Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
File: rHwA15xPocI9OeJl5UPWJa-xcZE.cer (raw, json)
Hash identifier: HcwUXRpWBUkQlCc/Bzn1NmZ6vXCg3w1AqEJowstPpTE=
Subject key identifier: AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029EE6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:08:43 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 154420
IP: 2001:df6:6ec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171750 (0x29ee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:08:43 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A917C876, serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:5b:84:ab:c3:42:2d:9f:cc:b5:fd:c0:6a:
b6:55:f0:e3:ed:05:90:0e:0c:6e:a2:8e:31:71:eb:
13:52:6d:48:c5:d0:0d:50:67:c4:0d:5c:fb:4f:a1:
9c:7d:7b:78:1a:3a:07:ab:e2:77:7b:03:9a:82:38:
9e:fd:bf:a3:dd:70:55:0c:e0:51:18:8f:28:45:01:
7d:38:2a:11:fd:fe:47:66:b1:08:48:e6:66:26:4a:
1c:a4:7d:3b:f7:b1:7b:06:88:33:25:93:2a:90:ee:
9b:71:fe:60:a7:95:5f:79:97:ef:c2:17:02:59:60:
b9:0d:2b:ab:8c:1d:28:e4:c3:40:39:97:da:cc:1c:
0c:ff:f1:e8:58:83:5e:d7:8a:19:ca:92:ff:60:1d:
93:45:6d:5f:72:be:8b:b5:3a:67:28:bc:09:75:69:
79:89:a4:0c:32:e0:95:64:2e:84:77:0a:cc:09:9a:
03:c5:c1:d6:6a:52:44:a7:76:f9:2b:e7:0e:b5:23:
da:44:a8:25:c0:c3:03:7b:68:b8:36:5d:ba:9e:e7:
98:d8:ea:60:c6:83:07:1f:bb:ca:68:6a:7d:0d:e3:
ab:cd:b5:59:f5:e2:16:9e:8b:25:de:9d:0c:19:0f:
d3:93:92:b9:dd:5e:64:58:b9:df:99:95:37:ed:e5:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154420
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:6ec0::/48
Signature Algorithm: sha256WithRSAEncryption
84:11:67:2d:f5:ee:57:c6:45:32:17:c2:0c:a2:f5:e1:47:d4:
c7:82:db:5c:8b:a2:eb:2a:04:1d:d2:f2:75:d3:1f:78:db:f7:
d3:c8:21:55:47:14:e8:58:e6:ca:45:17:c2:2a:4d:5b:7c:66:
c9:63:83:8e:59:0a:5e:34:dc:e7:06:39:42:10:fc:c4:f2:5a:
ce:01:ba:23:3a:86:3d:ff:b1:e6:e7:33:91:38:80:ff:77:a8:
e5:4e:e1:2d:58:8f:dc:93:a5:bb:f1:c2:8d:be:0d:e6:69:36:
47:f7:04:7e:48:65:c8:bf:f0:1f:f4:31:60:d6:19:75:74:e3:
13:d2:29:ab:8f:25:1a:95:f4:8f:4d:9e:09:73:c5:f0:85:c1:
b4:19:9a:29:43:96:6f:f3:2a:fe:40:7b:cd:d1:fe:17:82:be:
00:51:a0:3a:dd:a1:c2:7f:65:82:f3:54:ae:95:10:ff:a8:de:
74:17:c8:06:b2:6a:67:9d:4e:1f:72:f1:e1:13:80:0f:90:ad:
52:8a:5a:30:02:c9:24:ac:36:e3:28:3f:75:16:45:78:68:aa:
1b:f5:b7:b6:f5:c5:a2:78:8f:62:96:df:fc:a8:9e:ca:60:39:
7e:8c:19:f3:39:23:94:16:65:25:39:eb:22:d8:da:3e:d1:83:
3b:d2:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:02:10 2026 by rpki-client