Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
File: hTkiUckhyp9RnbkRxagKd9_jVMQ.cer (raw, json)
Hash identifier: iWbU8NqZ6tk9lS4b3sxCzrIPfrrDq+6asrB9bejh//w=
Subject key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029D62
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:01:55 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 142200
IP: 2402:47a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171362 (0x29d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:01:55 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dc:68:97:82:a8:f6:9b:3a:de:8f:98:ff:ae:
d5:86:9b:1f:57:43:15:71:cd:c2:b4:68:a8:b4:2d:
f1:85:7d:57:fb:c5:b0:fc:69:2d:a2:ad:88:c5:50:
73:e8:77:a6:8b:4b:5c:ff:3e:b1:15:bf:18:c0:4e:
2c:25:7e:f1:ea:19:54:34:15:3b:57:45:43:4e:78:
92:a6:07:47:be:60:b8:41:f4:58:ff:68:98:f8:29:
7c:bd:e0:6e:ce:6e:ae:e6:cf:07:7e:c5:aa:6b:a2:
fd:ec:ac:4f:9b:fc:2c:78:f7:6d:11:31:ef:ad:68:
3d:f4:3d:0f:7d:fe:ff:d1:98:05:55:8a:13:80:3d:
a3:cc:82:c0:81:23:40:15:b1:67:92:32:1f:22:3d:
8c:2c:02:f7:85:84:c1:fb:70:4c:ff:37:bc:45:54:
38:cd:97:80:4c:0f:66:4e:20:fd:6c:41:1a:21:00:
0f:1e:40:3d:14:cd:a2:ac:b0:6a:9f:b2:65:77:bd:
6d:59:16:ab:4a:cd:ce:0c:a2:e0:d8:26:3b:68:be:
f6:ea:6c:d0:05:d6:4c:b0:a9:16:9a:19:75:6e:8b:
61:4d:53:2d:a2:00:29:02:31:42:0f:54:63:80:41:
2b:3a:1f:3e:eb:78:59:6a:e2:86:31:a7:39:5d:62:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142200
sbgp-ipAddrBlock: critical
IPv6:
2402:47a0::/32
Signature Algorithm: sha256WithRSAEncryption
03:d8:c0:2d:13:fa:60:29:7d:90:39:e0:4e:e2:d2:aa:e4:e1:
79:81:15:95:be:fc:4e:d3:9d:ac:f8:8e:3f:c4:54:94:10:ce:
7a:a3:51:b3:9a:38:d7:c8:d1:48:e2:80:1e:27:9c:7d:7a:d4:
7a:89:ca:b1:2e:0a:5f:46:ff:f3:84:4d:50:0e:d4:d3:d6:0f:
a1:12:a6:8f:d9:22:a1:0b:44:d7:05:e9:ab:4c:e9:75:13:51:
d0:10:30:9e:29:aa:39:7e:79:ca:6f:c2:89:cc:ce:41:28:1b:
ba:d5:9b:89:86:82:dd:2d:4d:85:53:25:3b:fd:ef:ed:6e:31:
bc:66:c0:af:64:e5:b8:56:52:41:e4:e9:4f:04:53:8f:b3:32:
b1:99:8b:fb:e5:c2:01:78:b9:fe:fd:9a:4b:59:23:b3:98:75:
6f:c3:8b:dd:57:ec:3f:f6:b5:ac:26:9b:b2:d6:0c:89:dd:c4:
e5:66:a1:4f:90:e1:ef:a2:41:44:17:e6:68:3e:4c:56:0f:2f:
42:20:c5:be:06:8b:41:e5:a4:29:cb:72:15:53:f8:94:b3:8b:
54:1b:7a:ac:bc:14:36:d9:22:46:94:16:6a:ec:bc:fb:2c:0f:
37:ff:18:71:aa:64:7d:ab:47:a3:bf:25:69:4e:5f:a8:18:20:
1c:ec:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:51 2026 by rpki-client