Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZ7lvcjZUimqKv11kDQwnl6Rjl0.cer
File: cZ7lvcjZUimqKv11kDQwnl6Rjl0.cer (raw, json)
Hash identifier: jnqHk3Y02Ditz3BN73lZNouV1BnVTIgLI9qiNahcR+k=
Subject key identifier: 71:9E:E5:BD:C8:D9:52:29:AA:2A:FD:75:90:34:30:9E:5E:91:8E:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D95E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/cZ7lvcjZUimqKv11kDQwnl6Rjl0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 04:14:49 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154952
IP: 163.52.255.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 05:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186718 (0x2d95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 04:14:49 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91FA8C4, serialNumber=719EE5BDC8D95229AA2AFD759034309E5E918E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:b7:20:77:0e:9b:e0:8d:0a:5c:0b:7a:9f:
cb:85:fb:4b:3d:ad:5e:c0:99:5e:33:29:84:2f:d8:
88:3e:75:33:6a:12:fd:84:b1:c8:8b:c6:a5:2d:db:
e0:b7:33:85:d0:49:10:f4:ad:3b:19:c6:48:6d:7f:
86:45:96:c7:b3:d6:b7:82:80:74:5f:ab:5a:66:9f:
b0:60:8f:ac:27:cf:d5:4a:53:85:4d:4b:ae:6e:61:
ad:84:70:c4:5f:65:1b:51:4b:a6:cf:da:3d:94:c0:
e9:1c:06:97:40:c8:f2:28:59:89:10:cd:dd:83:32:
93:07:36:8c:23:d9:74:11:40:0c:4c:d3:d5:ec:f1:
98:3e:63:2e:ad:93:4c:a2:02:a9:f0:d8:b1:49:04:
61:95:31:32:d0:a5:2b:2a:c5:b3:79:2b:84:73:93:
7d:3a:35:a3:b8:2f:00:8e:3c:73:94:b4:cd:a7:1d:
a2:0e:e0:74:12:c9:c2:ec:b2:62:0c:a0:46:5f:35:
49:7f:51:a0:f2:62:7a:e8:14:93:07:9b:28:36:00:
bc:d7:b7:ec:d5:ca:5f:b1:74:63:95:51:4c:bd:4b:
40:a9:b1:ea:bc:07:2e:6e:01:6c:a3:2a:24:99:c3:
6f:78:b8:52:4c:96:0e:e3:e6:4f:ff:2f:3a:b2:0b:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9E:E5:BD:C8:D9:52:29:AA:2A:FD:75:90:34:30:9E:5E:91:8E:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/cZ7lvcjZUimqKv11kDQwnl6Rjl0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154952
sbgp-ipAddrBlock: critical
IPv4:
163.52.255.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:eb:26:2a:e7:80:82:8f:a0:bc:38:32:f5:b3:bb:75:0d:7d:
b9:e0:93:76:5f:3b:bc:ee:e5:a4:f3:b5:8c:2a:1e:6e:51:84:
86:f2:f9:4c:db:9c:8a:34:74:f5:c5:44:40:d6:0f:3b:30:69:
32:cf:99:ce:29:af:8a:fc:24:96:b8:4a:71:a6:19:b2:cb:de:
a0:a4:5d:22:20:ef:db:3b:69:8a:3c:4e:2b:b9:89:ea:02:ca:
c6:59:f6:82:28:67:0a:5c:c2:55:3c:85:6c:8d:22:ab:af:04:
08:22:ce:0a:f7:07:99:cb:fc:6e:b7:e8:93:8b:d9:55:ca:89:
66:50:00:a0:ad:d6:97:33:e3:6b:a3:34:1a:39:9a:ef:8c:77:
d6:c8:4a:c9:e5:83:6a:25:5a:cf:e9:07:cd:cf:35:e1:63:3a:
7b:54:9c:26:e1:e0:c3:bf:f1:1f:32:df:21:d0:5a:5b:28:ce:
77:d2:96:fb:4c:a0:9d:1f:f2:b6:37:a7:b6:15:1e:a0:5f:5f:
84:d6:29:f4:bb:bb:57:12:ae:91:a4:a0:46:63:6f:f1:12:e8:
5f:9c:19:ca:f2:1e:63:cd:bf:ae:b7:fb:cc:87:f6:41:5f:51:
14:33:ae:0e:64:76:cc:1f:f2:01:bf:97:49:64:ec:84:e2:8b:
ac:58:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:53 2026 by rpki-client