Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
File: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer (raw, json)
Hash identifier: MPJWCm4Gkj0a6rpJHg0P2TV897PlkWUxrFaxi/LHPKU=
Subject key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A7B5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 03:06:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 163.128.132.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174005 (0x2a7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 03:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:f4:05:62:73:c2:6d:93:fe:c7:79:e3:15:
1e:76:68:a3:1c:39:9d:8a:24:ba:ad:03:9f:c2:92:
2a:d9:41:ff:c2:e2:29:32:46:c4:58:3a:a8:4c:66:
db:96:09:69:8b:6e:16:19:b9:dc:71:70:fc:ea:d7:
93:e4:9a:57:ad:fc:c4:1a:5b:04:4e:6b:85:9b:49:
d8:6e:fe:d4:d7:c7:50:bb:e8:6f:73:38:c1:a0:ea:
c0:22:1c:10:a6:99:d0:51:95:b9:5b:84:40:99:ca:
32:8f:c5:d9:7f:a4:11:97:93:e0:29:82:ac:e5:aa:
a8:21:ae:80:e3:64:c4:0b:17:64:95:48:bd:cc:96:
78:7c:41:95:9f:58:51:45:e2:18:58:7b:4d:72:27:
3f:e1:35:30:bb:07:ab:ef:c9:48:e7:4d:3f:67:0e:
58:24:99:4d:38:1d:b1:33:81:a6:d8:2c:25:f8:f7:
b8:5b:97:20:17:73:2d:f7:0e:a8:5e:d1:21:d5:a3:
a4:13:cb:6c:f3:74:f9:df:1b:f7:f7:eb:00:95:92:
e9:42:0a:27:11:b1:43:e1:b6:65:43:dc:cf:e5:e8:
a1:3a:d2:6a:de:ae:3e:df:be:e2:0e:9a:76:a8:a8:
dc:e7:bd:6e:54:f4:3a:c6:e7:5d:10:22:bb:ea:7d:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.128.132.0/23
Signature Algorithm: sha256WithRSAEncryption
89:68:f0:be:a3:2d:1a:ef:a6:b8:b8:84:a1:32:61:35:71:5a:
28:6f:be:50:61:a3:4a:a8:d6:64:7f:e4:b0:0f:3d:e7:e1:b9:
34:6c:a5:1e:12:c8:93:c7:20:6c:fa:dc:3a:8a:c4:2a:be:c1:
ff:d2:0e:a1:7a:67:b5:7c:10:59:de:a8:34:64:6d:ef:ef:cf:
dd:61:ba:9f:08:b3:3f:bf:53:64:ee:b9:8f:c8:d5:aa:8e:a4:
a9:08:21:4f:33:76:a3:be:13:86:52:26:a5:a9:3e:f8:2b:87:
fa:2f:60:eb:f9:91:d7:bb:53:0f:aa:eb:83:f9:46:da:23:7f:
cd:a3:d4:9b:72:9b:31:15:67:97:94:9e:6c:cb:1e:9e:9c:8b:
d2:d6:63:3e:71:07:e7:a6:af:e5:41:19:98:41:4a:ad:b0:97:
a6:2e:b0:9a:5f:03:a8:c4:a7:51:c0:f4:6d:d9:c4:8a:8e:5b:
2a:78:64:d9:3c:ea:66:fd:fd:23:23:35:c1:26:7a:01:77:52:
57:88:95:5f:78:d1:51:ca:a0:50:ea:a1:ad:cf:5c:ce:cc:6d:
4f:a9:ae:ca:d4:56:5c:73:0c:56:2c:b0:a3:2f:4d:2b:d7:0b:
b8:2d:f5:dd:a9:b0:c2:0e:a7:6a:c1:23:ed:5e:77:86:ad:8c:
43:f0:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:11 2026 by rpki-client