Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
File: H_jK4i0tckq70cLRJft9t7T4Sv8.cer (raw, json)
Hash identifier: XnMtBcSdE+zxxDa442y8HI40rTQbSRAH9R2lG+EfndA=
Subject key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02980D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:38:01 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 138030
IP: 2402:44a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169997 (0x2980d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:38:01 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:45:89:60:f3:29:eb:41:22:81:4a:16:1a:
34:3a:22:0b:0b:c0:39:59:64:4d:44:cf:d8:81:f3:
01:9b:91:5f:38:ff:d1:bf:3e:3c:07:cf:8e:75:c8:
a8:16:78:46:eb:0d:c2:3d:56:32:63:a8:75:94:1b:
41:4f:63:d0:06:ea:ca:63:9e:eb:9b:52:61:bd:42:
70:4c:f3:4c:40:52:c0:8b:71:9c:64:67:e3:87:4f:
18:90:dc:2b:11:20:d5:2f:ae:24:24:3a:72:13:72:
80:9e:18:d6:9e:43:e0:e2:e6:d4:5e:f1:d3:e8:bd:
9a:d0:02:91:37:88:7a:23:89:ae:a8:9e:d8:16:1b:
cf:8f:dd:fc:6a:b5:91:67:90:79:0e:57:37:09:39:
02:eb:01:55:1f:63:db:5d:1a:93:21:17:04:d2:f9:
e6:e8:bb:db:6a:56:03:fa:f7:7b:20:96:57:04:87:
b9:d3:5e:d3:a1:25:f1:e2:24:ea:f8:ae:0c:69:81:
a6:cb:35:a3:dd:95:ce:27:a4:44:c1:43:2a:5a:44:
ee:da:ab:15:93:e6:c6:b1:64:3b:9a:95:ed:07:42:
9e:0f:f9:bc:0d:f8:43:40:b5:6f:a3:28:49:5b:4d:
12:43:66:da:cc:95:39:cc:c8:28:df:00:44:d2:45:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138030
sbgp-ipAddrBlock: critical
IPv6:
2402:44a0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:86:a2:1a:72:e8:22:10:bd:89:71:9a:69:25:f9:ae:36:98:
ba:0e:3e:74:46:e1:f0:f2:7b:61:31:47:ea:bb:fb:80:a3:f6:
29:e6:c7:3f:76:d2:39:79:77:29:a8:8b:45:94:fb:21:11:59:
d3:37:33:2f:b8:49:d2:39:0d:d6:20:de:2f:5d:2a:9a:bb:bf:
70:76:1a:5e:d8:f5:a9:13:ec:55:e9:78:c4:2f:bd:7b:0e:05:
f0:d0:5a:60:f5:de:36:da:3d:89:d7:34:b8:b4:ef:f5:ab:55:
fa:85:46:0d:bf:0d:39:5e:a2:44:aa:a9:84:d2:c0:f7:c0:44:
ef:50:d2:b0:d1:e0:68:ac:76:c0:ce:86:86:be:32:5f:aa:c5:
0f:b2:ad:d2:83:e2:21:c2:f3:2e:3a:57:a2:34:b7:21:b4:68:
e5:20:0a:a7:95:e1:2b:4a:9d:cb:d6:cc:8a:60:14:58:4c:b1:
59:1f:f6:19:d1:da:58:03:88:22:65:31:a2:36:1a:4b:f1:dd:
a4:06:85:9c:86:52:cd:c6:0b:f1:a7:c0:73:00:a0:0f:45:87:
62:91:74:3b:3b:c4:8d:13:1e:00:59:ec:2e:38:40:03:e3:da:
22:e3:86:86:68:46:a5:60:d1:e5:49:91:a5:ac:25:58:7e:0e:
bb:d5:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:37 2026 by rpki-client