Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rbWOOyj2YD9PpgCCiWEnzb-TTc.cer
File: _rbWOOyj2YD9PpgCCiWEnzb-TTc.cer (raw, json)
Hash identifier: UzFsf6HVU+/4E7qfLy0NeqEkBgdfqRJV0NMXpb8yc4s=
Subject key identifier: FE:B6:D6:38:EC:A3:D9:80:FD:3E:98:02:0A:25:84:9F:36:FE:4D:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D628
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/_rbWOOyj2YD9PpgCCiWEnzb-TTc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Sep 2026 04:53:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 152670
IP: 163.223.218.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185896 (0x2d628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 15 04:53:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91D647B, serialNumber=FEB6D638ECA3D980FD3E98020A25849F36FE4D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:fa:e4:21:e3:be:9f:01:29:2c:38:6f:7b:
6d:a1:96:f3:79:0d:29:6b:28:d2:46:62:bb:de:b8:
1c:7e:25:03:33:7c:e7:24:2b:02:99:8a:58:ee:ac:
00:e0:94:c3:da:9d:29:89:84:8b:86:eb:4e:8d:30:
04:89:0d:9e:79:51:7f:e9:3d:b7:84:70:4c:a6:45:
12:3c:83:23:a1:ad:e3:39:2d:96:e9:ac:ec:2e:41:
5e:e3:73:0d:8d:be:a4:32:cc:ae:f8:31:bd:17:db:
11:31:59:5a:53:48:cc:eb:51:17:04:78:e4:d4:1c:
cc:88:ce:16:d3:34:e6:71:78:ed:15:7c:5b:45:92:
fa:60:bc:40:89:2a:2d:bd:ae:d9:a6:32:29:e4:33:
f9:69:b9:42:f9:83:9e:33:be:b6:d3:e9:3a:be:c9:
df:be:d8:17:97:af:c2:65:f3:e8:f5:4f:d5:97:a7:
d5:55:39:c1:f8:a8:f8:76:d5:a0:21:bc:f1:26:79:
91:e5:61:23:65:ab:cf:8e:66:a7:c0:76:9b:98:44:
ff:26:78:d5:6d:9f:ee:be:cc:08:d8:ef:1b:72:16:
8f:f7:ed:c0:16:b3:92:4e:32:52:f4:55:55:b5:f2:
27:9f:d3:88:23:4a:2b:2c:8b:27:be:e8:94:be:93:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:D6:38:EC:A3:D9:80:FD:3E:98:02:0A:25:84:9F:36:FE:4D:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/_rbWOOyj2YD9PpgCCiWEnzb-TTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152670
sbgp-ipAddrBlock: critical
IPv4:
163.223.218.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:e5:66:c6:a6:aa:e6:f9:19:e9:3d:a1:f6:57:77:74:c6:0c:
37:95:b2:e4:7e:b5:42:f8:6a:04:2c:fb:d1:3c:93:c9:91:71:
fa:51:30:32:48:11:0a:ac:b3:a0:e1:cb:e7:8a:32:ad:01:9d:
5f:08:1f:fa:76:00:18:92:5d:97:67:e9:c3:25:95:11:80:1f:
41:ab:c6:2e:b4:58:bf:65:49:59:13:67:e3:e4:d3:8a:af:fc:
7d:28:38:2b:21:86:c6:22:a4:a7:81:9f:e5:e8:1e:39:6c:94:
b8:99:41:43:54:ae:6c:38:ab:15:05:5d:d0:e7:84:58:b2:a5:
6d:49:d3:67:ff:56:1a:ff:44:70:4c:a2:7c:6e:e2:33:07:ce:
69:b7:f8:4e:da:05:d2:8d:da:eb:d1:84:97:31:b6:22:87:02:
30:f2:d4:e2:6c:0d:32:b1:ed:b3:20:b9:2f:fa:6f:03:c3:24:
fc:86:bd:a5:74:ff:c5:45:9b:b8:13:94:e8:d5:b5:2f:7b:ba:
d4:23:24:cb:75:82:8d:d4:3f:54:c4:df:2d:36:22:9e:02:57:
0b:79:32:68:d6:f8:c5:68:78:3b:35:45:8b:87:f1:e4:dc:89:
15:7f:01:7e:fd:ab:40:89:70:08:99:27:4f:2e:8d:88:60:85:
00:49:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:23:03 2026 by rpki-client