Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer
File: LGfSFpazocG8LOSfy-CnpTo306Y.cer (raw, json)
Hash identifier: uslgEga4e52iGJ/gkjx1/9uZ/cLtor7rWV0TTvEEw5M=
Subject key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A006
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 07:20:37 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 133190
AS: 154096
IP: 163.61.248.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172038 (0x2a006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 07:20:37 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:91:52:8a:db:64:49:d7:66:60:9e:52:db:
71:0e:2e:34:14:0a:e2:ca:56:5b:be:3d:bc:29:c3:
da:9a:e2:e4:2d:af:a4:cd:82:d4:98:58:89:cd:7b:
76:35:52:ef:89:0c:0c:66:bd:d7:2f:1b:de:e5:c4:
4a:45:76:fa:a7:0d:43:73:55:99:cb:8a:46:a1:e9:
a7:ab:96:eb:68:e5:30:fa:a0:ae:ea:e8:c6:f1:f2:
e2:13:b9:76:30:e3:e7:42:ad:5b:f6:d7:4a:46:e6:
0f:28:86:aa:75:8f:fc:03:f6:a5:07:56:5d:6f:b6:
29:1f:81:17:94:ac:16:3d:78:ce:62:34:f2:73:eb:
13:38:61:4f:82:75:6f:49:47:38:98:5c:79:52:6d:
ce:49:90:42:59:4e:b9:4a:ec:a2:44:88:13:e1:c7:
33:46:1c:99:0c:ce:4d:b3:30:59:45:31:d0:55:61:
b2:ee:78:62:5c:73:48:e4:be:f5:78:bf:73:69:09:
3f:fd:72:7b:f7:b0:77:79:a6:b5:06:92:8c:3d:b5:
d4:eb:ba:30:f3:85:0b:80:bc:cc:1c:42:07:44:40:
9e:9e:6b:4b:d1:e2:7e:76:37:55:f7:82:5a:f9:53:
6f:82:b4:4e:e7:84:97:72:91:d0:94:ba:9f:6a:44:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133190
154096
sbgp-ipAddrBlock: critical
IPv4:
163.61.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:0e:49:dc:8b:a9:6d:e3:f5:0c:97:68:f4:4e:90:a2:bc:20:
9f:c1:be:9e:d4:c5:90:7f:04:41:72:b4:f4:8b:72:a3:04:65:
99:e4:92:47:68:ac:41:66:63:99:bb:79:e1:93:47:ef:83:4d:
92:03:17:29:98:d3:b4:c4:46:5e:b8:90:fb:ed:2d:f6:0d:8a:
d0:1a:65:78:7e:c9:8c:33:7f:ea:c7:ec:5c:05:8b:c0:25:7b:
aa:1c:ab:89:b7:e4:41:67:04:7e:f4:9f:0d:df:ae:e1:26:00:
52:00:ef:ee:eb:ba:01:3f:cc:76:fc:8c:51:d6:e2:9e:ae:65:
d9:a7:08:19:94:05:47:17:75:1b:c5:97:53:94:81:c2:84:99:
c8:59:82:66:21:bc:e9:8b:41:bf:78:3b:bd:5c:27:4a:b8:54:
94:1b:ed:89:3a:d3:58:91:c6:aa:00:05:fc:63:45:ea:36:15:
e2:f8:1b:43:07:54:76:c1:70:48:27:eb:7b:2c:09:0a:2c:8f:
8a:5e:19:c1:67:09:55:64:be:45:90:f0:46:7e:9e:82:7a:26:
38:61:06:e3:4f:44:be:76:b5:a5:5a:7a:c7:c0:01:aa:be:6f:
a2:a0:42:d6:00:16:11:8d:da:e1:0e:9d:b1:8a:0d:ae:a8:95:
39:db:85:ba
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgIDAqAGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzA3MjAzN1oXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjgyMjExMTAvBgNVBAUTKDJDNjdEMjE2OTZCM0ExQzFCQzJDRTQ5
RkNCRTBBN0E1M0EzN0QzQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3+5FSittkSddmYJ5S23EOLjQUCuLKVlu+Pbwpw9qa4uQtr6TNgtSYWInNe3Y1
Uu+JDAxmvdcvG97lxEpFdvqnDUNzVZnLikah6aerluto5TD6oK7q6Mbx8uITuXYw
4+dCrVv210pG5g8ohqp1j/wD9qUHVl1vtikfgReUrBY9eM5iNPJz6xM4YU+CdW9J
RziYXHlSbc5JkEJZTrlK7KJEiBPhxzNGHJkMzk2zMFlFMdBVYbLueGJcc0jkvvV4
v3NpCT/9cnv3sHd5prUGkow9tdTrujDzhQuAvMwcQgdEQJ6ea0vR4n52N1X3glr5
U2+CtE7nhJdykdCUup9qRBtLAgMBAAGjggMUMIIDEDAdBgNVHQ4EFgQULGfSFpaz
ocG8LOSfy+CnpTo306YwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY4MjIxLzMzNTM1Q0IwNjU0QzExRjA4QjM5RTcxQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2ODIyMS8zMzUzNUNCMDY1NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBh
em9jRzhMT1NmeS1DbnBUbzMwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAghGAgMCWfAwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGjPfgw
DQYJKoZIhvcNAQELBQADggEBADsOSdyLqW3j9QyXaPROkKK8IJ/Bvp7UxZB/BEFy
tPSLcqMEZZnkkkdorEFmY5m7eeGTR++DTZIDFymY07TERl64kPvtLfYNitAaZXh+
yYwzf+rH7FwFi8Ale6ocq4m35EFnBH70nw3fruEmAFIA7+7rugE/zHb8jFHW4p6u
ZdmnCBmUBUcXdRvFl1OUgcKEmchZgmYhvOmLQb94O71cJ0q4VJQb7Yk601iRxqoA
BfxjReo2FeL4G0MHVHbBcEgn63ssCQosj4peGcFnCVVkvkWQ8EZ+noJ6JjhhBuNP
RL52taVaesfAAaq+b6KgQtYAFhGN2uEOnbGKDa6olTnbhbo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:51 2026 by rpki-client