Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
File: U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer (raw, json)
Hash identifier: GD56LflBrXvV3gdLV+vn3SNb3/sX5GGR0WU3jqlV+nE=
Subject key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029AF3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:50:48 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 153560
IP: 163.61.19.0/24
IP: 2401:eb60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170739 (0x29af3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:50:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9180838, serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:88:46:18:e9:44:60:a6:50:48:4e:de:30:
1d:7e:2f:97:74:5f:70:e1:de:0d:1a:d2:8e:cc:7f:
ee:fe:f1:2d:9e:4b:0d:91:9f:a4:24:84:1f:f0:9e:
c1:a4:6a:e2:ea:54:88:62:63:28:00:8d:33:b4:d0:
08:ba:78:c3:d4:57:1e:0b:ef:db:07:7a:e1:33:a4:
04:1f:d4:4a:d6:a2:7b:8b:f0:a0:c5:7e:a6:16:02:
d4:68:b7:3c:a6:5a:33:46:83:61:e8:b6:24:20:2f:
14:d8:34:ab:2a:17:5f:7d:b6:16:e2:90:af:d1:30:
f3:36:7a:06:67:7b:92:69:8a:74:e6:d6:26:58:dc:
8d:89:77:ff:33:2a:af:76:a0:68:f0:92:e5:0f:d8:
f1:ff:90:ca:f2:84:d8:1f:7e:c8:c5:e2:c2:ee:b8:
85:2f:c1:92:92:a1:1c:27:ea:10:bf:48:51:6f:67:
85:35:b8:08:fa:fb:6f:b1:3a:d1:bf:1e:28:8b:d5:
de:28:bc:0e:8b:79:69:e2:34:8e:99:96:e9:11:15:
e8:e0:20:5c:32:f5:c1:8d:5c:70:77:98:ee:e0:37:
31:e7:f2:17:3f:ab:5a:47:49:ba:5c:d5:19:bb:5f:
58:f9:44:83:ab:f2:e6:0a:be:df:03:c1:f3:40:4a:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153560
sbgp-ipAddrBlock: critical
IPv4:
163.61.19.0/24
IPv6:
2401:eb60::/32
Signature Algorithm: sha256WithRSAEncryption
74:cc:c1:a8:88:5c:24:e7:7a:07:c4:d2:13:20:aa:df:a5:ef:
38:58:65:52:93:50:0b:39:7a:4f:85:ec:5e:30:5d:70:ca:61:
f3:1b:6b:79:b5:06:b7:c3:0d:c9:fd:0d:98:d1:7e:5c:18:74:
7c:73:b1:4d:5d:be:92:7b:00:1b:3f:79:3c:5e:6d:13:80:db:
39:7a:b1:d7:80:c1:df:46:75:a0:94:5a:b5:f7:d4:4d:20:6f:
b4:af:55:df:07:52:2a:bd:4f:af:d4:aa:7c:e7:e9:f1:42:f8:
24:90:9e:86:75:e8:92:0b:4d:c8:12:62:25:1e:93:c5:1f:b2:
f5:2e:1d:1e:8c:c9:4f:6b:fd:7a:81:5d:14:35:4a:50:e6:f6:
bf:a8:2c:a5:7d:f1:dd:c3:61:38:9a:8c:f3:8d:8e:2f:12:56:
31:eb:70:2f:59:ce:be:b3:dc:e9:42:5b:47:be:68:77:47:1e:
d8:c7:8e:d4:39:af:54:c4:0f:ee:fb:e4:03:a3:f9:05:86:ef:
88:a1:71:a6:8a:a2:ca:ce:db:1f:35:8c:3d:e5:59:3e:90:b8:
3a:d6:41:09:d8:5f:93:13:93:c1:bd:9c:e0:00:fe:a1:b4:d7:
78:ca:b0:ca:d7:11:1c:40:2f:f9:5c:9a:6d:c5:98:2b:ac:03:
bf:30:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:48 2026 by rpki-client