Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
File: asoRKbI4x6HxeRt1zUmta9at-nc.cer (raw, json)
Hash identifier: 6Ug548blEY8D4npBqpJG7jib/E9zAe0dLTe81h+C4Sg=
Subject key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028EA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Feb 2026 13:48:29 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 153529
IP: 2001:df4:efc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 12:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167593 (0x28ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 11 13:48:29 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:4e:98:34:bd:e8:27:3a:0e:d9:fd:e4:48:
89:ca:ff:b3:c3:0e:f4:bd:ec:c0:52:52:24:e0:04:
0b:f5:3e:f3:19:fc:4b:d5:42:3f:c5:61:39:ab:01:
a9:ee:ae:b1:13:d5:f8:1e:54:54:71:a4:e7:e4:c0:
51:67:98:74:10:04:9a:3a:95:c7:26:d8:bc:ad:68:
9f:f1:b6:27:89:95:66:81:8e:c3:ef:9c:74:e6:0f:
cf:8a:cf:e5:3c:10:44:06:50:c5:75:21:2a:76:98:
22:62:ec:43:23:4d:9b:41:40:08:69:dc:7c:47:6b:
d1:63:1e:a1:fa:6f:c5:63:1d:21:b0:fd:b1:08:08:
11:22:ec:77:4c:88:cc:1b:7b:81:b2:b5:5d:d0:76:
7e:f7:6d:e2:29:63:bc:be:95:81:74:95:1a:73:07:
91:58:a2:9f:63:de:5b:ef:92:66:6e:46:6c:0c:99:
e8:27:3c:08:0b:4d:9d:c0:dc:38:63:c9:66:c4:5b:
ae:7e:74:ce:61:c6:95:f2:c6:4e:91:21:13:a1:2e:
42:fb:b0:b7:26:81:3c:28:3f:03:86:e1:a8:5f:f5:
31:9f:ed:f3:09:48:3e:e3:c8:86:0e:c1:dc:09:ae:
75:c4:be:74:04:ca:c0:1f:ce:2f:39:87:e5:85:ad:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153529
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
cf:d9:c4:2f:d1:f0:e2:f6:fa:18:41:ab:5f:7d:c0:34:1a:a3:
4b:05:69:1d:e3:c8:a6:27:41:c0:90:35:61:bb:24:a8:69:54:
5a:d8:12:0e:d6:23:8f:f3:4e:da:0c:12:9f:f5:9b:3b:68:53:
69:1b:42:6c:e9:aa:46:cd:22:cb:37:10:1e:6e:1c:e6:fe:0d:
91:fc:e4:31:b6:c7:93:19:84:b1:08:21:8a:74:06:df:47:03:
82:6b:7a:d1:4a:2d:b6:f6:df:42:04:a4:5c:ae:a5:f3:8e:c0:
ae:ae:4c:4f:ef:27:50:07:a2:26:41:05:31:a0:c8:2e:17:87:
37:10:40:c9:31:cc:94:3c:37:f4:30:ac:ad:a8:16:2a:66:ef:
cc:3e:c8:84:e0:4f:33:84:ef:44:a1:bc:eb:24:e0:07:60:34:
31:60:e4:67:ea:1f:4e:96:84:e5:33:94:85:3f:29:ec:e5:3f:
27:20:b2:57:71:3f:1b:62:c5:65:1a:8b:f0:0b:28:64:a7:83:
f8:3e:e4:a8:56:21:7d:7a:41:99:9b:c7:20:9a:92:7a:13:46:
75:07:68:e6:a6:6d:28:52:14:f9:aa:f9:52:1a:b5:18:40:ce:
0a:4f:62:fb:16:95:dd:6b:09:74:6a:31:6d:c8:f5:ee:1b:8a:
ce:c1:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:09:00 2026 by rpki-client