Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
File: S-7HT0dvsXHcjtr5SR1swnv4Di8.cer (raw, json)
Hash identifier: 60E7sxT885rIw/6rtPCQvOKwHpSYCcowWyHCdalvI4k=
Subject key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D32A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 13:41:17 +0000
Certificate not after: Fri 01 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 153669
IP: 163.223.36.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185130 (0x2d32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 13:41:17 2026 GMT
Not After : Jan 1 00:00:00 2027 GMT
Subject: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:77:ed:b6:85:87:4d:8e:df:e8:49:bc:c9:
70:a3:24:5f:cc:97:29:f2:f1:47:46:7b:c4:0e:1f:
e7:ec:b6:e5:34:d6:f6:e5:f6:ee:54:5d:59:83:a6:
ba:a0:8a:20:7d:af:fd:6b:c7:d4:53:34:83:a7:36:
46:43:dd:4e:b7:c0:02:31:c6:32:68:c6:a8:9b:48:
f9:8d:12:b6:7b:2b:58:2c:52:8e:65:7f:dc:03:56:
f1:58:ab:34:60:d1:20:1a:4a:7c:30:34:4d:85:0e:
5a:b2:f1:43:41:27:6b:d8:0e:32:18:b3:08:50:d1:
db:11:11:21:41:7d:99:cc:fb:08:6b:82:76:ca:da:
8d:4a:c8:25:eb:b3:ca:2f:e3:15:ba:aa:ac:dd:e7:
8e:e6:f2:64:7e:72:c0:bc:a0:33:04:06:20:29:5d:
d7:d5:16:2b:c9:9f:d5:ce:41:c2:66:d7:fb:a2:f7:
f0:51:ad:c7:cf:55:d5:1e:4b:ac:b2:e6:3f:eb:2f:
c6:35:01:0d:af:88:b8:32:9f:14:2f:33:ba:f2:df:
2a:c8:60:7e:91:3e:7c:91:1c:20:b4:69:3f:a7:60:
cf:3f:94:2d:91:73:15:6e:a0:84:81:40:79:6d:80:
a2:9d:33:93:10:fd:f9:99:91:51:b9:a1:af:26:ca:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153669
sbgp-ipAddrBlock: critical
IPv4:
163.223.36.0/24
Signature Algorithm: sha256WithRSAEncryption
32:92:81:c1:3d:cd:b1:6d:33:ef:6b:c5:ba:dd:02:1b:6d:9d:
f8:85:57:4a:2b:79:fc:7f:d5:26:a2:a9:64:56:21:2e:e3:84:
06:ea:62:02:f6:d7:7d:6f:b2:50:64:c7:9c:59:30:d2:2c:8c:
0c:32:b4:df:99:b2:66:95:a0:f1:ba:78:a0:ff:cb:d4:53:bd:
28:4a:f9:19:73:ec:96:10:d4:5e:88:29:eb:a0:fa:e2:a6:e7:
0a:d1:fd:9d:a4:18:ae:2a:69:c0:ab:3c:e8:14:c0:f8:80:92:
99:04:4d:62:38:e1:7f:83:45:76:8d:b8:27:37:65:e1:bd:a3:
6e:22:8d:48:eb:dd:af:fd:2b:71:1c:5c:20:39:96:f3:25:ac:
aa:76:df:19:ab:0f:96:c3:5e:6c:a9:7c:38:6f:81:8f:96:06:
cc:74:0d:fd:3f:3b:d4:68:2b:31:21:82:24:7d:bc:68:e0:45:
a8:99:f1:c4:e1:ad:58:47:82:ff:b9:08:5a:9e:cf:d6:9d:6d:
01:35:f1:17:5f:19:8b:2b:69:82:d4:b0:31:45:c7:74:cb:b1:
b1:cd:a6:e3:bb:e6:8e:93:4c:b3:3a:49:a7:f2:b2:00:59:10:
54:82:03:01:9a:2c:6c:26:f7:f3:39:eb:25:a7:0e:b4:19:86:
0b:c2:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:39:25 2026 by rpki-client