Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1eqzo1aBo6DbAwLHrO7YbkzgFU.cer
File: Y1eqzo1aBo6DbAwLHrO7YbkzgFU.cer (raw, json)
Hash identifier: MfAvz4r20uiko24grUi8hJSuyJ6flMVybysjGVDdeyQ=
Subject key identifier: 63:57:AA:CE:8D:5A:06:8E:83:6C:0C:0B:1E:B3:BB:61:B9:33:80:55
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DCE4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9140CF9/5D94B572C32511F18F39DCBD6511F970/Y1eqzo1aBo6DbAwLHrO7YbkzgFU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9140CF9/5D94B572C32511F18F39DCBD6511F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 Oct 2026 14:34:31 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: AS: 154993
IP: 45.118.255.0/24
IP: 2402:7ce0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 20:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187620 (0x2dce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 8 14:34:31 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A9140CF9, serialNumber=6357AACE8D5A068E836C0C0B1EB3BB61B9338055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:91:46:82:0f:50:19:59:0c:58:99:7a:d1:
46:79:ee:88:93:fe:a4:bd:c1:fd:2f:c5:35:25:60:
81:30:39:5b:c7:6e:2a:83:b5:81:8c:66:6c:b9:a8:
22:8f:a5:a3:99:8f:00:3a:fc:7f:24:a1:ee:94:69:
c7:aa:04:6d:46:4e:49:db:1f:1e:2a:d9:6e:35:80:
94:fb:42:82:68:32:18:68:bb:91:38:34:d7:8c:02:
ef:5a:95:7e:91:26:8a:ea:52:58:ce:8e:b0:89:46:
75:dc:08:93:a1:fb:a1:28:ed:56:f0:8d:4c:52:3d:
a7:17:08:b5:02:8c:d3:20:dd:a6:0a:eb:44:ec:57:
6d:aa:4a:ae:1e:e5:d1:06:f8:e4:e7:a8:86:aa:12:
c7:54:fb:5c:b5:53:0e:c8:74:aa:72:fc:63:20:d7:
5e:d4:4d:ab:23:c8:a2:db:ab:de:c8:c5:c7:39:1b:
8b:0b:73:ed:fd:b9:ae:e0:30:4f:ee:92:d5:22:dc:
e7:a2:c3:f7:ac:ce:60:61:1c:2b:f9:a9:f3:35:9d:
75:94:f1:fa:53:85:e3:5c:4c:aa:e4:fc:ce:86:66:
44:fc:f2:b7:31:5e:17:6a:da:8d:7c:86:ff:6a:c6:
0b:93:6a:c5:16:e9:59:f1:24:e7:e2:48:b8:39:76:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:AA:CE:8D:5A:06:8E:83:6C:0C:0B:1E:B3:BB:61:B9:33:80:55
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140CF9/5D94B572C32511F18F39DCBD6511F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140CF9/5D94B572C32511F18F39DCBD6511F970/Y1eqzo1aBo6DbAwLHrO7YbkzgFU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154993
sbgp-ipAddrBlock: critical
IPv4:
45.118.255.0/24
IPv6:
2402:7ce0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:3b:05:d3:e0:9e:00:70:24:c8:68:06:5f:c7:18:1b:3e:9d:
b5:95:ee:6f:87:de:69:78:e2:cb:83:8a:71:17:f0:78:d6:aa:
6c:86:88:3b:e0:67:d2:36:8b:67:b6:0f:08:39:a3:5b:23:2c:
f0:06:8a:ce:91:ef:e1:68:68:d9:ee:e6:88:97:7e:55:23:9c:
bd:46:b3:fc:60:56:35:cb:f5:c3:11:80:a1:89:f7:a5:0f:40:
b7:ed:1d:83:70:12:ae:ce:78:f9:2f:09:e9:91:32:22:f9:0d:
75:6c:07:a9:25:c7:33:f9:bf:43:22:d5:d7:7c:19:4b:29:ad:
2c:83:75:1d:f9:dc:04:0c:c5:5a:9f:8d:9a:f3:55:d5:88:ee:
d4:28:48:83:7d:48:fb:0d:c6:39:98:7f:f7:54:97:29:e9:2f:
c2:ee:6a:65:34:7a:f4:48:78:01:78:0d:ed:b2:a3:81:9a:b1:
08:b1:4d:cd:d3:51:7f:c5:d9:8a:8c:5c:64:3a:e2:2b:41:41:
51:2d:c4:b9:bc:72:0b:d5:0e:da:87:1e:4e:ad:a2:c3:22:03:
ec:5e:a8:13:b3:e6:b3:af:b0:c6:c4:c0:80:f2:6f:46:83:88:
cd:a3:c5:02:9d:ba:a8:0f:57:81:d5:8e:fd:f4:38:d7:3e:6e:
20:26:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:41:59 2026 by rpki-client