
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06UO20LhYmfFVu4xl9edpaVxu4A.cer
File: 06UO20LhYmfFVu4xl9edpaVxu4A.cer (raw, json)
Hash identifier: Os84fTg8RCI5AT4+f64Tx7fUYro3xUq+eeWVzAvxj5A=
Subject key identifier: D3:A5:0E:DB:42:E1:62:67:C5:56:EE:31:97:D7:9D:A5:A5:71:BB:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B1EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 May 2026 04:51:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 152480
IP: 163.128.114.0/24
IP: 2001:df6:d9c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176622 (0x2b1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 4 04:51:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9112EF1, serialNumber=D3A50EDB42E16267C556EE3197D79DA5A571BB80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:29:64:d7:aa:5d:40:62:84:77:5c:60:c0:
84:79:24:96:1a:5e:1c:aa:45:5e:f3:bc:38:e5:72:
ca:cf:c8:0b:f4:23:79:0b:b7:c4:fc:89:2b:b0:cd:
c5:38:e2:46:e2:6d:b4:ab:31:d0:52:46:c2:89:b4:
b2:7e:d4:28:4f:ab:13:0d:0d:11:43:7b:e8:61:44:
7c:0b:ce:ce:db:70:73:32:5d:61:32:d6:35:84:c5:
7f:7e:fa:89:1f:87:c2:6d:fd:46:6c:54:2f:5d:df:
42:17:e0:8e:6b:6d:2e:b3:0f:d0:19:9c:9f:15:8b:
cb:14:04:ac:99:9b:81:21:4f:71:7c:ff:52:5c:ef:
40:44:41:f1:0b:ad:a9:7a:4f:bf:0a:ff:84:73:9c:
1b:00:ba:28:62:b6:1e:dd:7f:0d:cc:4b:fc:5a:9f:
86:36:27:fc:7d:d8:b0:46:eb:0a:41:4a:ec:4f:ee:
22:3b:3c:ef:e6:cd:9d:68:39:e7:0b:54:9d:5d:7a:
85:c4:78:75:a6:f0:8b:d3:57:5e:8b:2b:30:3f:14:
c7:d9:42:62:c2:48:7c:7e:83:ed:1f:59:b4:a1:e3:
37:f4:4a:a0:a8:61:36:cb:1d:6b:d8:d3:fd:d5:d6:
55:91:46:44:3a:56:de:9d:b8:9b:8d:77:20:37:03:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:0E:DB:42:E1:62:67:C5:56:EE:31:97:D7:9D:A5:A5:71:BB:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152480
sbgp-ipAddrBlock: critical
IPv4:
163.128.114.0/24
IPv6:
2001:df6:d9c0::/48
Signature Algorithm: sha256WithRSAEncryption
59:74:e2:d0:f0:b2:b0:6e:88:0b:94:c9:d0:f3:8f:10:8c:0f:
aa:c1:6d:10:d8:66:07:63:50:4b:b2:3c:85:d1:14:8a:82:64:
a8:53:d7:73:5b:b5:9c:89:72:e4:1c:24:48:17:3c:46:30:1f:
11:78:be:15:8b:3e:6b:2a:09:2d:39:16:52:ed:30:fd:9e:5b:
e9:a9:84:23:4e:d6:b2:93:0e:21:f5:df:b4:a4:1e:ad:79:89:
b6:6a:fa:f4:e1:0c:11:90:4f:5d:8e:17:d4:83:3f:22:20:f5:
a8:a2:07:5b:01:7b:ac:2f:01:e7:a3:72:63:6b:c8:89:61:73:
52:e6:c6:79:89:5b:91:dc:96:6b:14:eb:9c:62:fc:61:d1:e9:
89:61:3e:f3:0c:f4:9c:43:40:67:85:ce:53:02:34:c5:c7:1b:
1b:f8:37:ac:2b:39:25:f0:a9:fb:53:6b:2a:ec:68:1f:f1:50:
54:1d:14:0b:26:71:d4:52:bf:ce:93:2c:44:b8:fc:da:ec:6f:
dd:e2:c3:81:d3:91:d3:c4:d3:7d:c9:96:b4:5c:60:81:93:0a:
e8:6b:f4:74:82:f2:53:1d:47:36:7d:ee:1b:11:c7:ba:02:fe:
12:7b:7a:ca:e6:1f:7c:4d:e1:fb:56:28:f7:02:30:0b:ef:1f:
1f:d5:d9:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 08:40:36 2026 by rpki-client