Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer (raw, json)
Hash identifier: OL+RlGhVfgmYVF+8EZtP6+nMKbM3rME6vwq2QoLO67E=
Subject key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029300
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:13:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 152724
IP: 202.49.248.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168704 (0x29300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:13:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:81:2b:4c:63:ef:7e:5e:5a:dd:91:67:5f:
b1:4b:60:70:c9:80:5d:e7:1e:b8:90:4e:c9:06:2f:
d4:29:0a:af:5a:49:a8:ca:f5:58:c9:c1:a8:6c:51:
c6:e8:c5:b9:46:82:0d:00:f9:ef:c4:ad:1c:ad:bc:
d4:10:6a:56:3e:9e:c6:19:c8:ad:e6:bc:b3:b1:e1:
61:56:a1:29:d6:03:35:f9:45:af:3b:e1:88:de:38:
66:08:f2:05:69:42:7e:f3:76:83:15:8f:9d:b1:45:
80:d7:6c:e6:30:1f:97:33:f6:79:16:71:b9:61:76:
f1:c9:b0:f2:b0:fd:db:2b:34:0f:1e:e1:56:76:12:
74:d8:2f:f7:6b:d0:71:a6:bc:b0:87:ad:bc:5d:d5:
e7:c6:b4:fb:47:53:24:28:dd:9d:4c:7b:5d:12:78:
0a:9a:08:0c:ff:58:6a:dd:f2:56:43:df:c8:3f:6c:
ef:92:96:9f:f0:94:09:71:2a:23:5e:2b:eb:11:04:
f2:a0:2a:40:5b:07:bc:70:50:aa:b5:a8:78:df:80:
ca:3a:91:86:b7:f7:d6:b0:15:ca:78:e9:0a:2f:02:
5b:0d:14:f3:d4:df:10:a4:35:a0:5a:00:2b:02:d6:
e8:6a:9f:dd:4d:33:b5:dc:f8:f7:97:a5:d7:82:6e:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152724
sbgp-ipAddrBlock: critical
IPv4:
202.49.248.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:0f:96:6a:cf:c5:50:b5:c3:9f:87:da:73:ff:e3:10:44:7b:
5c:dd:a3:8e:54:7b:78:63:10:7d:51:d6:11:0e:e6:93:3c:65:
62:3b:57:2a:07:05:6c:d9:2a:ce:66:85:4f:d8:f6:22:cd:48:
a2:62:f3:08:15:6d:3b:cd:7b:0d:fc:99:68:80:4b:db:78:57:
c3:7c:d0:59:b3:84:ac:4a:93:60:91:9c:34:89:2d:8c:52:d9:
24:63:2a:79:c5:f4:15:4e:5c:45:de:a8:e5:4a:95:8e:4a:c4:
c0:b2:bc:b2:a2:60:ba:7e:44:75:b0:11:c5:cf:97:bd:f8:9d:
8c:4f:7c:54:ba:eb:71:94:bd:06:d3:92:81:33:46:1d:ad:13:
41:e4:4a:31:5b:80:77:50:89:60:dc:23:4c:c6:33:c6:ec:33:
20:aa:dc:d2:4b:5c:5f:57:0e:71:12:74:42:90:fc:41:0e:16:
e6:95:a4:30:27:99:09:6e:ef:c3:a7:a0:cf:21:fb:ca:58:5d:
6f:61:59:db:e0:dd:65:30:51:0e:7f:de:77:37:8e:dd:b2:5d:
51:af:0b:08:98:fd:e1:d6:23:01:e5:9a:b9:6d:a4:e6:3a:52:
97:28:c9:6f:ed:00:32:ad:e8:5f:83:88:95:80:69:39:a4:ed:
86:05:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:28 2026 by rpki-client