Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoZxK4RkFt7tWImiU22NAJ3B8i4.cer
File: HoZxK4RkFt7tWImiU22NAJ3B8i4.cer (raw, json)
Hash identifier: ciSBquA8U5N/NolbQYdJKRne5P+xh6PGiJ0ZnDqjlRo=
Subject key identifier: 1E:86:71:2B:84:64:16:DE:ED:58:89:A2:53:6D:8D:00:9D:C1:F2:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A7CD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 10:10:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154573
IP: 163.128.134.0/23
IP: 2402:5420::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174029 (0x2a7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 10:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A913237D, serialNumber=1E86712B846416DEED5889A2536D8D009DC1F22E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:4b:a9:5f:93:63:3e:dd:03:99:dd:fd:1b:
84:a3:a8:41:4f:0c:4a:6d:f4:e0:6e:ca:58:f7:08:
05:3d:df:6c:c1:95:2d:59:84:ee:ce:a6:63:62:a1:
43:1b:f0:c8:89:1c:ea:75:33:e2:4f:3f:2a:f3:fb:
97:c0:cc:5d:2a:25:75:c1:85:82:34:72:6f:62:6d:
3d:0e:ee:2a:c6:68:09:67:7a:37:8f:17:b2:8e:bd:
2b:e8:00:54:d0:84:aa:99:4c:52:01:5d:c4:58:38:
0c:6a:ce:9d:ea:f6:5e:6b:34:69:62:67:f3:fd:87:
14:de:2c:21:be:07:fb:29:6c:ac:8b:e9:33:8a:4f:
55:9c:c2:3d:80:e5:7e:3b:7a:5f:c0:be:8b:5b:b2:
7a:87:25:aa:ee:ee:bf:35:fe:9c:19:5b:a0:15:31:
b5:df:3b:c5:a8:48:b1:dc:fa:f1:44:0a:1c:3e:5c:
28:55:3a:f2:ff:de:ce:39:b1:4e:87:27:1d:9d:f5:
17:38:73:1c:e8:4d:15:6c:c9:cc:96:e5:d5:94:21:
4a:cf:f6:3c:0b:5b:99:14:d6:8c:8e:df:29:8e:73:
9e:37:24:cc:fb:51:2b:96:1d:4a:68:67:e4:ee:eb:
b7:61:99:f7:ce:0f:8f:7a:1b:70:9e:e5:95:f4:37:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:86:71:2B:84:64:16:DE:ED:58:89:A2:53:6D:8D:00:9D:C1:F2:2E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154573
sbgp-ipAddrBlock: critical
IPv4:
163.128.134.0/23
IPv6:
2402:5420::/32
Signature Algorithm: sha256WithRSAEncryption
67:b1:fd:30:46:82:08:0e:e5:dc:ec:44:55:80:6f:ac:80:87:
b2:79:51:fc:b2:c2:c1:26:e3:73:3b:28:5c:6b:5d:5d:1f:fa:
bf:4c:0b:f7:4d:81:62:b1:4e:e5:97:e7:d4:4b:fc:5e:76:5a:
b1:ac:6c:2f:1c:f2:21:e2:0c:58:bd:2b:0d:eb:93:35:4a:60:
ce:a1:9e:a9:c1:9b:f6:65:45:15:12:56:d1:6e:45:8c:b1:2d:
09:50:9b:de:29:b0:78:c8:20:cd:3e:ca:80:a7:23:6a:84:9a:
10:69:3c:06:79:92:60:44:09:27:c3:99:27:0f:02:35:bd:7e:
78:38:aa:27:5e:6e:62:4e:67:e0:10:e8:e5:94:c3:32:3a:b6:
2e:7b:ec:a2:9e:de:9f:69:86:46:cc:af:d9:df:97:72:2d:87:
5f:a6:50:5c:92:9a:89:51:88:e2:37:ef:96:00:17:6c:52:30:
bf:49:8f:72:ab:81:d1:3c:18:6f:6f:b5:aa:fb:98:76:da:18:
07:77:11:d3:c8:c1:4b:a2:03:36:fc:4b:68:48:7d:67:77:ff:
99:bc:67:50:26:35:0a:8c:a7:e0:0c:ea:5c:33:32:da:07:49:
07:7b:41:fe:89:d1:43:ae:3a:7f:8b:c2:34:8f:3b:d6:29:70:
f0:36:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:02 2026 by rpki-client