Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
File: vHDzdLcox7cRwkpoJ_dHekKyKk0.cer (raw, json)
Hash identifier: IO+u44+ZQPb+eV+Qk1QUQduusZ1MgyOHt1uvXLovN0s=
Subject key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AA12
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Apr 2026 06:23:05 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 153622
IP: 163.61.188.0/23
IP: 2001:df5:1dc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174610 (0x2aa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 3 06:23:05 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:8b:eb:cc:5a:32:c1:97:bf:27:9d:ab:f4:
75:e6:d3:97:24:aa:23:71:65:cd:bf:8e:4d:57:5b:
fb:02:b3:06:8f:4d:50:d5:0d:6e:f0:3d:49:9c:e1:
80:ef:d6:c4:c7:30:bf:9f:73:b2:14:fc:c5:ea:53:
f6:d0:ad:02:eb:e3:87:d1:61:ad:59:08:bb:28:a0:
12:dd:84:6d:ea:60:e5:3b:9f:8a:87:12:b3:33:dd:
b6:45:58:38:90:59:d9:8c:cc:41:63:d4:59:75:79:
f3:e0:0c:b4:c3:ce:69:60:fe:2d:f6:23:0c:de:f3:
4a:d5:a3:34:e8:29:20:c8:7a:5f:77:f1:09:ae:19:
66:0e:38:a1:81:1d:08:6a:8a:53:57:86:24:cb:53:
71:65:d6:b2:56:0e:b4:7f:c7:38:b1:22:73:48:8b:
54:68:49:58:25:2d:3b:bc:f9:51:f3:8f:3d:59:86:
41:7e:43:c5:d9:62:de:1b:bf:da:7c:02:0d:6d:91:
5e:0c:84:76:de:7f:eb:ed:c3:af:99:55:a8:be:fd:
3a:5b:18:98:f5:9a:0f:eb:7b:f4:71:27:62:3a:88:
fd:28:08:64:3f:2e:0b:cb:79:94:8a:43:f8:df:28:
50:46:74:e3:c5:26:91:78:4f:31:de:ca:29:da:5a:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153622
sbgp-ipAddrBlock: critical
IPv4:
163.61.188.0/23
IPv6:
2001:df5:1dc0::/48
Signature Algorithm: sha256WithRSAEncryption
94:7a:10:1a:a8:c0:e5:b8:99:25:4f:1b:0e:93:79:48:d4:78:
c9:b3:03:ab:55:68:93:e2:c5:26:0a:97:ab:8f:9e:90:1f:4d:
7a:dc:e7:2f:e9:ea:24:6c:3b:0f:04:e6:f0:d8:c6:61:be:48:
61:42:8c:4a:c8:df:df:46:f9:d4:ea:26:65:76:be:9d:fb:94:
66:48:47:15:50:e1:11:84:1f:dd:f1:0d:4f:f9:cd:07:bf:d0:
bd:7a:69:44:72:b7:f1:ac:ca:f2:b1:60:1e:5f:9a:5e:a2:9d:
78:ce:14:86:9e:66:b4:a8:48:81:fc:66:8f:33:72:95:47:d6:
fe:89:b9:0c:d9:a1:82:f2:1d:ab:4b:78:5d:12:eb:75:d6:4f:
42:9c:4d:f7:ee:a1:f2:89:51:c2:f2:52:0b:06:b7:c4:c6:0f:
6c:2a:8d:d4:93:7e:b3:40:86:ea:b6:42:09:34:e2:4f:7d:b8:
b5:e3:92:f7:19:e9:cd:7a:4d:7e:5d:b8:74:6d:00:e7:a6:d2:
a6:14:c0:f9:b7:dc:83:fa:f6:e6:98:19:c8:d0:64:5c:9e:54:
85:ad:da:47:a7:0f:d8:be:ea:3d:96:69:00:eb:0f:8f:8c:88:
04:55:c2:71:3c:c3:10:c7:03:a1:8d:cc:c0:d5:b2:47:98:6b:
cb:a1:5a:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 18:34:15 2026 by rpki-client