Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer (raw, json)
Hash identifier: 7HcThH6DXO5eEtXonVgfMr25sqWyRvXOE6KtY9K/tm0=
Subject key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB72
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Apr 2026 13:48:42 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 38529
IP: 116.50.64.0/18
IP: 2402:8e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174962 (0x2ab72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 13:48:42 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:39:d9:52:81:2d:64:ff:46:60:84:dd:bd:
2c:ca:c6:91:fa:83:ab:42:82:ba:e6:2b:11:33:c3:
38:c3:d7:77:b8:4b:7c:5c:5f:d5:70:9f:3f:d6:be:
a0:2f:e0:98:d9:90:13:df:87:4d:06:cc:04:bc:72:
81:c7:f2:02:d7:c4:40:73:f9:09:b0:72:7a:3b:97:
0b:70:23:de:44:2b:6e:24:54:c4:b3:04:8c:56:fc:
37:08:1b:3d:8a:55:25:71:99:58:01:09:d4:b0:ab:
f5:e6:40:33:2c:1a:20:1c:8d:81:58:ba:15:76:45:
d8:08:d6:8d:4a:5b:dd:e2:07:68:f2:0d:11:0a:e3:
88:28:f0:75:4a:22:0f:54:be:47:45:6e:15:f7:e9:
77:45:61:2c:20:7f:6d:4f:74:c9:ef:ef:4b:74:fd:
69:bb:6d:30:22:b8:f0:dc:36:65:ff:93:b0:c4:7d:
63:f4:57:56:93:6e:d5:b3:e8:3e:a6:4c:be:6f:1f:
78:1d:7d:02:dc:66:4e:bc:1b:0e:c3:2d:98:5f:d2:
0f:45:21:94:4f:6e:03:67:32:15:0a:0c:68:47:48:
9e:d3:4d:9e:ef:04:f9:37:f5:9c:1a:3d:b6:8f:60:
7c:73:33:d1:82:72:9b:99:96:37:2b:40:17:f3:56:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38529
sbgp-ipAddrBlock: critical
IPv4:
116.50.64.0/18
IPv6:
2402:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
46:ae:b5:00:6c:58:21:48:8d:60:63:8f:f8:39:e0:e9:88:23:
37:c1:ba:72:1e:d7:e4:11:db:69:c9:de:ba:c7:18:a3:15:b0:
69:a6:03:8c:3e:25:b6:27:02:a0:4d:01:fd:3b:11:2e:c1:e9:
fc:0b:5b:ef:af:5a:cb:9b:98:66:50:b1:38:c4:e9:f2:35:f3:
da:37:3b:50:f0:8d:63:90:67:bf:9d:4f:f5:e5:dc:42:76:90:
d9:16:82:f3:d2:97:14:e5:7b:bb:83:3a:00:9c:92:ae:ae:72:
b0:0e:cd:56:21:1a:57:39:ea:46:3a:19:32:e0:2c:c7:4d:50:
cd:78:16:a5:48:7b:d0:a3:3d:6f:e7:05:51:92:cf:59:35:ec:
6f:cc:26:8d:80:e0:f0:a2:ac:ca:72:74:38:ce:33:54:79:f6:
55:3c:70:56:ae:9f:b5:96:57:9b:ee:47:6d:41:54:13:11:67:
49:17:b4:da:0d:8a:c2:ce:17:5d:9b:e7:40:97:7e:67:dc:4a:
25:d9:64:0f:b7:8e:de:c2:ab:c0:b3:f7:5e:4a:a7:a4:d4:63:
36:0c:ff:89:60:1c:87:1e:5e:3c:5c:82:fa:2f:34:65:5a:a6:
a3:a5:ee:e4:8e:8e:ed:60:4f:34:5d:bb:42:5f:9b:2c:af:43:
77:c7:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:09:44 2026 by rpki-client