Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer (raw, json)
Hash identifier: xkux8Bn4g72ZmpbdW5RSsnwjSAXP48wQc706bYk421M=
Subject key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C8B4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 13:33:56 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 154103
IP: 202.1.28.0/23
IP: 2402:1e20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 04:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182452 (0x2c8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 30 13:33:56 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:3d:44:3b:7f:7a:46:7f:8c:4c:3d:4f:03:
b1:2d:50:91:a6:0d:1e:4c:bc:6e:d0:a0:91:7a:96:
28:a0:78:7c:23:a5:4f:66:a5:d3:bc:eb:78:09:73:
50:26:05:c7:28:57:10:36:b9:7c:bb:55:ea:fe:a5:
da:09:a3:1b:c8:3a:6d:15:32:6a:d7:55:a3:fd:f6:
e5:c3:22:da:f5:49:ca:89:ba:d5:64:4e:12:92:5c:
83:dc:b7:7c:09:e2:5b:d6:bc:e7:96:a8:cc:de:bc:
78:a5:7b:0a:93:3e:a8:7f:69:99:7e:19:04:72:fc:
a0:a0:f8:e8:15:cc:b3:af:f5:9b:85:b4:e0:54:ad:
e0:e7:21:6c:f1:76:fe:64:cd:69:ef:17:5d:32:84:
00:45:4b:71:70:74:ba:45:e3:33:e8:9f:f7:be:6c:
9f:49:13:bf:dd:1b:a3:af:da:39:d6:64:14:d7:a4:
9b:f4:cd:89:c0:f7:f0:0a:f2:d9:0b:31:36:87:6b:
75:ff:3e:83:fb:77:1e:9d:37:ec:29:3c:28:81:ca:
d7:57:a2:70:6d:f1:cd:4d:ad:a1:6e:66:40:78:40:
be:1e:5b:e0:17:0b:90:3d:71:d4:fb:ea:40:03:96:
d6:d2:18:e4:90:fa:e6:a5:b1:db:9d:f8:f5:7d:7c:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154103
sbgp-ipAddrBlock: critical
IPv4:
202.1.28.0/23
IPv6:
2402:1e20::/32
Signature Algorithm: sha256WithRSAEncryption
36:4e:12:c6:af:8a:5c:ce:75:31:9a:bc:31:88:0e:68:65:19:
dd:a3:c6:e4:de:63:83:d3:d6:0f:97:20:85:76:0b:1e:9f:8b:
b5:8e:30:54:9a:07:c0:36:0c:01:b5:0e:5e:88:5f:cf:65:31:
c9:46:cf:8c:71:50:c0:f8:0a:c4:ee:da:2f:a9:13:20:83:17:
34:2f:1d:54:be:38:50:c3:c5:56:05:aa:6d:7b:29:73:c3:f8:
a6:c1:04:51:1e:80:fc:04:ef:96:b2:74:40:78:36:b1:bd:7f:
c9:ce:d3:58:b2:03:0b:eb:01:a5:ab:2e:94:74:16:b3:15:57:
fe:4e:59:6a:aa:f8:35:70:f3:67:28:fd:d1:16:3d:c8:e7:f2:
26:d9:87:96:12:72:38:87:49:97:8f:45:53:58:5c:39:56:3b:
67:8e:06:05:ab:5f:77:9f:a4:b2:29:17:a4:cb:bb:6f:57:49:
fc:75:54:79:04:2b:12:6d:77:70:4c:a1:40:6b:c0:bd:f9:61:
09:cc:ef:0d:eb:73:78:dd:e7:94:dc:95:e8:3b:ee:5f:38:b0:
de:c3:04:f7:4b:ed:9d:ac:90:fa:e8:e3:b6:ab:c8:bb:c1:95:
43:06:9b:20:ae:76:72:56:be:f3:d8:c4:54:f1:b5:5f:bc:44:
19:c4:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:58:42 2026 by rpki-client