Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
File: aaMtc-A4ow1HrKzrgc1zEq91Ork.cer (raw, json)
Hash identifier: GFYbdDekDnkE1GKo9SkRjmY4FnJ6UrYmMuqiyvuxxIs=
Subject key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A706
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 28 Mar 2026 14:22:41 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 152643
IP: 202.37.46.0/23
IP: 2401:fa60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 13:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173830 (0x2a706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 28 14:22:41 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:4d:1f:58:fa:08:b0:2b:67:7c:93:b5:f2:
04:bb:04:81:ee:48:0b:07:e3:df:bb:f0:5b:4f:5e:
69:12:e6:8e:2a:c4:2a:04:ca:6d:38:ab:76:bc:d4:
16:8b:92:ea:09:b8:31:34:fc:7a:c8:5e:bc:3e:11:
14:15:81:89:3c:97:75:22:ae:a1:95:61:23:2b:6e:
17:69:5e:49:6e:8e:96:03:7d:bf:69:f5:93:f2:25:
c9:40:da:8c:7a:69:70:08:42:f9:d5:89:40:73:fa:
8f:51:36:fa:c9:98:2a:8d:60:03:f2:cd:37:b0:bf:
c7:77:70:60:29:d0:ca:37:d5:f0:9d:01:19:9c:f3:
af:0a:1c:e1:a0:55:74:8c:e7:4d:be:8b:0b:ea:a8:
8c:17:51:9a:4b:58:75:36:4a:81:80:09:bc:2b:fe:
91:d3:d6:a9:4f:50:ad:2a:f3:d3:12:06:f6:bf:b0:
5d:c7:96:4b:43:5c:64:5b:81:e3:86:af:cf:12:32:
58:a2:ba:2e:ce:6d:d3:0a:62:dd:36:46:00:3f:8b:
e6:7b:51:5e:5f:49:c2:06:2e:12:4a:93:f2:21:5c:
c8:98:87:a4:1e:ab:8c:64:13:a6:79:45:b7:36:9c:
df:8c:03:31:4e:64:77:4a:b6:73:59:50:ed:30:74:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152643
sbgp-ipAddrBlock: critical
IPv4:
202.37.46.0/23
IPv6:
2401:fa60::/32
Signature Algorithm: sha256WithRSAEncryption
81:8f:2b:6e:fb:a7:59:b3:16:f3:16:c3:a6:3c:ac:0a:9c:ae:
ce:22:fa:e3:6e:c6:0e:8d:56:c0:2f:59:86:b3:0c:bc:2d:06:
80:3d:d8:76:2d:a9:ef:c0:4b:00:b5:c5:10:f5:5f:7b:04:20:
ed:64:0d:dd:60:6c:56:ea:cb:71:de:bd:8b:2c:97:06:5b:d4:
2c:2f:11:ee:c8:f7:c4:c4:5a:46:22:de:9c:d6:58:68:fd:04:
4b:77:4a:b2:10:e7:22:5e:39:ae:07:90:51:e8:1c:f0:84:4c:
fe:b5:eb:41:e3:15:78:1d:2c:d5:c1:6c:e5:2e:3b:73:c9:98:
92:ef:ec:e5:78:16:3c:57:42:a4:b9:c9:97:33:92:9f:df:ad:
a4:5f:16:68:60:0f:9a:7e:66:46:91:95:54:d6:4f:be:72:53:
3c:da:a4:6d:e6:06:de:29:5e:cd:ee:79:29:09:cb:90:81:d2:
e4:63:49:bc:db:fc:f3:1a:df:c0:d8:ff:e3:55:44:ff:cf:19:
f7:7c:ba:38:12:03:dd:04:64:02:75:c9:d0:14:34:41:2b:a1:
5e:df:17:b9:2d:24:a2:a4:6d:e5:58:bc:cb:08:5e:f5:4c:bb:
bf:cd:de:4a:fe:63:11:fd:d4:99:0c:a8:3e:f6:86:86:67:5c:
18:9b:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:03 2026 by rpki-client