Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.cer
File: TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.cer (raw, json)
Hash identifier: 1zrm2/4lDRTamJkvl/5fisN/o9u6KCJnAGo1z0xDCrM=
Subject key identifier: 4C:F9:C9:94:E2:5B:27:F1:54:4F:81:B9:5E:13:5D:E4:F7:79:DC:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D80B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Sep 2026 14:53:27 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154927
IP: 163.52.204.0/23
IP: 2402:76e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 15:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186379 (0x2d80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 23 14:53:27 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A913F7C0, serialNumber=4CF9C994E25B27F1544F81B95E135DE4F779DCB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e0:a9:dc:b7:0f:5e:40:7e:bb:6d:e4:28:99:
3d:8c:86:60:4b:88:c0:81:57:56:f5:fe:49:ce:cc:
85:b5:e4:15:66:f5:50:6d:bd:bd:15:a3:26:ef:d9:
93:31:02:78:18:2f:0a:4c:ac:ef:de:c5:e7:d3:5b:
69:74:61:9a:20:88:a9:a9:0a:d1:86:c4:25:37:5a:
dc:f9:84:0e:60:2e:f1:81:ea:81:b3:7d:f6:80:80:
cd:4c:a9:b0:78:be:78:be:de:4b:2c:e2:be:f0:77:
b8:15:4c:9e:94:38:e3:2c:55:20:c0:27:00:f1:40:
98:e4:7c:4a:c8:17:e4:93:c0:f4:f4:cd:82:9a:ae:
b8:25:ef:0d:cd:df:18:f5:17:9d:ca:50:8a:c2:7f:
90:22:f4:a4:31:f5:97:67:b6:72:27:f4:f0:4e:1a:
db:f6:bb:7a:6f:b6:0d:42:ee:1d:77:d8:b3:95:90:
78:95:cf:08:c2:d1:ce:70:a7:74:fc:1a:ee:7a:b6:
00:5d:81:47:7f:ba:08:7b:22:f4:3d:fc:44:25:df:
f2:3e:d3:4e:da:d7:8b:d1:dd:2c:cc:bd:a6:1c:ad:
c3:c0:e4:f6:d0:ec:eb:15:44:cf:a7:e8:6e:40:45:
fb:cb:f8:b6:42:f0:39:f3:12:5e:fe:1b:c6:b9:3a:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:C9:94:E2:5B:27:F1:54:4F:81:B9:5E:13:5D:E4:F7:79:DC:B9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F7C0/869496FEB75E11F1B87D739B4111F970/TPnJlOJbJ_FUT4G5XhNd5Pd53Lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154927
sbgp-ipAddrBlock: critical
IPv4:
163.52.204.0/23
IPv6:
2402:76e0::/32
Signature Algorithm: sha256WithRSAEncryption
ca:5e:7c:d4:ff:18:1b:95:fd:5a:2c:b8:8a:1e:65:a0:72:bb:
20:e4:ca:4a:2b:66:c1:5c:ef:d7:b5:2a:c6:23:6b:08:ef:17:
21:8a:77:e0:e5:7b:52:e1:d3:e3:b6:e4:f1:e4:fd:b6:4c:fc:
e5:e8:c5:b0:0c:5a:7c:88:dd:82:0f:c8:a9:0a:a7:16:c9:79:
4a:b8:56:a4:46:c0:b2:0b:c1:7e:81:1a:70:e1:62:27:d3:99:
a3:8d:fe:6f:dd:5f:b2:44:75:a7:a0:1f:19:27:1f:e7:2e:b2:
40:49:15:a2:eb:75:c0:43:46:15:01:ea:91:66:ca:aa:dc:ff:
0c:f0:48:40:22:2e:42:17:1e:41:9e:52:eb:d2:a6:df:6e:6c:
88:38:90:d0:df:80:c7:e7:c6:fb:2e:af:00:42:f5:f6:02:29:
f6:8f:ce:47:0b:eb:b1:a2:ca:d2:62:76:db:e7:da:4a:da:7f:
b9:3e:51:aa:da:7c:50:f4:10:b9:5a:ce:89:3a:99:88:e7:12:
42:eb:b5:6f:74:17:45:dc:d8:de:89:8b:1b:df:8e:89:43:68:
1c:58:2a:cc:60:85:24:c4:a2:d8:dd:42:1a:cd:51:1f:92:3c:
b3:1e:74:91:7f:da:52:07:c8:ce:9e:d1:66:18:28:e1:91:d2:
45:1a:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:56:55 2026 by rpki-client