Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
File: XTDuvxHkF41iO-G95Nu0y1nMhDc.cer (raw, json)
Hash identifier: vaS24Ngfs+gnNQaatQdHjlpCnQQQyLUyd0OWOM3HVNs=
Subject key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029B18
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:51:24 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 154450
IP: 2402:4220::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170776 (0x29b18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:51:24 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:05:89:05:7f:70:c7:46:12:6f:64:c6:d5:
9c:fa:6d:25:36:9e:25:f4:dc:5c:76:be:33:c2:1f:
1b:56:6c:ff:51:15:88:b0:a5:a0:30:3a:3c:f7:df:
42:70:9a:fd:d4:84:b8:66:93:95:02:cb:04:a0:5d:
9f:8f:4f:e9:79:7f:4e:92:18:e8:74:04:3d:ba:5d:
ce:b6:e1:dc:c9:e1:49:d9:f5:76:96:97:95:2b:b7:
13:68:01:34:fa:55:e0:35:9d:6a:9c:65:7c:75:18:
89:6d:70:32:0e:14:ae:d6:44:2d:24:d2:df:9c:81:
b2:3d:05:9e:ab:e0:0d:2f:cc:db:f9:ca:5e:67:d9:
5e:86:7c:10:62:e0:a5:c3:69:94:22:15:5e:05:4a:
d7:8d:5c:06:9d:04:df:e5:c2:48:4f:cb:b0:67:f6:
32:b6:04:84:0c:66:a4:00:73:d7:a7:e6:70:8c:20:
80:99:2d:d0:d7:b5:6b:37:12:c6:75:57:85:3d:38:
a6:0a:f2:da:48:d7:32:9f:7f:45:ab:de:05:fe:b4:
86:6c:a6:e7:56:5a:34:c2:63:ab:5e:0e:1d:c7:1a:
9b:1a:22:53:e1:33:f6:3b:4a:f3:2e:8b:ae:41:d1:
93:b4:18:00:d0:93:3d:81:51:d0:06:eb:cf:9b:be:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154450
sbgp-ipAddrBlock: critical
IPv6:
2402:4220::/32
Signature Algorithm: sha256WithRSAEncryption
40:a9:6e:ab:c5:b9:8d:a3:83:ce:b0:f4:c3:a0:3c:50:e4:12:
dc:22:df:ee:68:04:58:31:31:39:08:7c:64:54:8d:a7:e7:1e:
a9:f6:74:4f:f2:80:7f:c9:c7:98:5a:b9:fa:93:d2:1a:77:f8:
d6:c7:df:a3:ed:81:df:16:6d:bc:c7:86:d6:69:6d:77:de:e8:
85:19:e6:05:1a:b0:80:9c:8f:80:15:f9:06:19:21:4b:ad:d2:
51:73:29:e9:2a:aa:28:2c:8b:7f:92:29:5f:e8:c3:1f:b9:66:
33:38:75:f6:6f:3a:41:26:0c:3b:e6:54:53:17:0a:8a:75:82:
23:a8:0e:a4:dd:2b:5a:fb:fe:4f:0b:7d:8a:e4:73:36:f3:55:
1e:44:56:c9:53:ba:17:9a:35:08:2c:4a:61:b8:be:28:ea:43:
e1:9b:05:de:19:fa:6e:4b:a8:5a:22:41:57:31:59:59:b3:71:
a4:6a:0c:17:63:62:b3:dd:bc:d1:7b:eb:a5:f5:5f:62:06:4b:
7e:3e:e5:0f:fb:08:94:4b:8c:7d:82:c8:34:4c:36:64:88:62:
44:fd:f6:c9:fd:f4:e1:37:33:88:35:84:83:fb:a7:cd:29:6a:
7f:05:17:97:d2:c8:d0:da:70:04:ce:32:62:b8:36:27:f9:1c:
ed:14:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:38 2026 by rpki-client