Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
File: Wr7NjqrTfqV665OfLAsUKXSEH4o.cer (raw, json)
Hash identifier: aYnMhHwHQav2eb9pSIYcTmw+4X+Y5hL6edhbL/m1sp8=
Subject key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029465
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:19:41 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 153598
IP: 203.24.49.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169061 (0x29465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:19:41 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:49:39:17:7d:7d:2e:ff:b9:bd:8e:53:a3:
87:90:f3:3a:fe:1e:c1:66:d7:c5:40:7b:97:0b:b9:
ec:cc:45:72:5d:51:a2:9c:a5:c7:14:4f:a8:f1:eb:
9d:f7:0a:90:af:09:7a:2e:1a:e9:ec:70:48:6c:52:
92:8b:3f:9c:6a:06:2c:de:b4:58:a8:c0:79:6a:29:
e7:dd:e7:39:69:30:1a:3b:cb:3c:29:10:fd:5a:18:
33:10:03:83:3b:e5:23:f7:17:56:a1:69:de:55:7b:
bb:0b:58:aa:b7:e4:ed:92:06:94:ec:3f:a4:7f:93:
16:35:8b:a7:34:f4:a9:08:3c:5f:ab:2e:fb:b6:1a:
26:d1:a3:13:bb:c2:95:a9:bb:4e:9d:55:c3:4c:a5:
96:bd:b3:7f:30:3f:b1:f6:70:fe:99:dc:d9:1f:5b:
41:7f:66:76:dc:08:24:50:b7:f7:9d:2d:cd:32:a3:
47:73:e5:72:59:10:8c:74:36:af:a5:8e:c2:d0:d3:
23:55:ac:69:02:20:86:14:5e:92:f0:9b:7f:3e:d5:
48:2d:af:68:38:36:1b:bc:45:0f:9a:f1:f2:5b:9b:
39:18:b2:87:c7:1f:3c:80:51:03:6c:20:da:7e:c2:
16:70:ec:8d:37:8e:33:01:7f:61:c9:88:6d:6b:17:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153598
sbgp-ipAddrBlock: critical
IPv4:
203.24.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:5c:cb:be:d5:14:3b:ab:45:ce:11:ec:9f:a7:48:0e:f2:fb:
1d:2f:da:dd:9c:1e:ea:0a:43:cf:db:3d:75:b4:1b:5f:1b:0b:
ab:06:b8:dc:56:68:8e:4c:35:c6:19:8d:04:8b:2e:d5:d0:5c:
01:33:35:20:d3:35:df:23:d6:47:ac:86:e1:e7:b4:17:96:b5:
9a:16:70:38:60:ec:71:f6:26:bc:19:b1:9e:d2:17:87:2f:3f:
ca:34:d5:65:82:39:b2:20:15:f2:41:51:40:a4:cd:76:6a:f8:
f3:f7:3d:b6:dd:1f:8e:37:71:b6:67:81:a2:3a:b8:8a:b6:7c:
61:0a:5b:5b:4d:e5:43:03:1f:9d:86:99:35:6c:22:43:03:6e:
9e:0e:53:f1:24:e9:dc:01:37:3c:0a:67:41:63:20:8d:10:4f:
3a:c9:e4:1b:60:e2:ba:a5:78:2e:b8:1a:3b:f1:f4:3b:19:3e:
6d:94:49:e5:b7:8f:99:84:51:2c:99:d0:86:cc:f1:30:4a:1f:
0d:e7:30:f2:b9:09:68:73:98:9f:43:30:fb:b5:0d:62:45:99:
d2:2a:25:46:3c:19:e8:f0:16:a5:1e:21:e7:d5:1b:4d:81:c2:
13:a5:f9:2a:1e:6d:44:86:f8:fc:2d:b3:f4:6f:7f:06:f9:9e:
cf:50:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:43:12 2026 by rpki-client