Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer
File: h2Q49-A2DORsAHz91IHDH05WCHs.cer (raw, json)
Hash identifier: BX80jboRDfmlcmS/I+r3pxEXcVaUQidlHiBCV4dsKJI=
Subject key identifier: 87:64:38:F7:E0:36:0C:E4:6C:00:7C:FD:D4:81:C3:1F:4E:56:08:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B5AC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 May 2026 19:58:22 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 154677
IP: 2402:5e60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177580 (0x2b5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 19 19:58:22 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A917286F, serialNumber=876438F7E0360CE46C007CFDD481C31F4E56087B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:50:57:6a:cc:01:a8:7f:cb:d9:ae:f6:c6:
e1:82:00:75:6b:d3:4c:99:84:fa:1a:bd:0f:12:b8:
d5:1a:a6:0d:c5:02:38:c1:54:0e:7c:36:cd:e6:95:
31:bf:fc:47:3a:83:5c:d8:a0:5b:d5:e3:c5:f7:8a:
cd:be:8e:f5:ac:3e:9d:45:1b:35:c6:a9:aa:f9:41:
7e:70:9b:78:4a:fe:ed:d6:87:ab:c7:0d:73:cc:46:
89:4d:b5:13:f9:c0:8f:77:49:09:29:6d:4e:a4:51:
66:24:db:0b:5b:d8:d2:19:ce:c8:64:e2:5d:2c:4b:
db:0f:95:88:e5:e9:c4:67:f0:43:48:be:20:44:f8:
30:e6:70:52:af:31:34:9c:46:79:f3:c8:88:51:2d:
78:0c:e5:f3:22:27:4a:d3:b4:e3:58:ed:84:74:36:
8f:39:bd:7b:71:a8:f9:91:e0:eb:3e:a2:c8:7d:7e:
7d:7d:16:c7:f3:98:ec:73:58:aa:b9:07:29:dd:74:
0e:07:40:d0:c1:92:63:45:3b:88:2b:65:e0:07:8d:
a0:8a:00:a5:6c:b0:57:77:ab:02:67:6e:09:10:8c:
94:90:d9:bc:d0:d0:cb:0c:60:6c:03:d3:e2:5f:68:
0c:e5:37:ec:3c:0d:83:18:58:20:c5:47:e7:87:df:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:38:F7:E0:36:0C:E4:6C:00:7C:FD:D4:81:C3:1F:4E:56:08:7B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154677
sbgp-ipAddrBlock: critical
IPv6:
2402:5e60::/32
Signature Algorithm: sha256WithRSAEncryption
c8:75:db:52:09:8b:a6:52:a1:ca:00:87:ec:1d:11:e5:1c:6a:
06:e5:4e:61:d4:85:11:cf:20:af:5a:86:3a:92:d6:63:f3:02:
9e:37:66:1b:57:4b:66:2a:ff:70:87:6f:a6:bd:38:e7:23:4a:
43:80:51:f2:d1:e2:bd:d3:66:00:1a:35:67:63:0a:f0:c8:e2:
14:fe:fc:9a:f0:94:97:de:c9:e9:1a:b7:c0:7a:72:6c:5e:fe:
c0:56:f1:22:fb:91:c5:ee:be:39:fa:49:85:7f:d1:9b:5d:76:
01:ec:5e:98:44:e1:60:a1:cb:1f:b2:21:57:77:94:26:36:64:
4f:b8:e3:d1:69:1f:8d:7d:61:8f:82:e6:cc:4f:b9:af:71:97:
eb:c8:99:85:77:f1:51:f5:59:31:a9:96:36:15:b3:fd:73:af:
65:84:da:8d:c2:da:d2:07:3e:79:f4:14:f9:9b:09:b2:aa:4f:
14:f8:97:96:fb:93:6c:1d:66:ae:79:f3:41:bd:33:18:37:17:
c1:88:8d:60:79:15:68:0d:b5:d5:60:64:7f:bd:ea:92:84:d3:
10:f7:f8:b6:87:44:24:c2:8b:66:93:0d:e7:cf:39:cf:9e:f4:
16:e0:00:e0:8d:3a:1b:ad:f3:77:56:06:94:c3:8d:b2:be:ad:
db:fc:65:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:46 2026 by rpki-client