Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
File: k8AGrOprUHWaPH3DPvhLR6cRfWg.cer (raw, json)
Hash identifier: on9o8YALPaexQ55g9hd6f8bIahWJy6zU6RAvcaQmd8k=
Subject key identifier: 93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DC1C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 06 Oct 2026 05:59:11 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154854
IP: 163.52.42.0/23
IP: 2001:df7:a8c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 02:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187420 (0x2dc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 6 05:59:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9152C54, serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:af:cf:7a:d8:25:0a:32:20:fd:67:53:4f:
ce:ad:9b:3c:6a:4d:14:22:4f:3e:2a:83:e0:df:3e:
be:c8:54:f0:17:8e:f4:05:6f:79:9c:9b:90:39:ce:
e5:ed:2f:6a:fa:43:d0:5c:c6:ba:18:cf:8e:ab:6b:
2e:fa:64:e8:9d:8e:d9:e8:5c:6f:4b:8a:32:4a:d4:
d4:ec:4b:07:ae:25:28:07:86:ae:2a:76:62:66:7d:
ef:2e:ec:f3:b0:15:fe:24:69:96:f5:11:94:86:80:
96:68:32:e8:3b:eb:bf:1b:55:b9:80:d5:41:d4:c1:
b4:07:99:a2:41:17:42:1b:74:ad:1b:ef:39:ea:67:
6c:65:8e:aa:90:88:09:b0:d7:ff:24:6d:d8:35:dd:
61:fa:5f:d6:d8:7b:fc:32:11:27:8a:06:fe:0b:9d:
ba:2c:9d:88:e0:36:05:79:ed:ce:38:bc:19:f5:9a:
64:1a:7d:ee:79:b2:bf:e8:22:17:c8:a3:c6:ab:12:
51:62:02:99:c1:f9:29:c7:fe:2a:4c:0a:ea:62:ab:
3e:b0:6c:fe:df:ea:a2:88:d0:5d:79:44:e7:fe:8c:
e4:e1:c9:7d:5c:99:70:d4:13:82:7e:47:96:e7:9f:
0f:c4:a7:60:37:80:bf:15:71:68:f3:b2:82:19:ad:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154854
sbgp-ipAddrBlock: critical
IPv4:
163.52.42.0/23
IPv6:
2001:df7:a8c0::/48
Signature Algorithm: sha256WithRSAEncryption
46:c1:a6:7a:f5:11:a3:b2:46:43:7a:47:03:6e:c3:11:90:e2:
a8:9e:63:d2:1b:a6:95:8f:09:bf:c3:f0:f5:e9:c0:77:81:8c:
15:59:30:1c:6f:d9:f3:29:cd:3d:a1:79:7c:b7:3b:98:ba:70:
86:67:36:17:7d:fe:e3:84:fc:ab:8d:e5:c2:c2:97:0e:51:00:
24:bd:da:49:f3:6f:9c:7a:1a:62:78:d1:25:f8:b8:f4:1b:45:
f5:cb:5d:6d:17:8e:ac:10:2a:97:aa:ae:d6:21:0b:59:63:27:
db:f3:a3:5a:60:54:bf:68:86:4b:4c:45:b1:94:99:87:4d:53:
11:89:90:14:be:98:fa:4a:e2:98:b4:e8:5e:c9:dd:8f:9e:e9:
ad:e6:e1:32:53:18:f4:66:a4:6a:4c:c3:57:ea:d9:d6:99:e0:
39:64:ee:eb:76:fd:32:1f:b9:12:12:cf:75:ae:eb:76:c0:99:
0a:99:cb:fd:c5:1d:27:f7:c1:47:8c:65:ab:50:6d:c8:6a:cc:
12:35:a2:9d:05:ba:d7:ea:b7:08:f3:df:5c:3f:3b:6c:25:88:
31:34:e2:c6:35:0d:1f:13:d8:22:70:0e:84:87:b1:c4:aa:85:
0c:6e:6e:99:8f:f0:12:84:19:6d:0d:92:5d:36:36:df:db:a4:
e8:cf:fc:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:22:27 2026 by rpki-client