock: critical
IPv4:
49.157.0.0/16
61.28.128.0/18
112.196.224.0/19
112.199.0.0/17
113.61.32.0/19
115.84.224.0-115.85.63.255
116.50.128.0/17
117.104.240.0/20
120.89.0.0/18
180.232.0.0/16
202.0.91.0/24
202.164.160.0/19
202.175.192.0/18
203.167.64.0/18
IPv6:
2403:a000::/32
Signature Algorithm: sha256WithRSAEncryption
a2:4f:c1:da:fb:a7:70:3e:39:4b:d0:8f:55:73:8a:b7:f2:6e:
4e:fb:00:f9:d8:d0:c3:60:3e:1e:42:5e:c0:25:a0:18:7c:8f:
85:cd:16:2c:d8:79:8a:01:80:94:09:33:50:85:45:f6:a3:d1:
49:fe:f7:57:42:d0:d8:03:a3:29:1c:bf:02:5c:27:47:e2:ef:
c8:ae:d5:c4:18:6a:3a:05:0b:a3:d3:38:bb:98:cd:ac:ce:f4:
97:8c:b2:60:13:68:97:f5:36:d5:0a:0b:2a:0f:7a:67:b8:d8:
61:20:66:3e:b0:1c:16:c1:a2:a5:c6:3c:b6:81:06:3d:10:37:
85:28:92:95:e0:ae:18:78:05:e1:03:26:6f:d6:48:e7:62:f5:
99:2b:40:c6:3b:c4:a3:c5:2d:2e:9d:0d:95:cd:2a:a3:ca:27:
4c:67:27:d9:a4:10:00:65:ab:97:0f:ab:90:e1:86:61:88:86:
1c:bb:b3:57:7a:b4:05:b6:21:2e:8b:11:bb:53:9c:46:b6:b5:
01:ef:bd:50:25:cc:b2:2f:6d:91:2b:e2:28:26:ca:ba:16:7c:
87:fd:58:22:c8:71:3a:c2:10:3d:9f:1f:c2:bb:ae:2e:cf:1b:
de:a7:7e:de:28:8e:71:ca:58:6e:af:24:96:58:c9:70:a2:44:
a2:d1:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:32 2026 by rpki-client