Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
File: k8AGrOprUHWaPH3DPvhLR6cRfWg.cer (raw, json)
Hash identifier: AsPL0bsm/C36bcAk5c6hCv1oLhsD3sf5KU8VBy8AmCI=
Subject key identifier: 93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D135
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 29 Aug 2026 17:46:34 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154854
IP: 163.52.42.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184629 (0x2d135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 17:46:34 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9152C54, serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:af:cf:7a:d8:25:0a:32:20:fd:67:53:4f:
ce:ad:9b:3c:6a:4d:14:22:4f:3e:2a:83:e0:df:3e:
be:c8:54:f0:17:8e:f4:05:6f:79:9c:9b:90:39:ce:
e5:ed:2f:6a:fa:43:d0:5c:c6:ba:18:cf:8e:ab:6b:
2e:fa:64:e8:9d:8e:d9:e8:5c:6f:4b:8a:32:4a:d4:
d4:ec:4b:07:ae:25:28:07:86:ae:2a:76:62:66:7d:
ef:2e:ec:f3:b0:15:fe:24:69:96:f5:11:94:86:80:
96:68:32:e8:3b:eb:bf:1b:55:b9:80:d5:41:d4:c1:
b4:07:99:a2:41:17:42:1b:74:ad:1b:ef:39:ea:67:
6c:65:8e:aa:90:88:09:b0:d7:ff:24:6d:d8:35:dd:
61:fa:5f:d6:d8:7b:fc:32:11:27:8a:06:fe:0b:9d:
ba:2c:9d:88:e0:36:05:79:ed:ce:38:bc:19:f5:9a:
64:1a:7d:ee:79:b2:bf:e8:22:17:c8:a3:c6:ab:12:
51:62:02:99:c1:f9:29:c7:fe:2a:4c:0a:ea:62:ab:
3e:b0:6c:fe:df:ea:a2:88:d0:5d:79:44:e7:fe:8c:
e4:e1:c9:7d:5c:99:70:d4:13:82:7e:47:96:e7:9f:
0f:c4:a7:60:37:80:bf:15:71:68:f3:b2:82:19:ad:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154854
sbgp-ipAddrBlock: critical
IPv4:
163.52.42.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:dd:b0:cb:b4:0d:bd:b8:0f:9d:0c:39:70:e5:0d:76:1a:e8:
2a:f5:d0:fe:b7:f9:ce:8f:2b:9d:33:b3:16:d5:bb:9b:f3:b8:
d8:f7:a7:67:35:9b:b2:ba:21:e3:64:0b:a7:80:b8:7f:5f:0e:
07:32:bd:af:3e:de:59:21:b0:29:6b:ed:49:26:3c:0d:12:87:
b0:bd:72:9f:a0:99:86:78:bb:fa:39:55:81:05:b2:70:4e:a7:
98:d8:70:07:90:fb:a2:0b:ea:2c:5b:48:0d:2c:9a:f0:b1:32:
8a:9a:6c:74:d0:67:73:43:3a:b6:20:20:3a:f1:0c:81:1d:75:
0a:e0:94:88:4f:cd:bb:3b:dc:0f:2d:0c:c8:49:9a:f3:15:f7:
4d:f6:d0:98:0e:02:dd:58:8d:bc:8f:7a:16:42:05:7d:e0:fb:
2c:d3:46:ed:20:8f:4b:ea:6f:52:45:94:fc:5a:80:90:74:b9:
8a:7e:71:54:4a:69:d3:5c:e7:b1:41:8d:50:03:db:6a:e3:18:
ee:3b:5f:7d:f8:dc:24:f8:50:1f:c6:e1:de:cf:07:16:7b:50:
a5:ed:c7:a2:54:86:98:1f:ac:86:4e:d4:03:50:77:5b:dd:29:
b8:46:50:e5:bb:1e:da:eb:94:e0:16:f9:1e:ab:5d:fd:c2:8b:
91:3e:b7:fa
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAtE1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgyOTE3NDYzNFoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTJDNTQxMTAvBgNVBAUTKDkzQzAwNkFDRUE2QjUwNzU5QTNDN0RD
MzNFRjg0QjQ3QTcxMTdENjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC25a/PetglCjIg/WdTT86tmzxqTRQiTz4qg+DfPr7IVPAXjvQFb3mcm5A5zuXt
L2r6Q9BcxroYz46ray76ZOidjtnoXG9LijJK1NTsSweuJSgHhq4qdmJmfe8u7POw
Ff4kaZb1EZSGgJZoMug7678bVbmA1UHUwbQHmaJBF0IbdK0b7znqZ2xljqqQiAmw
1/8kbdg13WH6X9bYe/wyESeKBv4LnbosnYjgNgV57c44vBn1mmQafe55sr/oIhfI
o8arElFiApnB+SnH/ipMCupiqz6wbP7f6qKI0F15ROf+jOThyX1cmXDUE4J+R5bn
nw/Ep2A3gL8VcWjzsoIZrU6HAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUk8AGrOpr
UHWaPH3DPvhLR6cRfWgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUyQzU0LzkxNzQxMjIwQTNEMTExRjE5RDgyRkQ2MzUzMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1MkM1NC85MTc0MTIyMEEzRDExMUYxOUQ4MkZENjM1MzExRjk3MC9rOEFHck9w
clVIV2FQSDNEUHZoTFI2Y1JmV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlzmMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBozQqMA0GCSqG
SIb3DQEBCwUAA4IBAQBK3bDLtA29uA+dDDlw5Q12Gugq9dD+t/nOjyudM7MW1bub
87jY96dnNZuyuiHjZAungLh/Xw4HMr2vPt5ZIbApa+1JJjwNEoewvXKfoJmGeLv6
OVWBBbJwTqeY2HAHkPuiC+osW0gNLJrwsTKKmmx00GdzQzq2ICA68QyBHXUK4JSI
T827O9wPLQzISZrzFfdN9tCYDgLdWI28j3oWQgV94Pss00btII9L6m9SRZT8WoCQ
dLmKfnFUSmnTXOexQY1QA9tq4xjuO199+Nwk+FAfxuHezwcWe1Cl7ceiVIaYH6yG
TtQDUHdb3Sm4RlDlux7a65TgFvkeq139wouRPrf6
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:22 2026 by rpki-client