Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
File: ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer (raw, json)
Hash identifier: OzwBAkUzeffsRN++XNGX1Ypc67HgIKtnwVerTBj3uqk=
Subject key identifier: A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A93E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Apr 2026 05:01:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154579
IP: 163.128.144.0/23
IP: 2402:5460::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174398 (0x2a93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 05:01:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A912B1E4, serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:93:94:83:7f:3e:76:cb:71:56:8e:d6:87:
ed:f5:52:cd:f8:4d:fc:c4:c6:12:d2:29:c7:3d:df:
fe:dd:72:75:41:1e:da:19:c7:89:a7:3c:83:e2:32:
89:5b:23:d6:42:a1:6a:86:c1:58:4b:4d:9d:3b:e4:
ba:7c:f3:6c:a1:6c:1b:7f:a3:fb:e6:57:9a:1e:5f:
9a:ea:43:47:86:8d:7a:a1:98:b5:1d:36:7e:7b:eb:
60:89:09:ef:25:3d:e8:b1:3d:1c:fb:21:24:cc:87:
2f:ed:f1:c7:c3:06:b6:4d:43:4d:fa:ea:b1:33:64:
36:a4:6c:4c:ab:2a:bb:e6:ba:87:8b:d6:99:32:cb:
3d:1a:60:94:a8:28:fe:a7:32:53:32:12:ef:88:da:
03:32:d1:12:8d:9c:7d:28:34:2b:4b:54:8f:c6:c1:
3b:e7:de:06:93:15:c0:1c:98:eb:14:f0:bf:07:3d:
99:0f:00:f9:f7:65:c0:e8:8b:b8:83:54:a5:f9:e9:
87:80:05:4a:27:93:b4:94:a0:54:07:23:17:aa:31:
83:a9:e9:d8:76:49:6e:21:d5:db:7f:8e:71:44:59:
5a:32:a5:d3:ce:e1:9d:94:29:85:19:83:94:52:bd:
0f:c9:00:7d:f8:5b:aa:22:72:35:5b:1b:44:2b:41:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154579
sbgp-ipAddrBlock: critical
IPv4:
163.128.144.0/23
IPv6:
2402:5460::/32
Signature Algorithm: sha256WithRSAEncryption
8d:5f:7a:65:a3:91:eb:5b:18:db:a5:ef:8c:0e:c4:8d:3c:e5:
4e:70:a3:7e:40:5a:10:33:1e:68:00:2a:80:4f:85:22:aa:74:
61:f7:e2:ca:97:7c:08:ea:0c:55:55:b9:5b:4a:c9:85:a8:10:
62:68:69:be:a6:2c:5f:58:7c:77:07:c2:dc:08:7d:81:3b:29:
93:b6:53:6c:36:ae:1b:43:65:d3:7b:a3:f3:6b:aa:06:5f:2a:
f5:be:d6:bf:4e:1b:2a:51:2c:00:c4:77:62:fb:b9:c7:3d:86:
3b:e5:cb:13:94:d8:b0:e9:91:27:d4:04:02:5a:ed:fb:8c:0c:
a5:bb:1b:29:3e:fa:76:ee:98:68:22:b1:f2:d7:3c:11:68:2f:
33:38:f3:6d:fd:34:55:97:7d:5d:d2:08:ee:c8:01:c7:50:3e:
27:6e:0c:5d:c1:6e:7c:70:27:85:fb:0f:5a:5b:0c:f9:a0:5a:
1a:91:23:9f:71:0b:01:49:f9:6a:ca:e0:80:0a:d3:99:58:4c:
eb:26:bc:fa:dc:72:5f:a4:57:a1:b9:b7:6e:6d:66:bd:e1:d5:
f6:77:26:11:0e:70:3c:c3:8c:aa:bf:8e:5c:e3:d2:07:69:fd:
f1:3c:99:c2:f0:b1:b0:26:a0:b3:05:d1:6d:27:33:55:5b:8c:
c1:fa:e7:bf
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAqk+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQwMjA1MDExMVoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkIxRTQxMTAvBgNVBAUTKEEyMzFBOTZBQTIyMjhBMzI4QkM4RTY1
ODVFNzM2MzBEQjQzRjExMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChVZOUg38+dstxVo7Wh+31Us34TfzExhLSKcc93/7dcnVBHtoZx4mnPIPiMolb
I9ZCoWqGwVhLTZ075Lp882yhbBt/o/vmV5oeX5rqQ0eGjXqhmLUdNn5762CJCe8l
PeixPRz7ISTMhy/t8cfDBrZNQ0366rEzZDakbEyrKrvmuoeL1pkyyz0aYJSoKP6n
MlMyEu+I2gMy0RKNnH0oNCtLVI/GwTvn3gaTFcAcmOsU8L8HPZkPAPn3ZcDoi7iD
VKX56YeABUonk7SUoFQHIxeqMYOp6dh2SW4h1dt/jnFEWVoypdPO4Z2UKYUZg5RS
vQ/JAH34W6oicjVbG0QrQV79AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUojGpaqIi
ijKLyOZYXnNjDbQ/ES0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJCMUU0L0Y0RjUyQ0Q2MkU1MDExRjFCMTI5MkRBOTk3ODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyQjFFNC9GNEY1MkNENjJFNTAxMUYxQjEyOTJEQTk5NzgzMzc3My9vakdwYXFJ
aWlqS0x5T1pZWG5OakRiUV9FUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlvTMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBo4CQMA0EAgAC
MAcDBQAkAlRgMA0GCSqGSIb3DQEBCwUAA4IBAQCNX3plo5HrWxjbpe+MDsSNPOVO
cKN+QFoQMx5oACqAT4UiqnRh9+LKl3wI6gxVVblbSsmFqBBiaGm+pixfWHx3B8Lc
CH2BOymTtlNsNq4bQ2XTe6Pza6oGXyr1vta/ThsqUSwAxHdi+7nHPYY75csTlNiw
6ZEn1AQCWu37jAyluxspPvp27phoIrHy1zwRaC8zOPNt/TRVl31d0gjuyAHHUD4n
bgxdwW58cCeF+w9aWwz5oFoakSOfcQsBSflqyuCACtOZWEzrJrz63HJfpFehubdu
bWa94dX2dyYRDnA8w4yqv45c49IHaf3xPJnC8LGwJqCzBdFtJzNVW4zB+ue/
-----END CERTIFICATE-----
Generated at Sun Apr 5 18:27:56 2026 by rpki-client