Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer
File: xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer (raw, json)
Hash identifier: mwpM1I6LlH6dftUBAjpyOBzxhIfqoMYXLo0PjTcHWbI=
Subject key identifier: C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF8A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Aug 2026 13:57:36 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154858
IP: 163.52.44.0/24
IP: 2402:7120::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184202 (0x2cf8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 24 13:57:36 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91E78B5, serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:df:65:d1:2e:41:81:3c:2c:c6:5c:12:43:
35:02:be:5e:78:db:af:39:3e:73:02:0e:6e:5c:50:
69:a6:f3:db:e4:75:c2:77:38:2f:ea:59:a2:30:96:
f9:a5:8c:7d:a1:f7:6f:5d:99:a7:c8:1c:74:48:d5:
97:0c:60:e8:28:0e:56:a3:b8:3d:3b:d2:c2:8c:57:
c7:29:d5:29:72:99:e6:01:28:61:a8:c7:b5:45:77:
b9:97:61:fe:e0:5d:aa:65:9f:6b:0a:d7:4f:5a:71:
d8:29:7a:53:d8:da:e9:e6:6b:24:64:84:19:12:c9:
ea:3c:59:db:e2:e8:2a:dc:27:ad:83:08:66:4d:48:
11:20:1c:dd:05:a3:fa:26:aa:b6:b1:85:1e:55:e0:
8e:40:56:ca:3a:a6:a6:45:25:bb:af:8f:83:24:a6:
c5:23:c3:c6:bf:e4:7b:6d:b2:02:67:dc:46:c3:ed:
9a:9e:9a:6b:ee:6f:a4:93:48:d7:d3:85:4f:e9:8f:
00:f8:bc:0b:2b:04:13:e3:03:75:11:c9:e6:cc:52:
b9:eb:15:59:cd:38:e0:82:a6:c6:5a:3c:88:1e:2d:
8d:44:ad:89:56:83:d2:9d:a6:cb:25:b8:ea:e2:ef:
99:74:0e:31:31:33:90:31:69:56:60:c7:df:62:0a:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154858
sbgp-ipAddrBlock: critical
IPv4:
163.52.44.0/24
IPv6:
2402:7120::/32
Signature Algorithm: sha256WithRSAEncryption
47:39:5c:27:5c:28:31:c4:cc:58:e3:83:ee:24:5a:aa:09:ad:
e1:85:5b:79:72:5c:3b:30:bc:14:6b:ef:a4:73:2d:37:9a:92:
56:dc:87:d0:08:55:27:26:7c:71:67:af:f3:05:c4:0e:47:46:
8c:17:be:fa:48:91:f3:ee:6f:fa:fc:d2:05:5c:bb:65:8a:1d:
2c:a9:b1:81:02:0d:1d:3c:06:e8:68:8a:4e:44:51:9c:8a:c2:
1c:5a:eb:8a:cc:5a:4e:af:fe:5a:58:ec:f3:57:ab:a1:5f:ce:
55:a3:5a:f9:14:b0:c4:ab:4a:f9:65:a0:61:2f:f8:cc:fd:b2:
5a:6c:d2:10:b7:ce:d8:e0:64:16:9c:c4:53:de:b8:ef:c4:eb:
9c:76:70:23:6b:8d:ec:cc:28:21:3b:42:9f:8d:5e:04:dd:8d:
d0:9c:c1:43:34:2d:35:ee:c0:9d:49:cc:af:cd:90:7b:2d:99:
14:5e:61:e8:9e:72:d2:b9:8f:03:f8:f3:05:9c:36:d3:3f:c1:
d6:e7:af:5f:b6:ff:be:79:b1:09:ec:a2:0f:67:35:31:fa:b2:
6a:bf:cd:52:72:c2:06:b8:0a:ca:cc:d4:3d:a7:8f:94:d3:6a:
6a:9c:1d:de:5f:6c:62:3f:35:0b:ce:28:e1:16:0e:ab:4d:93:
f6:8e:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:28 2026 by rpki-client