Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
File: kakyPLNEJvPZyJDjl4Ag1BezWfU.cer (raw, json)
Hash identifier: pr5Na3+xluR0tgibXK62meTrvgbxqgnL4QMZQDhWF0w=
Subject key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029314
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:13:24 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 132695
IP: 202.6.84.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168724 (0x29314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:13:24 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:72:ad:6e:f0:ef:bc:01:dc:a8:f1:a5:8a:
78:bd:fe:29:35:3b:38:e9:b1:fb:9c:80:77:7d:9d:
38:86:2d:8f:3a:c1:51:75:15:f6:ed:2e:32:3b:df:
1e:71:c3:03:53:55:55:d9:39:94:95:1b:04:63:f0:
aa:b3:0f:56:8e:42:c7:ff:3a:d1:67:c8:7a:71:42:
d0:f9:15:fe:2b:96:f3:cd:eb:44:b1:fe:70:9a:e0:
65:e1:0f:23:86:08:dd:cf:d6:ac:2c:db:08:d0:5f:
39:2f:2a:86:92:38:65:43:39:d6:22:53:6c:e9:d7:
1e:13:0b:ae:1d:f5:77:eb:06:51:44:7a:45:3b:b8:
b1:bd:0d:79:7f:29:78:80:ea:f8:40:28:fe:a6:47:
43:b6:a2:27:d6:f0:0f:f4:9a:03:86:45:29:e7:02:
f0:b5:8d:43:21:fd:54:0a:5d:81:45:f1:64:12:50:
c4:fa:f5:cb:4c:64:51:19:e1:2e:35:b1:31:d5:ca:
2f:a2:77:cb:b7:e1:80:80:8a:3d:61:df:ed:8b:0e:
64:62:8f:7a:99:fe:e2:5f:5d:5f:0a:aa:5d:27:62:
44:1e:38:68:d3:a3:4f:3a:b6:1b:63:4d:34:3c:3a:
bb:2a:ab:72:aa:40:25:d3:38:ef:3c:13:de:c5:0c:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132695
sbgp-ipAddrBlock: critical
IPv4:
202.6.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:c6:52:5e:cc:cb:74:08:0d:1e:1f:72:b4:aa:bc:a6:fb:72:
98:dc:58:bf:53:4b:d4:7b:46:89:ff:60:1e:7c:95:7a:b4:3e:
17:83:f1:46:31:17:dc:3d:e3:07:61:08:99:97:ea:ff:ba:24:
8b:df:18:38:03:ad:f5:eb:ba:40:4f:f8:da:43:59:50:08:72:
31:dc:5a:2c:4f:8c:de:be:e9:06:a0:0c:66:87:69:d8:f7:19:
f8:60:8e:b3:c7:53:9b:2c:04:09:ca:d9:69:19:18:8a:57:14:
3e:1a:dc:50:ee:58:7b:2f:7c:9a:00:da:1b:07:32:d2:a4:7e:
d3:f6:84:01:9e:4f:6c:59:d4:56:4b:e4:9e:45:03:42:20:47:
46:f7:64:d0:fc:51:09:df:1c:c8:ab:ba:d3:1c:88:93:e6:c3:
47:2f:b8:b9:17:1d:cb:40:e1:19:cd:f1:09:d7:47:01:0f:28:
a7:be:1e:44:89:b8:a3:3a:7e:a3:4b:a7:60:fe:6f:36:3a:3f:
cb:df:8a:7e:98:cd:7f:15:7b:0b:3e:31:b9:f3:87:1f:f9:cf:
3b:6a:59:f4:82:66:3d:83:31:14:5a:a3:1f:30:ee:7c:60:43:
b3:d5:23:70:a2:bf:05:0d:a2:bd:18:5a:d6:9d:f7:f3:8c:7a:
78:85:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:57 2026 by rpki-client