Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bSeEzXXU6YPtlKEwCYD9QUT0HxI.cer
File: bSeEzXXU6YPtlKEwCYD9QUT0HxI.cer (raw, json)
Hash identifier: xKgcyOk3X9nRmvJENTKowzBlCQIDe4xDjs54o2UjBRQ=
Subject key identifier: 6D:27:84:CD:75:D4:E9:83:ED:94:A1:30:09:80:FD:41:44:F4:1F:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DDFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD895/4D3B731EC79E11F1929A161E4511F970/bSeEzXXU6YPtlKEwCYD9QUT0HxI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD895/4D3B731EC79E11F1929A161E4511F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Oct 2026 07:10:17 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: AS: 155005
IP: 45.248.176.0/23
IP: 2001:df7:adc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187898 (0x2ddfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 14 07:10:17 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A91DD895, serialNumber=6D2784CD75D4E983ED94A1300980FD4144F41F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:72:c5:33:d1:fe:7f:68:b0:14:66:e9:91:
c5:88:70:b1:f7:c1:fb:93:ae:0d:fa:19:96:87:d2:
af:ad:bb:42:74:f8:60:9d:9a:6b:61:ba:dd:1a:92:
8a:79:8d:bb:ef:e0:cd:9b:5b:bc:62:e3:f5:03:4a:
83:ca:ae:8f:b0:b6:9e:62:fd:33:0e:24:76:37:5b:
97:ba:62:8a:1d:e9:e6:09:e3:28:47:00:7c:8d:6d:
99:79:6c:b6:62:05:49:f2:36:a7:e9:d7:42:50:8a:
b0:5f:ab:45:89:e7:00:70:43:45:b3:91:38:2e:48:
e5:0d:2e:1e:a2:ba:dd:21:9e:b3:ef:77:f1:c5:5c:
23:12:29:c2:fb:f4:22:bf:e3:2e:29:12:35:96:e7:
9d:d3:a6:7c:68:a7:d5:f3:5a:7e:b9:1f:dc:a5:4a:
f8:83:2e:38:cf:11:a6:9d:38:08:5d:04:0c:73:d6:
cf:c3:40:35:6f:fd:d8:1c:d6:0c:09:de:ca:60:c3:
ea:ce:06:41:e5:41:92:61:0b:78:42:e2:b9:77:84:
0c:8c:16:aa:3e:96:88:d3:a5:05:62:fa:76:ab:0c:
d3:10:7b:91:b6:0f:6d:e9:80:bd:dd:b5:b4:6d:75:
f4:54:b1:66:a8:6b:82:ae:c7:25:05:7a:3a:bc:b7:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:27:84:CD:75:D4:E9:83:ED:94:A1:30:09:80:FD:41:44:F4:1F:12
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD895/4D3B731EC79E11F1929A161E4511F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD895/4D3B731EC79E11F1929A161E4511F970/bSeEzXXU6YPtlKEwCYD9QUT0HxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
155005
sbgp-ipAddrBlock: critical
IPv4:
45.248.176.0/23
IPv6:
2001:df7:adc0::/48
Signature Algorithm: sha256WithRSAEncryption
d3:3c:10:e1:be:b9:73:c4:4c:4b:26:a2:a8:07:5d:9b:0c:37:
14:37:82:c3:36:1d:ea:d3:9e:95:3b:9e:85:b6:65:1f:60:69:
86:25:b9:c6:20:fa:83:6c:53:d6:bf:98:48:45:fc:4a:12:7d:
e6:f4:ae:b9:6b:90:4b:97:a1:5f:0e:d0:82:8e:0b:6b:45:19:
6c:12:1b:d2:00:1e:03:15:1a:3a:cd:aa:80:58:14:75:78:d5:
73:80:01:41:57:ab:b2:3b:ea:7f:24:03:49:f4:f6:97:19:54:
40:37:21:9b:bb:4e:de:b1:fb:8b:1e:f1:2d:31:7a:70:1e:43:
50:5d:a8:60:d2:fd:ad:ac:5b:b5:7d:6f:1b:1a:90:55:57:e4:
fd:75:dd:d8:f5:68:aa:8f:96:18:09:5a:be:0f:b9:4a:d8:03:
22:6a:58:8e:53:f0:cc:3a:12:ba:f4:e0:77:9d:07:90:3f:5d:
ca:2d:d5:23:c1:d8:52:f5:53:55:66:fa:59:5d:42:14:14:56:
0c:ae:bd:83:5e:05:c5:2a:cf:33:68:be:5e:20:8f:b3:89:c7:
98:87:f7:1d:76:28:29:1b:32:53:12:62:b3:1f:33:f1:38:c0:
bf:a8:6d:17:f3:7a:11:d7:20:29:fa:14:ef:f2:67:34:93:0c:
a1:6b:a7:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:10:07 2026 by rpki-client