Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer
File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer (raw, json)
Hash identifier: 2WQ3eyVWf6Ekw9BaMUzhZnBjn9Q7/blm9+rdqAK7fcQ=
Subject key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B587
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 May 2026 07:13:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 153792
IP: 163.227.98.0/23
IP: 2001:df5:6140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177543 (0x2b587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 19 07:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0e:09:b7:c3:28:b9:86:e6:01:76:96:15:80:
a8:10:25:48:50:9d:14:6a:c6:4f:70:6d:69:4b:a3:
a7:5b:b0:d2:e8:3b:61:51:46:d3:1c:c0:18:28:d2:
2b:65:36:16:4f:44:44:80:ef:ea:71:ca:da:0d:41:
2d:58:71:eb:92:d8:40:3e:d5:7b:c7:9c:c8:63:4b:
2b:63:9d:e9:e6:d1:a0:e9:af:4f:98:a0:29:84:05:
18:67:d7:cc:06:4e:af:87:0a:e8:2c:8c:74:db:dd:
c3:06:40:f0:a9:02:d9:2e:39:42:6f:bc:f7:ed:65:
0c:3c:59:99:d5:b7:a7:8b:7b:87:03:98:e8:ee:b7:
74:fc:30:9a:56:28:5c:16:6c:b8:5c:0d:5d:b7:40:
9b:83:89:0e:60:b1:89:82:a1:c1:6d:88:1c:8a:30:
ce:0f:9d:38:33:41:93:54:d3:1c:41:39:41:1a:6a:
c7:51:d9:b6:1e:b9:ad:d8:ef:23:7e:3d:c2:da:66:
db:5c:f3:5a:8c:00:46:2f:aa:8d:25:fa:42:20:df:
ec:24:32:d8:6f:ee:36:c8:1a:a5:59:13:62:26:a6:
05:d4:95:53:c8:cc:bf:28:d6:24:34:06:a8:56:53:
b0:76:4a:9b:45:e5:66:39:c8:2c:54:4b:46:d8:53:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153792
sbgp-ipAddrBlock: critical
IPv4:
163.227.98.0/23
IPv6:
2001:df5:6140::/48
Signature Algorithm: sha256WithRSAEncryption
a6:e6:11:1b:c1:bb:ab:bd:ae:cc:51:e9:fc:d1:96:e6:8e:31:
4d:e0:a4:76:33:bb:a9:62:21:6a:e3:4a:ab:97:9e:3a:e5:77:
51:51:fd:2d:19:d2:f1:38:a0:52:cd:d3:0f:d5:6b:ac:ed:5c:
cc:59:b5:5e:ae:12:1e:15:e9:4d:08:39:66:2a:ea:84:90:83:
4a:d8:3c:9d:6e:86:45:d3:62:64:49:31:3c:5e:f1:ea:15:36:
f4:32:27:7e:63:40:1a:17:b2:0f:93:96:06:ab:e8:9f:ca:d8:
57:1f:54:d0:71:45:7b:b5:e6:7c:b9:6a:ee:f9:5a:d4:76:7f:
59:56:61:37:59:0f:fc:05:21:1e:67:cf:3e:45:d8:19:0b:18:
af:17:89:e6:fc:14:33:7a:f1:f9:3c:37:7f:6c:ee:18:89:1c:
03:e7:aa:a1:54:e2:30:95:1b:bb:0e:5d:34:94:aa:fb:67:57:
b0:83:d6:47:92:71:a0:f0:b5:b2:b7:8c:93:22:83:09:be:6f:
96:ac:a8:39:81:3e:5b:e2:cd:72:39:4c:67:63:7c:c8:31:4a:
38:fa:d0:78:1f:cc:c5:a7:2d:10:75:ce:04:9c:2c:fe:d7:fd:
aa:af:fa:9d:f7:f9:a1:ff:e2:2c:a9:d5:06:06:49:25:04:fb:
55:7a:61:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:05 2026 by rpki-client