Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
File: asoRKbI4x6HxeRt1zUmta9at-nc.cer (raw, json)
Hash identifier: veegGjziogR0uldDP02IBcPuKT8uHW54Y0gBj7OZwCs=
Subject key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029E72
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:06:39 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 153529
IP: 2001:df4:efc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171634 (0x29e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:06:39 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:4e:98:34:bd:e8:27:3a:0e:d9:fd:e4:48:
89:ca:ff:b3:c3:0e:f4:bd:ec:c0:52:52:24:e0:04:
0b:f5:3e:f3:19:fc:4b:d5:42:3f:c5:61:39:ab:01:
a9:ee:ae:b1:13:d5:f8:1e:54:54:71:a4:e7:e4:c0:
51:67:98:74:10:04:9a:3a:95:c7:26:d8:bc:ad:68:
9f:f1:b6:27:89:95:66:81:8e:c3:ef:9c:74:e6:0f:
cf:8a:cf:e5:3c:10:44:06:50:c5:75:21:2a:76:98:
22:62:ec:43:23:4d:9b:41:40:08:69:dc:7c:47:6b:
d1:63:1e:a1:fa:6f:c5:63:1d:21:b0:fd:b1:08:08:
11:22:ec:77:4c:88:cc:1b:7b:81:b2:b5:5d:d0:76:
7e:f7:6d:e2:29:63:bc:be:95:81:74:95:1a:73:07:
91:58:a2:9f:63:de:5b:ef:92:66:6e:46:6c:0c:99:
e8:27:3c:08:0b:4d:9d:c0:dc:38:63:c9:66:c4:5b:
ae:7e:74:ce:61:c6:95:f2:c6:4e:91:21:13:a1:2e:
42:fb:b0:b7:26:81:3c:28:3f:03:86:e1:a8:5f:f5:
31:9f:ed:f3:09:48:3e:e3:c8:86:0e:c1:dc:09:ae:
75:c4:be:74:04:ca:c0:1f:ce:2f:39:87:e5:85:ad:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153529
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
d4:51:67:7e:91:61:df:70:5f:e7:24:e3:ea:90:d0:7b:f0:3a:
cf:c3:04:e6:1a:ba:6c:80:07:c3:d4:bc:b2:5d:b7:f8:b6:9d:
90:27:a9:44:cb:c4:e7:e8:cf:7c:5c:ce:b6:67:91:99:69:b9:
44:f3:d1:98:ef:c7:d6:07:32:95:03:a8:05:66:05:8d:d7:12:
d4:3c:b2:db:02:3b:9c:16:21:5c:27:04:b1:3c:54:82:cd:29:
8c:2f:47:c9:14:db:ee:9e:87:72:ab:a0:5e:2e:44:b9:e2:fd:
1a:47:cc:fc:97:83:c4:e7:f1:4e:66:a6:60:90:34:4b:f1:54:
54:e5:0a:7b:e7:56:e4:fb:ad:11:6a:f8:97:27:37:e4:44:cf:
58:da:44:1a:db:33:2a:0f:cb:da:0d:20:db:29:51:59:ed:90:
9a:c2:b1:d9:3f:af:5a:3f:66:7a:f4:37:e6:4b:be:32:8c:88:
00:0f:58:2e:21:29:ef:cc:09:68:cc:bd:d3:a4:7f:39:83:ca:
88:dc:e2:87:47:3e:af:b3:d4:b2:b2:75:3a:57:45:fd:ca:04:
78:bc:c1:86:f2:f3:41:02:e9:60:22:7c:be:3a:29:6a:31:91:
7b:97:ec:bf:3b:1f:7e:89:aa:4e:c3:47:8d:8c:fb:12:21:ea:
53:52:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:50 2026 by rpki-client