Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer
File: A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer (raw, json)
Hash identifier: 8YOK3t84kLSuzW0GWIdnH//vdYlh8A0Bwxb3mhFxhUQ=
Subject key identifier: 03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CD27
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Aug 2026 18:16:52 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154824
IP: 45.249.63.0/24
IP: 2402:6e60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183591 (0x2cd27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 13 18:16:52 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A911E3C6, serialNumber=03867130401AFB1283677BC07309EA94C708C76F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:eb:b5:b8:1d:0f:38:38:01:9a:35:21:e8:
8f:83:12:05:e2:b9:3f:68:8a:e2:f7:b6:0e:64:8d:
08:bb:98:2c:ed:54:4c:a7:83:5b:a6:ad:ec:b1:65:
4b:07:f8:39:a8:99:48:a7:36:d2:c6:86:81:5c:d5:
ad:de:a9:35:87:ab:0b:6b:13:6d:2b:09:23:5a:16:
c3:a0:8c:ba:d6:c7:fc:db:eb:19:4c:8d:6c:e4:4d:
d6:e3:f8:bb:c9:0d:a9:75:6f:61:12:4f:6b:42:6b:
ba:3d:e0:80:a5:78:d3:bc:56:37:ad:ab:e3:05:f0:
e1:53:12:c4:22:93:9f:b3:c4:34:3d:c7:f7:59:19:
9d:c4:06:57:0c:27:35:35:5d:22:c0:6c:6c:24:b5:
e2:88:41:89:64:a6:5b:e7:93:b0:55:48:bf:b8:e0:
e9:a0:ac:f6:17:c1:2c:66:c7:06:69:20:1e:f1:ab:
93:e8:34:be:2d:3e:a5:34:b5:45:ef:34:c6:50:25:
d8:12:0e:2e:ab:54:ba:79:6c:e0:c7:b3:62:08:b1:
15:da:fb:01:67:57:7b:a0:3b:22:f2:9d:19:39:d2:
16:d0:a6:d9:dd:1c:65:c9:95:ce:b6:49:f6:36:ff:
57:61:42:1e:3f:f2:76:aa:ca:97:98:4c:59:10:95:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154824
sbgp-ipAddrBlock: critical
IPv4:
45.249.63.0/24
IPv6:
2402:6e60::/32
Signature Algorithm: sha256WithRSAEncryption
57:99:34:70:4d:aa:a1:7c:54:da:76:cf:60:ae:2a:5d:a1:4b:
a4:0f:7a:b6:b6:4d:49:fe:26:09:4a:20:33:84:95:8e:16:5e:
99:32:e6:5e:45:23:d2:d5:6a:fe:27:f9:6a:42:8f:67:a4:53:
fd:0d:77:96:e5:ad:62:a5:18:0a:75:bf:d9:84:dd:bc:cf:25:
b0:84:e3:36:f4:ef:5b:bd:b8:55:c8:be:f2:55:5f:ca:3d:47:
49:42:e9:f1:c1:58:b8:57:bb:ae:18:70:55:18:e0:a2:b0:37:
4a:9d:38:ae:8e:3c:dd:19:b6:be:59:54:7e:a2:d0:bb:a4:73:
d5:fd:9e:ec:e1:98:d3:c3:32:3b:50:12:58:f8:17:b0:fe:97:
4f:d8:2a:4f:71:ee:13:de:ff:1d:68:9f:2e:ab:cb:3e:56:c5:
f9:0f:ef:fc:e5:ea:8f:6a:1a:f5:42:37:f2:fd:a6:1c:f0:e9:
b8:c9:9e:75:39:14:b0:8f:58:fe:d3:ff:bd:70:ad:46:74:94:
71:fd:aa:3f:6a:a2:63:c6:aa:1c:d2:8e:80:7a:54:7d:f5:63:
59:ca:03:e0:d3:2e:58:75:3d:05:a5:62:f0:43:0d:cc:2a:8c:
4a:52:d8:b3:b2:29:2e:e6:72:f4:51:e1:c9:5a:b6:5b:f3:52:
d4:c6:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:05 2026 by rpki-client