Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
File: sQtPQ0P6rissTT3WYGS-km7HTJ8.cer (raw, json)
Hash identifier: I9pt+4WBcLMTTu9Q/h0aL7wJWsENfwovZ8KqiFjxDks=
Subject key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029A01
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:46:44 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 9483
AS: 150454
IP: 202.50.109.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170497 (0x29a01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:46:44 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:47:c1:2e:20:66:0f:7d:9e:83:ff:0b:43:
84:43:ed:6d:83:5f:33:08:0a:b0:3a:8e:67:d4:68:
21:3f:63:be:d0:8c:17:6e:d8:d8:36:07:aa:f9:a9:
62:73:f2:94:ff:5c:99:7b:07:a1:ce:a9:64:0f:74:
62:20:42:c3:76:d2:06:eb:c8:56:99:0e:2c:b6:36:
21:32:2c:e0:f2:fb:2b:f2:39:64:f8:62:a5:fe:8a:
d5:72:33:4f:a6:1d:de:25:a7:09:5a:b9:0a:19:95:
94:5c:f1:01:04:da:00:4d:b9:16:9b:68:a4:46:07:
bb:13:7e:b4:2e:18:57:be:d0:a5:37:d2:9f:94:1d:
98:07:95:82:85:be:11:3a:46:f6:b2:b2:dd:07:18:
90:79:41:2c:fe:88:96:a7:36:e6:90:bf:79:a5:76:
45:69:4d:f1:16:a2:f9:6b:07:e4:14:02:5d:64:c1:
91:09:c3:04:ab:f5:d4:c0:37:49:a4:2f:48:4c:16:
6f:ea:fe:9b:4e:32:f4:ed:03:b9:78:d0:80:38:99:
b2:c6:22:e4:4b:10:d7:bd:7f:24:dd:c4:70:cd:36:
35:ca:e0:74:2c:f5:d3:bf:24:c7:13:2c:b1:07:ab:
9d:e5:93:b9:22:3b:51:da:e3:9c:99:f1:ce:fa:61:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9483
150454
sbgp-ipAddrBlock: critical
IPv4:
202.50.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:80:a0:c1:5e:a2:f5:8f:33:72:cc:2a:bd:2f:19:66:e2:74:
c9:12:d8:8a:9f:16:fc:51:46:20:13:8d:31:21:37:a5:d0:d2:
81:12:09:e3:cf:61:f3:88:78:a6:36:41:8b:98:25:f5:7c:f5:
24:70:d5:1c:66:45:b6:7f:e9:1c:a9:7c:9d:71:4c:11:eb:27:
db:9e:05:38:16:ab:c6:f9:c9:b6:79:32:67:65:3b:72:d5:3a:
40:4f:3e:58:bd:38:21:9a:39:5c:7c:03:65:c7:db:85:1d:b8:
b1:2c:5d:8c:e0:3b:1f:c9:4e:2d:4c:1f:81:e8:d9:37:d8:19:
dd:96:dd:dd:82:ba:4c:ab:be:f6:ab:31:00:21:f9:f0:ce:a7:
88:fd:22:d5:d9:69:cc:a1:c1:b4:ef:6e:e3:c8:0b:1d:87:fa:
24:b4:36:e0:92:68:e1:c9:ba:1e:65:60:0f:95:7a:a4:f0:eb:
5b:78:f3:bb:b8:76:f7:7e:ab:82:a3:b5:5a:24:e7:d6:b2:69:
b2:09:83:90:12:35:34:33:e8:ef:72:41:66:14:2f:98:f0:b6:
07:fd:1e:90:d0:fe:94:84:06:2b:68:d7:b4:bb:e7:4c:d8:d4:
e9:49:c6:d2:b4:95:b5:1d:0e:e9:cb:89:4c:62:41:8f:7b:9d:
16:d4:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:51 2026 by rpki-client