Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.cer (raw, json)
Hash identifier: 6dWyQGJtuLzycLDFZBJIW5vJlyC96BAxC0SkOMEanlw=
Subject key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029C24
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:56:05 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 141383
IP: 163.61.8.0/23
IP: 2001:df4:ffc0::/48
IP: 2402:4c60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171044 (0x29c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:56:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:95:3b:ce:22:00:a0:57:01:07:be:3e:35:
23:b5:14:65:1c:e1:9f:f2:4b:e4:be:a8:1b:c5:63:
9a:0e:88:48:2f:31:89:5b:bf:92:7e:cf:08:96:da:
0b:60:12:e5:bc:78:e5:10:3f:da:82:ce:ee:72:7e:
af:6c:43:8b:38:5b:72:4c:36:cd:cd:44:15:8d:cf:
02:ab:e9:61:ef:ce:68:61:6b:8a:34:6f:ee:5e:17:
dc:59:b6:59:3b:6d:c0:ea:e2:95:bd:05:e1:5e:b6:
e7:aa:14:15:da:91:2b:69:d6:93:4f:d9:f3:27:43:
fc:ed:2a:c4:7e:aa:d9:cb:cd:ae:23:d5:3e:58:5c:
6d:06:9c:5e:73:96:ea:6a:97:db:0f:c8:dc:63:b8:
24:71:f9:6f:af:ad:2d:18:c5:a8:f2:af:4e:69:32:
9c:19:00:d9:5a:90:83:82:01:a0:ea:54:be:8c:1f:
5a:de:a9:60:41:4b:62:ee:08:e5:d4:26:2c:20:e6:
77:74:54:32:28:47:00:92:eb:30:2a:c6:12:dc:75:
74:47:df:77:94:d6:f6:a5:17:9a:ba:86:51:8d:cb:
ec:42:5e:f9:a9:e7:8a:1c:53:25:10:d0:01:4c:d0:
30:0b:b0:96:1c:39:17:ac:ce:8d:74:1c:61:27:e9:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141383
sbgp-ipAddrBlock: critical
IPv4:
163.61.8.0/23
IPv6:
2001:df4:ffc0::/48
2402:4c60::/32
Signature Algorithm: sha256WithRSAEncryption
54:8e:96:43:2c:fd:b1:8f:59:21:20:cf:39:ad:8f:7e:08:39:
72:e9:64:ab:4d:19:55:1e:5f:eb:a7:5a:3d:66:80:9e:3b:51:
60:4d:52:c7:57:38:bf:2f:df:8a:c3:78:60:d8:0a:61:1a:6e:
62:ef:16:79:a6:54:0d:f7:3c:33:8a:df:ef:cc:28:b1:0a:31:
3c:08:a5:0e:da:87:65:d9:7d:62:30:37:78:90:84:a6:ad:0c:
95:37:63:a0:e8:7c:79:7c:69:9d:97:e3:9a:84:08:e4:05:a9:
aa:e4:9a:1b:bc:e0:4e:7b:c3:ba:24:dd:36:72:f3:4a:7a:81:
11:83:18:4b:79:e4:1e:89:82:79:cc:01:2f:5e:52:ac:9d:77:
ce:6f:33:a1:ad:73:11:10:df:72:29:8b:dc:0a:ab:13:f1:54:
12:e6:21:ce:81:f4:04:1b:7f:9f:fc:47:b7:5a:b6:61:42:68:
39:08:90:5c:6c:6f:8e:30:7d:3d:e4:45:e6:c8:9c:43:51:04:
17:9f:8d:3b:d7:db:bd:27:2f:4a:73:3d:58:73:f0:bb:ca:14:
8e:4b:bb:d7:6b:d5:01:bd:6d:1e:01:3e:44:68:e8:45:8e:8f:
ee:82:72:6d:30:a8:ab:99:d3:73:15:8a:b7:75:64:12:8c:8c:
06:5c:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:03 2026 by rpki-client