
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.cer
File: LWSp3S4yFvHFxi5ZH0Odhf7JYH0.cer (raw, json)
Hash identifier: B8UeQeoYiHkfK0zOYSARjoQIHeybfeF/NuE4XZtBF9A=
Subject key identifier: 2D:64:A9:DD:2E:32:16:F1:C5:C6:2E:59:1F:43:9D:85:FE:C9:60:7D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B29C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 May 2026 04:41:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154613
IP: 163.128.214.0/23
IP: 2402:56e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176796 (0x2b29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 04:41:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9180197, serialNumber=2D64A9DD2E3216F1C5C62E591F439D85FEC9607D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:15:d9:f1:3b:4e:6d:92:a6:e7:24:f5:45:
02:75:56:79:72:07:f0:12:51:22:4c:78:57:6c:3e:
04:28:44:2f:fa:14:9c:4d:47:02:d5:3e:c9:fa:96:
f0:49:f8:d1:e5:72:ad:54:75:52:64:92:ef:89:a0:
e2:a4:ad:58:a3:87:85:c1:49:db:f9:29:e6:ab:4f:
86:7e:50:8c:0e:1a:f9:1f:9a:e6:53:6f:c9:c5:37:
f5:6c:9a:d3:a8:5c:0e:91:16:a0:1d:d7:d0:46:bd:
05:54:71:57:de:40:12:6b:af:90:45:4e:d4:bf:ea:
48:46:3e:d7:33:1f:e2:78:5a:f1:7c:6e:b8:23:b4:
6f:d7:73:61:95:b0:32:8a:82:35:a5:63:bd:43:3d:
3e:22:1d:9a:92:66:11:87:bf:16:14:54:db:b9:c3:
8e:c6:08:1f:78:9c:1b:f2:54:ac:2c:30:8f:e9:09:
cd:41:70:77:31:d2:55:80:d4:a8:c5:e1:fc:57:3d:
ee:d7:92:c6:ff:15:4d:64:7f:61:e6:d4:ca:99:29:
2f:52:01:b6:19:fe:bf:e8:27:e9:a8:02:e0:5b:3e:
4d:3a:a8:ce:a2:11:7d:9b:c3:fd:cc:4d:66:95:49:
22:b2:24:4b:ed:ab:76:f5:a1:93:94:a7:30:7d:41:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:A9:DD:2E:32:16:F1:C5:C6:2E:59:1F:43:9D:85:FE:C9:60:7D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154613
sbgp-ipAddrBlock: critical
IPv4:
163.128.214.0/23
IPv6:
2402:56e0::/32
Signature Algorithm: sha256WithRSAEncryption
20:88:c9:5f:f4:6b:42:02:c3:a0:ab:82:5e:98:bf:ad:00:f8:
4a:13:b0:71:88:3d:ad:9b:42:2e:81:b3:f1:aa:66:97:b7:9e:
7f:a4:cb:47:ac:6a:64:ea:39:8a:0f:a2:b3:30:79:f8:7a:f9:
28:32:57:bc:78:aa:56:2d:4d:54:dd:6e:85:c4:29:7b:b2:1c:
e0:b1:89:28:08:2d:bf:e5:e4:db:9d:7e:ad:03:72:da:60:ea:
ac:cc:32:8d:81:83:af:73:70:63:bf:b3:ad:52:7a:d0:ed:16:
11:44:c8:bb:ba:f5:99:13:8d:64:6f:0b:b4:b6:4a:78:92:be:
e2:d1:ff:d5:32:7c:8e:6d:e9:0e:cd:6d:b0:3e:22:b2:7f:58:
a3:e1:b0:be:6a:b6:bf:b1:59:99:c6:98:24:ca:47:73:8a:7e:
c1:6e:50:8f:52:78:dc:14:2a:4e:0a:a4:97:3d:3d:22:09:35:
de:e8:60:f8:bb:22:32:ac:80:d5:1a:e8:41:f6:dc:62:47:4b:
4b:87:1b:b4:31:c0:0f:8b:48:7c:21:26:92:77:19:5b:af:55:
43:d4:75:ab:a7:2d:5a:6e:69:eb:c9:a7:a2:a2:e3:7f:cd:63:
c1:74:ec:32:2f:2c:ee:2d:19:20:68:46:33:90:6d:e9:03:c7:
a3:83:c7:6e
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDArKcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwNjA0NDE1MFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODAxOTcxMTAvBgNVBAUTKDJENjRBOUREMkUzMjE2RjFDNUM2MkU1
OTFGNDM5RDg1RkVDOTYwN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIzhXZ8TtObZKm5yT1RQJ1VnlyB/ASUSJMeFdsPgQoRC/6FJxNRwLVPsn6lvBJ
+NHlcq1UdVJkku+JoOKkrVijh4XBSdv5KearT4Z+UIwOGvkfmuZTb8nFN/VsmtOo
XA6RFqAd19BGvQVUcVfeQBJrr5BFTtS/6khGPtczH+J4WvF8brgjtG/Xc2GVsDKK
gjWlY71DPT4iHZqSZhGHvxYUVNu5w47GCB94nBvyVKwsMI/pCc1BcHcx0lWA1KjF
4fxXPe7Xksb/FU1kf2Hm1MqZKS9SAbYZ/r/oJ+moAuBbPk06qM6iEX2bw/3MTWaV
SSKyJEvtq3b1oZOUpzB9QZbVAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQULWSp3S4y
FvHFxi5ZH0Odhf7JYH0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwMTk3L0UzM0VCNzc2NDkwNTExRjFCMkE0MjU1Qzk2ODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MDE5Ny9FMzNFQjc3NjQ5MDUxMUYxQjJBNDI1NUM5NjgzMzc3My9MV1NwM1M0
eUZ2SEZ4aTVaSDBPZGhmN0pZSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlv1MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBo4DWMA0EAgAC
MAcDBQAkAlbgMA0GCSqGSIb3DQEBCwUAA4IBAQAgiMlf9GtCAsOgq4JemL+tAPhK
E7BxiD2tm0IugbPxqmaXt55/pMtHrGpk6jmKD6KzMHn4evkoMle8eKpWLU1U3W6F
xCl7shzgsYkoCC2/5eTbnX6tA3LaYOqszDKNgYOvc3Bjv7OtUnrQ7RYRRMi7uvWZ
E41kbwu0tkp4kr7i0f/VMnyObekOzW2wPiKyf1ij4bC+ara/sVmZxpgkykdzin7B
blCPUnjcFCpOCqSXPT0iCTXe6GD4uyIyrIDVGuhB9txiR0tLhxu0McAPi0h8ISaS
dxlbr1VD1HWrpy1abmnryaeiouN/zWPBdOwyLyzuLRkgaEYzkG3pA8ejg8du
-----END CERTIFICATE-----
Generated at Thu May 21 08:40:45 2026 by rpki-client