Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
File: pNgA2xjHwseXEbNfyLfSF9x9TG4.cer (raw, json)
Hash identifier: FdBIPC20P6HYxkl4T4rieW+EMSNxdYhhBTEOyzt5yBw=
Subject key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A738
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Mar 2026 10:41:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154562
IP: 163.128.98.0/23
IP: 2402:5260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173880 (0x2a738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 30 10:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:df:fe:a5:d8:57:fa:9c:4a:73:4e:5f:cb:
dc:c5:90:4a:9a:46:c9:b0:a1:8f:42:f1:8f:23:dd:
05:42:d9:51:3e:9e:ed:e9:2d:59:0a:ad:52:bc:15:
5c:47:3d:74:f5:67:c0:5a:d6:e6:b1:24:c7:22:c7:
eb:5b:d9:52:7a:5b:19:a8:cb:7b:46:94:50:ee:f7:
fe:e0:61:c6:68:40:f5:28:c2:a5:25:3a:6c:01:ca:
8d:1b:c5:63:0c:e2:34:5f:f4:8e:a0:de:ec:eb:7f:
ca:77:2e:b9:6e:49:96:20:18:70:0e:c4:d2:62:49:
1b:18:13:f4:69:ef:99:fe:13:0a:ba:7a:16:9f:de:
92:7b:cd:66:08:cc:71:39:aa:dc:f8:4c:3f:79:4e:
aa:3a:59:c0:20:94:ef:ac:63:a4:cf:48:f7:6a:fe:
ce:77:ab:47:2e:8d:86:78:2f:f7:72:54:89:40:34:
0b:be:fd:14:da:1b:a6:f5:b5:bb:94:e8:e9:2e:97:
4b:fb:24:85:07:55:27:5c:c7:ab:2f:20:86:f8:fd:
2c:d0:92:79:69:3e:a2:5c:14:0b:6d:33:cb:03:d0:
bb:0d:90:f1:d6:2b:52:b8:4e:5b:62:d8:dc:bc:dd:
b0:91:83:45:e4:6c:46:94:85:8b:17:26:2c:5e:04:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154562
sbgp-ipAddrBlock: critical
IPv4:
163.128.98.0/23
IPv6:
2402:5260::/32
Signature Algorithm: sha256WithRSAEncryption
8c:79:fb:9a:50:c9:e8:37:11:66:63:63:0a:9b:d8:47:fd:e4:
a5:bf:25:95:80:c9:d9:57:54:c5:f0:91:f3:ce:fb:4f:5d:b0:
7d:96:d6:59:05:47:45:a8:f9:cc:32:db:3a:9c:ed:ce:7b:6b:
3a:e6:76:4e:d1:26:ad:66:af:e9:0c:40:29:e4:6f:00:9e:fe:
21:64:c4:cb:50:e8:98:d5:db:17:5f:01:4e:47:4e:ab:c8:60:
63:46:e7:1b:47:b9:b7:42:75:8e:01:13:38:b1:d9:46:bd:0d:
90:4e:a8:d2:41:ce:f3:d2:bc:f6:58:e6:c9:a6:be:45:d2:9d:
c7:ee:bf:1f:fe:87:5a:c1:a2:2d:1f:80:59:94:64:1c:0c:bb:
c5:03:4a:6a:4f:c6:da:f4:e1:56:32:03:7a:3a:ac:54:6d:be:
58:62:c9:35:e3:d3:f2:05:66:a0:39:07:2e:67:46:7c:8f:1f:
ea:0e:7d:36:7a:8d:1d:18:70:be:5a:bb:25:68:94:9b:73:56:
4d:3b:19:85:6c:cf:84:5c:ae:b1:c3:6d:fa:c8:ce:d4:87:73:
fe:88:fb:5f:f7:b0:e9:9f:98:0b:4d:20:a0:84:76:60:28:f4:
64:ab:fb:65:b7:96:e0:2d:84:ec:80:52:30:d4:a6:83:da:90:
df:0c:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:01 2026 by rpki-client