Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer
File: hNLiPvClu7C9V4ERjF7OZYdw0PM.cer (raw, json)
Hash identifier: 5HZgAqn2aaI/CcJqHsHfOao9urfSrYb3mVz2OrKE/ZY=
Subject key identifier: 84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B5BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 May 2026 06:15:53 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 203.28.90.0/24
IP: 2001:df4:99c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177594 (0x2b5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 20 06:15:53 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9118572, serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:b3:c1:8b:9a:bb:9f:6c:76:1f:30:9f:7b:
37:fb:34:cc:f2:3e:e1:9a:5d:91:59:c1:1b:ed:77:
b8:c5:60:cf:31:48:a2:31:37:d0:6e:5c:ac:ba:d9:
ad:50:03:f8:fd:e6:10:ce:0b:af:d7:f2:12:f9:62:
9f:0a:41:4e:98:01:56:fb:39:d9:84:e7:81:fa:3b:
61:3d:93:04:bd:58:73:2a:34:15:13:04:85:ad:34:
ec:a1:1a:d5:f0:57:4e:3f:b4:45:10:83:aa:7b:e9:
13:b6:7e:23:f3:b1:a1:a0:75:22:95:17:fb:6b:5f:
02:92:74:5a:8f:a6:d5:94:79:a8:c6:af:3d:25:b7:
06:cc:c8:b6:fc:7c:56:97:39:0d:0b:24:ba:99:d6:
31:35:8c:50:f5:a4:d8:5d:eb:ba:06:1d:4c:2f:9a:
30:fd:c4:e4:2b:2b:8b:f4:3e:26:50:26:fd:6a:43:
f7:1c:85:d8:d1:e0:e6:b8:36:9e:1d:4f:21:76:3e:
af:b1:19:d8:1e:91:4b:ce:3e:df:b6:4f:1f:87:ac:
d3:1f:f7:df:72:d2:d6:d6:74:ad:b3:c1:30:18:55:
76:a1:a5:31:fd:d1:99:36:d5:46:9b:ee:4f:07:c6:
29:b2:3f:95:1f:60:22:89:32:c9:c5:0d:b8:c9:99:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.28.90.0/24
IPv6:
2001:df4:99c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:e1:8f:d7:2f:f8:fb:1e:14:ef:f2:c0:fb:15:41:34:12:85:
c5:2d:de:3e:44:47:e3:6b:b1:b1:60:a7:d4:7e:76:be:4b:59:
08:81:85:1e:24:93:e0:fb:93:20:43:2a:cf:76:6d:05:52:b9:
d4:51:09:a1:ec:ef:75:ed:70:1c:fb:8e:8f:6e:6d:cd:a7:2f:
92:c4:ea:82:5c:f5:f5:b4:7a:9e:c7:3a:00:57:20:20:5d:f4:
07:dd:3d:eb:36:80:59:02:42:d1:3f:22:61:12:09:72:8f:bb:
31:18:82:be:3a:88:31:c8:3b:ca:69:1b:b3:2b:73:d8:a7:33:
0f:ab:2e:d6:39:23:ea:b5:90:3d:7d:dc:b0:bc:60:b0:f2:85:
df:56:3b:51:2c:cd:44:87:b8:41:d5:55:7b:8f:15:d6:27:e3:
b6:a5:35:52:bb:6a:78:13:67:78:d1:51:0e:a6:2d:4d:5c:0e:
a8:c5:0c:1e:09:3a:d0:9e:55:12:19:42:cc:2e:64:2d:9d:ed:
ae:07:24:24:6f:c5:91:c1:47:cd:b1:02:b8:60:37:10:f6:cf:
18:9d:a3:68:b2:77:b6:8f:f2:cd:a9:51:19:37:86:18:7c:7c:
42:17:3c:59:09:c3:4e:1d:68:a8:92:da:e6:72:8b:ee:7c:a1:
6a:93:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:32:47 2026 by rpki-client