Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer (raw, json)
Hash identifier: cBFdk6jggu5hGg1veAsIE6jWF4NSTxKpYtQF7F39L+c=
Subject key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C811
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 14:38:01 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 38071
IP: 58.147.168.0/21
IP: 223.27.80.0/20
IP: 2401:7b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182289 (0x2c811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 14:38:01 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:70:7b:b9:59:62:af:60:72:17:12:fb:e9:
ff:d3:b2:c0:6f:64:05:69:18:da:f9:75:71:d7:63:
56:10:69:22:16:ba:70:a6:50:4f:62:35:b0:28:3e:
fc:47:67:e1:1d:f7:da:aa:f0:52:c5:dd:e4:4f:1c:
c6:72:58:52:c1:77:63:d3:49:a4:04:38:25:5b:a5:
82:f4:dc:fa:3e:98:a1:ab:95:7d:c1:c8:92:69:57:
a8:d8:ad:ea:03:18:d7:21:d4:dc:2a:1f:15:95:82:
7d:b1:40:cb:40:10:3f:ba:2c:01:98:28:db:27:27:
7b:e7:9b:77:73:f4:6e:fe:d0:b8:cf:35:ef:68:d5:
c5:1d:de:9f:1e:18:cc:37:0b:bc:cb:9f:db:ee:eb:
e5:76:eb:40:28:d2:ae:1b:5d:be:82:00:f8:52:06:
da:f8:f3:cb:b6:62:f7:4f:49:1b:fa:62:18:56:1b:
bb:b2:c4:fa:ab:79:70:bd:4e:29:48:5c:c7:17:7b:
c7:cd:fa:b7:97:09:b2:92:16:c9:65:98:11:57:ca:
49:9e:e7:fa:89:cc:49:b9:42:be:67:c8:e2:91:4a:
40:7e:70:89:a3:fc:40:71:42:ae:9f:74:f5:a7:bf:
5f:5a:c1:08:7a:ca:e6:4c:94:47:ae:ff:c2:d9:fe:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38071
sbgp-ipAddrBlock: critical
IPv4:
58.147.168.0/21
223.27.80.0/20
IPv6:
2401:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
d3:8e:0e:2c:e0:2c:0a:79:3e:7c:f3:b4:da:8f:32:a9:9c:08:
e6:89:41:14:74:b4:90:f4:83:17:1b:df:93:a3:93:17:8a:bf:
ee:98:b7:cc:eb:46:cf:1a:64:10:a1:50:f2:52:f5:4a:4d:06:
37:25:d9:fa:f4:6f:77:a5:0a:c4:d3:fb:41:ee:65:25:de:ba:
ad:ae:d6:9b:aa:43:b1:90:63:81:98:10:df:2e:fc:10:2f:5e:
71:40:35:23:88:15:dc:82:56:a0:f1:e2:80:61:64:43:ec:bd:
d3:93:f4:ad:2a:9f:c3:11:eb:97:b5:29:3a:c6:b0:1f:d1:0c:
8d:f6:72:30:8c:34:65:7c:cc:2d:dc:2f:60:6d:8d:24:f8:12:
36:ad:79:c8:76:cd:4b:98:16:e9:ff:53:8a:4f:e9:22:55:a3:
4e:1f:d1:6b:9b:5b:75:7a:0d:31:d4:ff:77:ea:11:9f:64:71:
bd:39:9f:6e:a0:d1:f6:aa:10:3f:e2:9f:9e:a3:de:54:f5:e6:
f3:fa:20:bb:df:44:25:5d:5a:14:cf:c8:e9:b9:af:44:40:87:
f5:c8:91:57:18:01:c2:ac:c6:98:b8:b5:d4:84:5c:1d:ca:c7:
ed:ac:8f:cb:1d:a3:e6:37:3c:a0:c3:f2:aa:5a:16:ea:80:c0:
01:d1:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:24:04 2026 by rpki-client