Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
File: TA-99pF0oywUEWcaumPJ6rdWs4E.cer (raw, json)
Hash identifier: rpUloMilMzTQH3saB6E0u3kkWofwLqzpQr9J/ppjHCk=
Subject key identifier: 4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AC38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Apr 2026 08:00:47 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 37979
IP: 218.185.224.0/21
IP: 2402:cc00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175160 (0x2ac38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 13 08:00:47 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A915F38F, serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:f0:5a:18:96:e6:b7:bc:fb:ff:46:64:a3:
c2:22:92:55:3d:b4:57:29:e2:e4:64:e4:68:11:2b:
b6:df:7e:ac:47:51:0b:fe:91:f6:06:85:39:6a:ab:
80:f4:c5:0f:07:86:91:bf:fc:86:87:a0:92:19:85:
f8:9b:08:8d:25:06:cf:07:a1:17:78:78:16:b3:42:
93:5e:24:3f:8d:e3:e3:f7:ad:b1:71:2c:0f:fd:c5:
fc:dd:8c:e2:d8:22:9f:ff:30:44:03:b9:ee:0c:5b:
6f:f3:1d:99:6a:d9:90:c8:a4:ca:41:56:1e:82:6d:
cc:9b:9b:24:6d:d4:ce:9d:0b:6e:ef:28:eb:aa:9d:
a9:b7:6e:d0:c5:10:d4:7d:83:bb:0d:45:d6:cc:4d:
a8:11:b4:c1:9a:bf:da:a0:22:cb:26:47:aa:13:cf:
cc:65:a4:5c:80:8e:6f:cd:10:e5:2f:78:f7:e2:54:
5c:9a:34:94:54:ee:63:fc:a0:ef:a3:96:dd:b1:30:
cc:84:97:0c:3b:f7:88:45:47:12:ec:e7:c1:7d:24:
e6:a3:bd:85:e0:82:5a:36:e3:74:be:99:c2:4d:52:
50:29:b4:2f:1c:63:0d:23:f8:13:13:5e:2e:f5:b5:
a0:16:5d:25:fc:50:fd:d8:c1:a9:80:94:de:d3:03:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37979
sbgp-ipAddrBlock: critical
IPv4:
218.185.224.0/21
IPv6:
2402:cc00::/32
Signature Algorithm: sha256WithRSAEncryption
cf:c1:4d:d2:72:a5:97:ce:bf:47:c5:45:29:0b:88:9f:2f:e7:
ac:2b:1c:f6:42:b3:e6:84:eb:b2:e7:bb:45:73:f0:3d:76:f6:
65:4b:44:18:99:c4:99:20:0f:4d:e4:11:09:28:9a:b5:66:86:
5e:2e:38:3f:e5:86:53:09:0b:84:d8:ae:95:89:da:d1:68:f2:
e9:55:ca:3b:d7:b7:f1:42:ed:07:9e:6a:b8:ad:d3:80:eb:24:
e9:c3:8a:b2:90:16:03:84:d8:00:c9:03:6c:ab:41:ea:ce:d0:
90:b7:ef:39:f3:fd:a3:64:05:c1:c6:9e:aa:09:ae:38:92:9a:
b1:ee:fa:a4:da:31:6f:16:12:52:01:37:e7:2d:f2:92:30:22:
5c:15:1f:a0:6d:d1:f5:04:23:39:ee:94:eb:ee:d0:82:de:cf:
f4:54:fa:2a:92:93:5e:5f:4f:57:91:1d:b6:c4:19:48:52:8a:
4c:f1:fd:16:9f:47:e2:7b:ab:6d:28:23:f8:c3:39:73:9a:1e:
8b:73:bb:e1:9b:e7:c2:c2:d3:d7:f0:06:75:bc:e2:1c:3b:cf:
ca:0c:0f:eb:c4:e3:3c:91:c9:3f:a8:2c:f4:19:5b:95:84:ca:
69:26:a1:39:38:34:e5:28:32:05:ef:fe:48:14:9c:09:3e:65:
cb:99:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:10:14 2026 by rpki-client