Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer (raw, json)
Hash identifier: MvTXdYT56Xz/RjANmuv+Kkk3diTl1DZUsQFsa7EFLIM=
Subject key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DED4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 17 Oct 2026 06:01:45 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 153340
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 10:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188116 (0x2ded4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 06:01:45 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:1c:a5:08:08:c6:90:4f:ca:ec:75:fe:93:
fa:e7:84:ce:f5:aa:f6:40:1a:f3:b7:42:21:08:99:
5b:38:bd:6d:c8:5a:38:59:8a:cb:ce:ff:50:f2:4b:
19:2c:17:62:db:f9:14:75:8e:ad:34:2c:f6:df:ca:
e4:6d:45:93:11:dd:4c:80:91:f0:2b:f9:ab:61:f4:
9f:2e:cb:ae:1e:52:b0:f4:17:d3:be:fa:64:eb:61:
99:e1:41:64:27:11:37:d5:49:2f:ee:da:33:86:be:
fe:94:cb:dc:a0:1e:35:5c:4d:86:61:9f:f2:55:bd:
b7:a8:c9:f8:fe:65:0e:51:21:e9:89:3f:2b:47:b7:
1d:ab:54:a8:06:f8:3a:f7:29:4d:f9:59:c2:1f:d9:
b4:43:b6:eb:0c:bc:54:f0:ab:73:81:99:21:c8:40:
7e:9c:ba:fe:8b:48:55:f2:4f:55:41:91:1b:f0:d9:
dc:a3:a7:9d:f3:c5:7a:8f:cb:93:36:16:2f:32:bf:
4c:fe:fa:27:f8:33:4c:34:09:8e:1c:90:d4:f0:b5:
46:83:8a:24:73:04:19:f2:ca:f3:aa:54:c5:16:29:
cc:3f:70:58:42:24:3a:2c:ea:c5:62:ad:e3:d7:e4:
4b:d6:41:59:c6:56:89:08:66:12:41:7f:93:e9:a7:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153340
Signature Algorithm: sha256WithRSAEncryption
90:8f:17:01:4d:4e:d6:d9:f3:62:5e:6c:92:f6:77:34:76:97:
f7:1c:52:a4:4c:42:85:8e:07:19:b9:03:3b:2d:34:e0:d4:74:
40:07:c6:84:66:4a:d0:c3:5c:00:da:9b:cc:55:87:6d:d0:76:
7e:34:00:f3:e5:6f:dd:10:a3:bd:96:26:f1:e4:51:54:3e:10:
69:7e:b5:db:2a:85:68:86:0d:d6:cb:60:20:74:1b:76:63:66:
08:84:29:f8:f4:e6:9a:81:41:b9:bf:9a:24:79:3a:cc:e1:84:
6b:11:cc:38:6f:05:6a:a6:87:23:e2:7c:bc:51:8e:73:6d:01:
ea:d3:7e:a9:7e:62:a4:30:97:2a:58:ec:d9:3c:21:d9:d2:f8:
2c:16:de:83:f0:5e:12:66:7c:9f:35:e8:2e:41:b3:2d:2a:46:
46:6f:77:9e:d8:13:c1:0b:bc:13:c8:f4:7d:c9:93:90:7d:1c:
18:4d:dc:c7:bc:c9:a5:3e:d9:f5:3f:61:7d:97:78:f2:0c:22:
4d:b8:d9:d9:d7:55:5e:c9:ad:57:6c:6c:36:88:34:a8:dd:08:
d7:1d:c8:45:06:56:5e:68:b8:72:9b:65:93:72:cb:af:64:db:
91:8b:96:96:d5:5c:6d:b4:5c:8b:93:4b:89:c8:af:1b:b2:3e:
62:98:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:50:37 2026 by rpki-client