Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
File: hYu8kCwHf24DE67cSds25v7yNLI.cer (raw, json)
Hash identifier: +CoF+jWVUMFarDTy3nSbOIsBQfzrhnCPQftVvKWXKzM=
Subject key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029DE5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:04:17 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 142551
IP: 2001:df6:81c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171493 (0x29de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:04:17 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:63:c6:29:1d:52:e5:6e:4c:06:2c:72:96:
8d:1e:6d:25:5d:5f:1f:a6:48:ee:da:d4:71:54:2b:
4f:90:a5:10:94:6f:51:1b:d7:6f:b0:8d:90:c2:ab:
17:52:26:53:ba:53:b3:4d:8e:e8:fe:8a:67:eb:12:
41:aa:d3:6b:7d:84:62:68:79:03:5d:bf:0b:60:e9:
c8:ad:51:35:51:fc:8a:2f:e0:fa:7e:ae:fc:cb:c9:
e7:eb:5f:54:db:d3:4f:c4:48:f9:88:51:a7:d5:dd:
c3:d0:d9:0e:b6:84:a9:34:0d:ac:89:11:96:df:c4:
11:2b:2a:06:f7:23:06:91:b3:ca:21:d5:64:78:eb:
5d:e2:1f:77:30:12:c8:9f:25:17:38:bf:f3:b5:bf:
2c:53:89:3e:21:e3:6e:79:29:c2:24:44:05:da:3a:
7d:1b:08:27:b1:4e:95:13:c5:64:10:30:de:70:e6:
75:1a:f8:4d:8c:26:c9:23:3b:5b:db:98:4a:74:4c:
6b:a8:ff:e2:0c:29:62:a2:f6:6e:71:33:fd:52:a2:
c0:7d:5a:2c:1c:11:67:b0:11:bf:42:7b:46:06:21:
3e:98:1f:ba:52:ad:80:55:56:78:42:35:5b:c5:fb:
9b:57:d2:4f:ff:6e:14:c5:2a:49:cc:7e:c3:c5:53:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142551
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:81c0::/48
Signature Algorithm: sha256WithRSAEncryption
84:65:78:29:de:3d:89:c7:6a:3c:5f:8f:c8:40:d7:ec:bf:c2:
88:33:ca:a4:f7:52:e4:48:99:79:44:4a:ec:b2:5f:74:aa:3c:
0e:50:18:6c:f5:07:37:e8:79:74:e6:f4:b9:a0:39:d3:20:ea:
00:29:df:50:13:e7:bc:af:c1:66:cb:c6:08:a0:6f:30:0e:59:
e5:f3:cf:cd:14:fc:e0:b2:8a:c6:5a:1d:89:ac:69:70:c9:70:
69:0e:c1:94:a3:61:f5:98:fb:37:de:36:44:14:58:51:f6:24:
9f:16:cb:42:33:b7:11:ab:84:37:ad:59:da:db:be:86:e9:8a:
cf:fe:43:8c:24:a3:c0:ff:5a:ce:12:81:52:df:a0:d9:d7:01:
e4:3e:a6:11:6a:5b:01:49:1a:3a:a1:e4:8f:ff:7c:be:07:3b:
11:f9:33:76:02:3a:45:91:77:57:2a:cf:84:4c:d1:59:8e:3c:
7e:b1:8e:97:5a:fe:4c:38:b6:e8:9d:99:06:8f:1c:82:07:25:
e3:d8:7d:ef:ba:51:97:63:88:68:c9:e0:8d:a5:be:75:6f:4b:
6f:16:19:be:b2:51:1d:fc:33:51:1f:5f:8d:a7:ed:37:74:91:
ab:ab:58:8c:b6:9e:c8:e8:22:bd:a3:c1:59:17:08:9e:96:85:
d0:b4:37:83
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAp3lMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzA0MDQxN1oXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREUzMzQxMTAvBgNVBAUTKDg1OEJCQzkwMkMwNzdGNkUwMzEzQUVE
QzQ5REIzNkU2RkVGMjM0QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3vGPGKR1S5W5MBixylo0ebSVdXx+mSO7a1HFUK0+QpRCUb1Eb12+wjZDCqxdS
JlO6U7NNjuj+imfrEkGq02t9hGJoeQNdvwtg6citUTVR/Iov4Pp+rvzLyefrX1Tb
00/ESPmIUafV3cPQ2Q62hKk0DayJEZbfxBErKgb3IwaRs8oh1WR4613iH3cwEsif
JRc4v/O1vyxTiT4h4255KcIkRAXaOn0bCCexTpUTxWQQMN5w5nUa+E2MJskjO1vb
mEp0TGuo/+IMKWKi9m5xM/1SosB9WiwcEWewEb9Ce0YGIT6YH7pSrYBVVnhCNVvF
+5tX0k//bhTFKknMfsPFU8ovAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUhYu8kCwH
f24DE67cSds25v7yNLIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURFMzM0L0M1MTI2Q0NFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERTMzNC9DNTEyNkNDRUU1NzkxMUYwODM2RUVBQTE0MTZGNTZCQy9oWXU4a0N3
SGYyNERFNjdjU2RzMjV2N3lOTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAizXMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9oHAMA0G
CSqGSIb3DQEBCwUAA4IBAQCEZXgp3j2Jx2o8X4/IQNfsv8KIM8qk91LkSJl5RErs
sl90qjwOUBhs9Qc36Hl05vS5oDnTIOoAKd9QE+e8r8Fmy8YIoG8wDlnl88/NFPzg
sorGWh2JrGlwyXBpDsGUo2H1mPs33jZEFFhR9iSfFstCM7cRq4Q3rVna276G6YrP
/kOMJKPA/1rOEoFS36DZ1wHkPqYRalsBSRo6oeSP/3y+BzsR+TN2AjpFkXdXKs+E
TNFZjjx+sY6XWv5MOLbonZkGjxyCByXj2H3vulGXY4hoyeCNpb51b0tvFhm+slEd
/DNRH1+Np+03dJGrq1iMtp7I6CK9o8FZFwieloXQtDeD
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:51 2026 by rpki-client