Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
File: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer (raw, json)
Hash identifier: iX3gj2bOv2GuZrCXX5dE7d48j1yPcT15VDD/6IRLNoY=
Subject key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029C9F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:58:09 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 149440
IP: 202.61.72.0/22
IP: 223.165.6.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171167 (0x29c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:58:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:41:c4:18:31:e9:0f:2f:81:12:11:c2:19:03:
d6:b1:db:b6:ac:33:32:ea:18:0d:42:19:69:82:80:
c9:42:2b:2e:6b:28:f1:6b:3b:23:34:ab:ff:c2:f1:
c7:6d:d3:3d:bb:8e:8e:af:2f:c7:ef:21:45:75:07:
05:a4:3a:a2:98:2e:9c:ed:ac:be:df:f0:d4:48:3e:
9c:e8:13:51:37:10:07:72:bd:f1:97:b2:36:62:be:
cf:69:9c:9f:13:9f:b9:f4:1c:9d:df:47:c4:29:43:
34:13:59:70:b4:a2:6e:57:e6:d6:a0:d0:77:da:2e:
36:0f:66:1d:60:44:40:e5:77:f1:ef:ff:b6:73:86:
68:61:0f:3d:84:d6:b0:f9:cc:24:d8:1c:cd:ec:f2:
d0:af:60:c0:bf:8f:9d:95:9e:4f:f5:c4:d0:d0:be:
31:14:4d:f2:91:da:a4:9a:ad:8c:b3:07:ca:e2:77:
0e:59:1d:cc:ce:89:7f:7d:be:e1:e9:7f:92:87:6a:
37:a4:e1:38:53:90:7e:2b:18:f5:f1:f8:40:92:9b:
39:20:c6:1d:3c:b2:98:55:f7:49:23:6d:62:14:0c:
3c:ea:c5:1b:81:bb:4d:3d:35:be:48:05:a2:87:6c:
bd:04:cc:2d:6e:40:95:b1:7b:42:26:2f:86:3b:2f:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149440
sbgp-ipAddrBlock: critical
IPv4:
202.61.72.0/22
223.165.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:07:71:b1:29:36:d0:da:1e:f0:48:40:d6:f8:67:99:86:67:
b3:f7:32:db:cf:0b:97:34:17:a8:8b:4d:c9:0c:58:d0:1d:3a:
bb:cd:25:69:6f:b5:f9:72:be:bd:1c:43:e8:85:26:d6:ee:ce:
20:06:3e:21:28:56:31:81:13:7b:8c:f0:cd:ad:36:a9:53:fa:
4f:e3:a4:da:79:79:c9:66:24:53:fb:46:29:9e:7d:92:39:fb:
a9:84:04:7b:3d:93:3f:f0:eb:4d:47:e2:97:85:91:b2:1c:61:
6d:a7:53:eb:8a:60:1b:2f:57:99:ef:f2:d9:24:4f:17:9f:f1:
da:7f:4c:10:a5:21:7e:75:ff:0b:91:8a:2e:a2:4d:2c:24:0a:
e1:3c:9d:7a:d5:67:3f:a6:e3:c2:6e:52:54:67:63:b9:0b:21:
10:30:26:5c:3f:a8:71:c3:3b:5a:de:b1:4c:59:dc:41:fa:f1:
aa:9f:c4:8d:99:52:e2:de:1e:89:01:d6:c9:2f:b7:03:18:5f:
77:07:b3:23:9a:ca:c0:b7:6e:53:42:9f:17:b8:19:59:25:51:
2b:69:53:63:ef:2b:49:40:ca:2e:bf:06:6a:0b:33:ac:bf:45:
5e:6b:d6:74:07:e9:c4:8e:14:bf:7a:47:0a:2f:66:55:ad:1b:
2d:84:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:50 2026 by rpki-client