Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
File: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer (raw, json)
Hash identifier: NJHCHRUm9DSVvAZINwkDNj/mQ3R6bHNubsSQHEjBFaU=
Subject key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE61
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 06:33:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 153696
IP: 163.223.108.0/24
IP: 2001:df5:3bc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175713 (0x2ae61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 23 06:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:1b:60:31:62:ea:d4:df:a9:bf:d3:e5:6f:
12:33:a6:f5:8e:aa:ac:6e:7b:35:95:7c:9c:fe:28:
cb:5f:b1:7d:4a:42:4b:e2:9f:7a:17:70:5f:a3:68:
92:d6:cf:d2:ef:7e:0d:ff:95:26:c9:4b:48:e2:2e:
51:c7:77:01:64:da:b0:f7:d4:bc:75:25:00:c1:cf:
fb:e5:d8:1c:49:84:9a:53:8e:c3:d0:27:0c:ad:9d:
13:cf:08:76:89:1d:a1:b2:97:34:f0:3c:15:86:d9:
c3:af:6b:cb:66:7e:5a:2e:b0:ac:88:f9:bf:bf:9a:
fc:14:f2:f1:e0:0a:5e:d5:d6:0e:3c:bd:b9:7e:be:
86:e5:48:61:d2:6a:11:88:77:23:55:f3:1d:3a:7f:
e1:d5:59:64:6f:dd:b1:c7:f9:8f:b5:e7:ff:5f:28:
44:d2:12:dc:9e:30:76:ac:93:10:e7:13:9a:75:bd:
e7:5f:de:0a:75:ee:ad:ef:ae:22:8b:a1:2a:b9:13:
67:13:cb:8e:f8:bb:dd:7d:91:53:c0:6e:cb:7f:48:
53:c2:e1:54:6f:f9:cf:8d:d9:f9:93:08:99:9a:06:
bd:19:7c:89:27:f2:21:aa:f1:69:cd:1d:83:bc:fb:
50:da:41:f8:96:b1:eb:23:33:67:2c:df:24:76:86:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153696
sbgp-ipAddrBlock: critical
IPv4:
163.223.108.0/24
IPv6:
2001:df5:3bc0::/48
Signature Algorithm: sha256WithRSAEncryption
b4:95:48:de:be:37:0a:73:68:3a:81:f2:13:01:f2:af:3d:b5:
97:0b:58:6c:fe:af:78:7b:41:c4:6e:88:40:89:75:76:dc:58:
d7:79:85:58:e3:38:4a:d6:7b:17:c8:ab:93:3c:ae:c1:0c:48:
79:47:01:10:c3:55:f7:68:5d:ce:94:61:74:87:c1:5d:b4:b5:
49:6d:ff:d0:83:f0:b8:d0:f3:b2:b5:a4:40:eb:c9:f2:b6:94:
3f:92:83:c1:6e:42:43:38:38:bc:78:ad:0f:24:ef:48:89:52:
65:28:7f:15:de:2a:53:5f:97:e0:0b:3d:8e:2a:b7:ac:d9:24:
b0:f6:b3:7d:27:fd:6c:6f:64:b5:5a:9e:5d:6d:d0:fa:0f:3f:
50:7c:ee:9c:71:60:f7:7d:8b:a1:b3:25:43:50:58:9b:48:38:
19:b7:49:fe:e7:08:c3:d3:b9:59:cc:8f:e2:f2:37:6f:33:2e:
28:94:06:3a:22:71:e7:0e:e1:ef:66:fe:e1:6a:f8:d4:3f:74:
7f:e7:1e:0a:3b:e4:87:2a:7f:58:e3:01:c5:0c:42:9f:0a:88:
6c:8f:6d:bc:98:5d:99:54:81:90:b2:dd:80:12:d3:44:b5:b0:
74:6d:43:10:92:6e:bf:e5:8c:67:dc:8f:94:fe:79:a1:5a:0b:
70:94:4b:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:55:37 2026 by rpki-client