Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer (raw, json)
Hash identifier: VDifFebRLUDPZJwubXS+FCCiWYt5ln+GFaX1pruGU6s=
Subject key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB1A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 14:25:11 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 153581
IP: 163.61.96.0/23
IP: 2001:df5:11c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174874 (0x2ab1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 8 14:25:11 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:52:45:b5:e9:27:e2:b8:ae:09:02:9d:82:
88:43:df:9f:ec:89:66:5a:01:68:75:15:91:42:8f:
3b:01:0c:3a:01:28:16:dd:e2:9f:f4:4f:38:65:7f:
db:d4:df:2b:c9:79:09:d9:fa:8a:fe:24:ed:42:04:
79:a5:e0:3f:91:c0:75:a6:5b:a5:09:d2:f2:ed:2e:
b7:a3:06:2c:88:12:19:a4:27:7d:6b:e9:f5:40:23:
06:9f:f8:3c:39:e5:77:ec:71:c5:74:a7:b6:71:4c:
97:3d:db:e5:69:31:00:d6:d9:5c:f6:2e:95:d9:20:
e0:46:fb:9b:9b:d0:04:25:1e:6b:86:68:4c:ac:a5:
f6:46:d0:2e:1c:00:62:60:53:45:8c:84:ee:7d:8d:
a6:a8:6f:3e:e4:d5:bd:a4:0a:2a:b4:fe:38:29:02:
b8:c2:7f:b2:33:70:4e:25:72:f9:0e:67:8b:1a:a5:
55:ae:9d:49:90:5d:11:2f:34:a2:7c:15:03:ae:b1:
09:bf:eb:07:6d:02:07:d1:9e:e9:89:50:67:40:9b:
2d:19:ec:30:0a:6c:ac:9e:78:81:ae:1a:05:2f:2f:
60:dc:be:c1:fc:8a:1c:88:7e:16:a4:e2:33:cc:10:
58:79:ca:2b:a2:89:ed:f8:51:58:80:af:3d:8d:a5:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153581
sbgp-ipAddrBlock: critical
IPv4:
163.61.96.0/23
IPv6:
2001:df5:11c0::/48
Signature Algorithm: sha256WithRSAEncryption
41:30:98:5c:ce:8f:8d:d1:8e:68:9f:3c:11:a4:64:7c:a2:f5:
0b:b5:86:62:60:e3:a8:a9:c8:5e:9c:48:7a:91:e2:7d:98:c6:
ae:d5:be:11:5a:2d:7b:7f:98:ff:3d:16:e4:1c:ee:29:c0:d5:
12:e8:ec:f6:4b:61:ce:ab:31:cd:a2:c9:b9:3b:e9:4c:bb:b5:
a9:36:6a:a0:47:c4:52:d3:28:a8:3d:f2:34:3c:f3:a1:60:92:
a9:f0:c5:3c:82:ca:3d:18:01:87:1e:63:cf:01:0b:da:3c:d3:
59:62:d3:d5:55:3a:1b:26:42:b1:8b:e4:40:a5:99:9f:c3:d7:
a4:eb:23:1f:d8:fd:47:e4:95:1c:43:e9:66:74:39:e7:62:c8:
7c:80:f7:a6:1b:75:d3:2e:96:2a:42:21:83:fc:18:98:96:73:
48:04:90:5c:7b:c8:d9:33:e6:11:91:be:38:60:66:ba:a0:2a:
bb:71:5f:83:cd:85:8f:0f:76:cd:6e:de:56:62:07:b1:a5:54:
70:0d:2f:46:58:ed:4c:2d:7a:64:ff:20:0b:11:fb:d0:ee:18:
5b:85:99:4e:06:ce:9d:66:0b:02:c1:a3:b4:df:38:9e:68:e2:
78:40:a4:41:ca:e7:c8:27:e5:3f:6d:d4:94:19:0a:3d:62:98:
39:42:c1:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:17 2026 by rpki-client