Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
File: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer (raw, json)
Hash identifier: 5Pl1SW8EXoxKxmgQCeRkwtcqPylUGzLzHsqdFMzKsYk=
Subject key identifier: 0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029932
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:42:58 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 140058
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170290 (0x29932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:42:58 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91201F1, serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:29:b7:ad:55:c0:69:b2:00:ac:52:1f:8a:
d3:60:09:a5:13:db:ce:93:f4:d0:3f:6d:46:42:2c:
55:86:d2:d5:cc:f3:35:ae:02:44:80:e4:32:e9:c2:
8a:f2:47:fe:a7:af:4a:61:3d:80:ab:31:f8:30:6a:
47:6f:c8:75:c3:4f:50:0d:a8:8d:dd:a9:cb:df:3c:
bd:04:7a:78:d8:b2:2c:9a:8b:61:c6:ad:31:7c:fd:
83:7f:2a:da:2b:62:53:c0:71:72:0c:dd:f7:e2:a4:
b2:e6:ad:85:05:f2:12:f9:4b:e0:1b:a9:1c:08:6c:
b6:0d:62:d0:72:5f:b4:b1:c8:22:9f:69:83:33:0e:
50:19:03:92:6d:f6:36:5a:43:d2:d3:d8:3a:1a:f4:
2d:82:c7:55:c8:5c:39:0c:cd:53:9c:f5:6a:42:50:
ec:a1:c0:63:f6:d5:27:c8:b6:06:c1:f2:84:0d:b0:
0b:e0:0e:7f:95:e9:2b:0b:f5:a9:2b:17:0a:37:6c:
9d:29:3f:3b:74:c2:b9:6e:e9:fb:26:cc:23:ff:33:
e6:dd:f0:87:c8:e3:5b:31:80:f0:3f:1f:81:8a:b7:
b7:dd:6c:12:6f:0a:31:93:ae:43:8d:09:77:a9:a2:
62:db:21:f4:77:65:3a:fb:e4:d6:6a:46:d7:5d:48:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140058
Signature Algorithm: sha256WithRSAEncryption
bd:c6:d6:3d:00:b8:b9:1b:8c:09:df:07:5d:d2:ad:77:1c:ca:
38:0b:69:28:8f:19:bd:c3:e0:7a:72:93:80:b0:8f:b5:96:cd:
4d:b7:07:78:de:16:1b:d6:b5:51:0f:8d:c0:56:7c:0a:85:d9:
36:78:51:f7:d6:e3:ea:43:c6:e4:a1:07:6b:54:94:0a:ae:c6:
1c:cf:06:0d:83:b7:cf:71:21:1e:e0:8e:a7:84:6b:ed:d9:2d:
f3:65:c5:62:f1:01:72:78:b4:ac:5b:cf:6b:45:62:43:3c:d1:
fb:89:30:da:09:4d:84:07:03:8e:8d:fc:83:e3:b9:f3:06:f5:
7c:ad:65:80:5b:86:f6:24:f5:ca:ef:9f:be:e3:a9:51:c1:a1:
e1:aa:e3:70:cc:d0:cb:64:db:02:ca:f6:20:71:9e:43:5f:be:
2f:47:db:85:b0:42:28:59:d6:81:b0:09:e5:d0:25:bd:29:b9:
f9:62:a2:0f:5f:95:e5:f3:3a:61:11:41:59:d3:dc:7b:96:6a:
69:68:26:62:40:38:fd:9f:aa:80:12:51:b1:42:83:65:83:45:
99:ec:a1:e1:ba:b7:54:d7:81:e9:49:e5:97:6c:c5:8e:74:30:
0f:b1:92:c2:cd:0c:da:e5:2e:a2:46:f0:d2:21:60:25:da:2f:
67:8e:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:06 2026 by rpki-client