Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
File: zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer (raw, json)
Hash identifier: p340o5oL7OqRYEGcmpnuqKUuDtwk2tCDiwkL0us64Aw=
Subject key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0295DD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:26:23 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154271
IP: 203.31.93.0/24
IP: 2402:2ee0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169437 (0x295dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:26:23 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:dd:14:eb:ff:14:ca:89:a3:f7:46:02:60:
bd:d5:a6:57:41:e3:22:d6:38:47:8f:74:53:15:91:
92:1c:b1:1a:b6:ba:eb:27:eb:dd:00:32:b6:d4:cc:
d8:13:94:8e:ae:7d:9d:21:e8:ff:59:33:b5:6e:d1:
66:91:5d:e7:cf:14:b3:de:81:25:7d:8d:a1:69:13:
e5:34:04:e1:1a:9b:d9:8a:ee:98:9c:ca:0e:96:db:
2e:77:ed:1f:bb:f5:27:92:22:07:de:e5:18:4b:52:
83:2f:e2:be:54:fa:e9:38:f8:0d:87:7d:55:b8:e9:
72:69:3c:24:cb:a5:e1:43:cb:27:ef:73:7b:4b:90:
fa:93:d3:d7:5d:56:53:0d:9a:9b:f5:ba:6e:bd:9c:
d7:0c:2a:0f:12:49:c7:82:0c:25:23:dd:68:70:7a:
99:db:de:f3:59:04:91:5e:c6:76:5c:d0:69:70:e9:
65:d9:f0:7e:64:4b:22:99:17:f4:64:10:06:2f:33:
21:ef:62:4a:ad:53:2c:e0:cd:de:d0:fe:56:72:35:
46:e1:ba:b3:98:98:d2:7f:6c:d0:d0:7c:a4:5a:70:
e0:02:5f:f6:5a:22:70:29:0c:8f:d4:81:4d:39:8d:
d5:a6:ba:07:f3:11:e6:68:a5:cb:23:64:9d:75:d7:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154271
sbgp-ipAddrBlock: critical
IPv4:
203.31.93.0/24
IPv6:
2402:2ee0::/32
Signature Algorithm: sha256WithRSAEncryption
d6:79:40:50:0a:20:c2:63:86:85:48:6a:3f:53:f1:67:0e:c8:
b7:56:12:31:c7:2b:e7:c4:47:a6:a7:8d:e9:ff:2f:53:05:17:
7c:ce:d5:ec:17:65:5f:1c:d9:b8:75:3d:20:6c:ad:4f:45:c6:
c2:f1:da:c4:74:a1:09:9f:45:2e:81:7a:79:e3:97:65:df:b9:
55:29:a3:c7:b8:64:4f:15:b8:fd:bb:a0:0e:e6:7f:b2:47:ea:
a2:70:d6:1f:b5:b3:02:1f:50:65:b2:ad:af:7b:e7:6e:79:a7:
7a:2d:de:1c:e4:cd:22:09:4e:24:3b:8c:37:ca:80:a8:fe:c5:
5f:4b:64:ca:42:54:78:66:a9:56:04:f4:66:7c:23:a2:e1:ee:
8a:a8:02:4f:a3:94:8b:74:c9:9e:d2:46:e6:ee:21:4b:78:9d:
35:20:36:40:80:98:83:d2:bb:04:f8:28:42:ce:2d:18:28:25:
43:c6:18:65:aa:b3:ca:64:cd:74:58:c0:e6:4e:17:37:c6:45:
a1:d4:7a:e7:70:f7:b2:be:3b:63:ef:1c:aa:38:5b:53:42:78:
d9:da:64:5d:f5:f7:b6:6a:3d:48:45:a5:c1:d6:98:29:a1:c2:
33:ac:32:6d:05:df:35:61:7e:3f:88:59:3a:a6:f5:07:8a:02:
71:83:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:08:22 2026 by rpki-client