Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer (raw, json)
Hash identifier: 7QQ9TrIuWdOocZ4SBvDj08cZ4RrxSWR1R83qNqWuo3Y=
Subject key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F57
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:10:39 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 56033
IP: 121.100.56.0/21
IP: 2406:500::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171863 (0x29f57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:10:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:e6:e7:01:e8:dc:8c:4f:fd:2f:ef:e3:ca:
45:4a:8f:ed:7d:5d:49:ca:8a:de:50:e1:f4:2a:a4:
4a:16:85:87:5f:16:d2:dc:06:54:bc:88:69:05:97:
d5:b3:c0:e1:3c:02:51:42:f8:3d:7d:69:34:06:4d:
0b:d1:a0:41:a8:c3:c1:57:a2:ca:31:e3:c2:6a:98:
f6:ea:f8:87:70:0f:c1:06:5c:8d:45:9e:f0:85:a9:
70:0e:67:48:e8:98:f9:09:61:75:01:04:7d:03:d7:
44:e3:99:4f:f8:80:bb:2c:70:24:c5:95:1d:dd:ab:
b7:7c:70:c9:fb:81:8a:04:95:9a:26:f0:a8:f8:40:
2e:1a:ca:39:bc:f8:db:85:70:9a:99:d1:b0:9e:8a:
bd:71:69:6a:22:83:56:ac:35:ae:61:dc:54:3c:25:
b5:01:10:52:4d:9e:24:be:ba:c2:cb:04:39:94:ce:
f3:00:42:3e:27:27:83:b4:a6:44:6a:35:cb:ef:9a:
78:c0:57:a0:c2:80:8e:c8:0c:95:ee:2a:62:5c:ad:
80:35:1c:c9:90:1a:7b:60:a8:7d:22:f0:f2:33:42:
7b:af:17:29:a9:f8:e6:8b:04:ee:cf:6d:63:b7:1f:
41:ed:1f:1f:4e:2f:cb:12:5d:25:f5:6f:29:dc:92:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56033
sbgp-ipAddrBlock: critical
IPv4:
121.100.56.0/21
IPv6:
2406:500::/32
Signature Algorithm: sha256WithRSAEncryption
33:f5:8a:57:de:54:27:f3:67:23:3b:cc:9d:cf:45:ed:01:91:
b9:29:01:30:a0:14:b5:f3:b7:dc:9f:c8:fe:7a:55:d7:41:84:
11:0e:96:80:53:1e:70:62:90:9a:28:dd:2d:48:98:7f:e5:99:
ac:3d:02:61:42:c4:72:a7:09:25:29:6c:06:74:fa:1f:9b:5a:
2d:50:a3:1a:f7:fc:83:69:9c:21:0b:53:6f:73:52:5c:bc:f5:
81:42:97:3f:20:3d:76:9b:6b:e0:80:62:f4:1c:eb:67:3c:f9:
5e:3d:c9:7d:89:ea:3d:ed:5f:74:fa:66:64:44:5e:da:50:f4:
0d:15:95:2c:27:2a:ca:83:1f:68:60:2a:15:d0:9d:a7:92:20:
13:c1:0f:e2:3b:92:f4:98:c3:04:0d:8c:54:7a:53:a3:b8:40:
e9:06:c5:48:32:38:5e:08:dd:7d:17:11:c8:98:54:5a:40:0d:
85:bc:fb:d3:72:d6:3a:fb:3f:55:cd:64:a9:13:93:3d:73:2f:
05:92:0a:71:13:e5:58:b1:02:93:fd:0b:d9:11:4f:4b:42:b9:
35:de:84:fc:31:cb:1c:a0:8a:67:e0:06:81:ec:e4:d2:d3:78:
49:38:61:43:c6:29:91:9e:2d:b8:b8:fd:a6:c2:58:97:9e:5b:
1d:7a:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:12 2026 by rpki-client