Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer
File: oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer (raw, json)
Hash identifier: lYpzQfwEPeQsTGG3pVxCNtok631Ue3tVgFzdsSorY7k=
Subject key identifier: A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AC3C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Apr 2026 09:13:36 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 154497
IP: 2402:4da0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175164 (0x2ac3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 13 09:13:36 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A917F429, serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:64:98:66:53:3a:ba:93:ad:7f:71:17:9c:
09:30:89:cf:ad:3e:8c:21:15:e8:01:60:69:09:e4:
c0:53:03:44:63:05:8e:51:c1:3c:9b:9d:c7:ff:61:
73:27:8d:7b:b4:3e:a6:8c:5f:68:4a:b5:e3:7e:85:
16:92:42:df:74:41:52:e2:f6:cb:4f:68:f3:d3:c7:
e5:23:84:a3:06:d2:13:61:a0:fe:27:7a:e5:f7:36:
f6:55:4b:88:a1:86:d7:95:bd:57:c2:bc:c0:32:d6:
4c:78:d6:ef:28:d8:02:f3:54:69:88:92:ce:e9:a2:
1a:12:fa:4f:2b:13:73:62:f6:f6:53:30:6e:ec:55:
ff:ec:b7:6f:92:f5:30:3e:66:b8:3f:a9:fa:a5:61:
ca:a7:ad:07:1b:ed:0f:7d:d3:8d:5f:52:14:74:85:
2a:6b:6b:80:b2:b8:58:e4:45:b1:80:bd:3c:58:16:
a4:57:52:8a:c6:37:8b:fc:b8:59:f6:57:4f:e9:6e:
33:f5:7a:39:77:dd:89:7c:ac:85:74:64:ad:8c:9e:
aa:70:c3:0c:68:64:11:b5:67:c7:b7:32:f9:16:d0:
78:64:e5:2b:bc:2d:51:49:d5:e7:3e:3a:c2:b7:07:
10:89:51:38:1b:83:e4:2b:d2:38:04:46:ae:4d:99:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154497
sbgp-ipAddrBlock: critical
IPv6:
2402:4da0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:0b:c9:f5:16:d1:08:0f:4d:34:05:e6:88:74:6f:e5:ea:7b:
f3:62:2e:59:3b:4f:ba:c3:3b:8a:b4:7a:5f:ef:7d:85:0b:87:
ed:9d:23:21:40:93:d1:62:c1:85:fa:c5:d8:4b:16:2a:a7:1f:
5c:3a:31:e1:ad:28:72:8c:84:81:69:7a:1f:11:5e:83:be:41:
62:dc:77:59:33:59:71:bc:74:a0:52:af:2e:29:52:63:0d:c6:
48:d6:3a:3a:13:e8:d4:49:b8:91:fc:fc:60:a3:d5:ac:27:91:
03:81:df:87:0f:8e:ec:4b:19:68:fa:a1:3b:50:a6:34:c9:78:
68:14:1f:cb:91:65:f8:d4:45:2b:0f:fd:5c:f8:9e:2f:fe:d3:
32:de:58:e1:38:61:c8:67:db:b7:ab:eb:70:74:bf:70:a5:70:
51:66:a7:27:13:72:f0:d2:74:95:1f:ef:bb:0d:bd:96:75:dd:
1f:17:6f:52:77:4f:7c:c5:b1:49:56:eb:98:09:ad:11:c5:74:
58:6c:71:b4:1c:9d:e2:c2:9b:d8:a0:04:49:d5:97:4b:ff:2b:
85:84:48:26:1b:5b:22:2c:39:21:03:d6:fa:c6:c4:18:10:a1:
ae:13:59:98:5f:f6:a5:7c:f9:e7:9c:9c:6f:7d:35:8b:e2:0f:
fe:72:06:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:58:06 2026 by rpki-client