Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
File: HQ2sEe2C41wjsMvv--4AYmOwmVc.cer (raw, json)
Hash identifier: 60aaQXA+qDOeeJPhR6wQSRD9k+mONS2BoHRmAGSbuCc=
Subject key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B486
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 May 2026 14:37:02 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 153883
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177286 (0x2b486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 13 14:37:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:2a:35:c1:08:b8:a8:d8:28:8a:9b:79:8a:
e4:07:da:b7:ee:79:fb:f6:3b:aa:c1:10:8f:5a:b9:
ed:50:51:9f:0a:c4:37:5a:5e:bb:3c:39:86:09:2a:
67:57:c9:13:c1:3c:46:36:93:1b:9c:84:42:9d:f2:
aa:7d:e5:89:b7:fc:a6:28:72:0e:07:ab:19:c0:66:
01:73:33:ee:46:7a:09:2c:48:b9:b4:98:e5:85:8b:
93:3e:90:12:d5:67:b6:ff:e4:46:91:1e:75:be:3a:
66:f9:e8:c4:a4:0f:85:36:ec:fd:46:e7:1e:3d:dd:
cf:1c:61:76:be:63:4b:af:a2:c4:bb:69:0b:f0:e1:
cb:02:37:54:6a:cf:be:2f:d8:91:99:57:dc:e7:ed:
de:ba:e8:f1:a5:24:2c:86:b9:f5:44:55:17:4c:89:
08:5a:8b:54:8b:0f:0a:76:95:66:0b:9b:da:e2:f5:
ab:f3:bc:b7:a8:e6:c3:0b:4b:5d:2d:54:d4:f7:97:
ea:c7:54:25:f5:e6:35:41:02:29:a0:79:e3:55:d7:
b6:e9:e7:0f:9a:cf:ce:1e:84:c5:6b:40:31:6c:db:
02:98:bf:e9:04:7a:26:2d:c7:e0:99:37:87:73:d3:
8f:bd:c0:d1:35:2b:a6:c3:b2:65:a5:8f:7f:b7:b1:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153883
Signature Algorithm: sha256WithRSAEncryption
ad:ec:b8:b2:81:36:4b:06:fa:2d:2a:10:cd:f8:95:34:10:8d:
09:3f:dc:84:c8:72:97:4a:f8:50:7b:93:5e:a3:64:fd:62:17:
ad:21:0d:76:37:81:57:c9:c9:17:3e:e8:56:24:61:c6:e7:f5:
93:07:ce:81:89:f0:2f:ed:c5:4e:0b:32:00:b9:a7:74:5d:36:
c0:5f:29:e7:ca:c4:6e:a3:53:25:b2:52:37:76:81:be:5c:72:
d5:ba:91:22:a3:4a:08:a6:3b:c9:53:a3:09:dd:07:f6:3a:d9:
3b:68:0a:46:d7:c0:b4:a2:02:be:fc:e8:04:3a:1f:e5:de:fb:
52:a4:9b:32:97:40:b4:62:3e:06:ab:f8:9d:43:92:9c:b8:b7:
84:a5:65:ac:be:aa:62:24:51:13:ee:e9:64:06:b1:a8:ae:52:
16:be:c5:cc:d5:7e:fa:c2:53:23:47:14:8e:44:f5:bc:e8:c6:
25:29:ff:d3:fd:5a:3f:77:8f:ee:8b:44:31:cf:74:15:98:01:
2f:1e:63:82:33:bf:64:b8:b1:a1:c9:6e:1d:d3:04:c1:83:5c:
6e:cb:e7:c4:4f:64:3f:0e:d0:eb:b7:77:c0:5a:e2:5b:b6:0c:
12:72:2e:e3:df:d5:41:24:2f:0f:37:15:bf:bb:06:98:76:9a:
1c:60:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:41:50 2026 by rpki-client