Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
File: hHdPRraSCgXa3UJHe6qzbucka5Q.cer (raw, json)
Hash identifier: rm4tQsYuKQGu69HQwEq9xmW5nMUejgQyoqRyr4YZZJM=
Subject key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DB5B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 14:16:47 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 24341
IP: 180.178.120.0/22
IP: 2401:8180::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 13:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187227 (0x2db5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 14:16:47 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:fd:5a:16:97:fe:d7:43:e2:20:ec:24:45:
e7:de:68:11:84:23:6d:73:04:7e:1c:f5:62:07:cb:
a6:f7:49:88:d0:d1:7f:83:9b:01:1e:cb:e7:bb:ad:
85:e7:22:a2:24:bf:8d:17:56:c1:be:5b:88:33:ad:
7e:29:73:ee:87:21:17:7c:d9:b4:a7:4f:d9:ee:69:
e6:a3:35:9e:1a:cc:9f:b5:e5:99:8c:b5:27:94:a8:
e5:c9:22:bc:3a:db:46:19:6f:1f:b9:c3:90:04:59:
23:24:79:5c:c8:da:3e:e3:b3:8b:b7:df:fd:22:cb:
ac:c9:1b:91:e9:e9:5c:a3:7c:62:06:34:7f:a3:5f:
f1:9e:07:c1:4b:73:de:ee:af:98:9d:f2:40:fa:5f:
e4:06:1c:eb:91:8a:4b:6c:d0:04:06:48:f3:8f:ed:
09:e7:24:46:d0:08:ac:45:53:ec:58:34:99:6e:3d:
3f:8d:7f:85:85:ef:4f:2d:ed:7e:f3:0e:ed:a6:b9:
06:c4:c4:8f:b5:d5:ad:d9:23:fa:9f:45:2e:00:4e:
ea:f2:6f:0e:90:47:c8:f7:bd:7a:66:26:c3:0a:78:
fc:00:9b:61:93:39:a5:c1:b8:f2:92:2e:82:b2:a9:
06:ab:42:42:5c:af:4d:8a:cc:98:ca:da:ef:26:56:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24341
sbgp-ipAddrBlock: critical
IPv4:
180.178.120.0/22
IPv6:
2401:8180::/32
Signature Algorithm: sha256WithRSAEncryption
0a:f0:c4:c1:ca:42:1f:0d:21:31:28:42:ae:13:00:5a:18:a8:
2d:0a:f7:b3:ca:5a:1d:02:30:25:6e:7d:3b:35:76:b2:49:14:
8c:b0:cb:66:57:44:06:6f:3f:4c:7c:28:6c:0c:a2:49:56:d6:
83:b1:5f:6a:c0:5c:a9:85:5c:f5:df:f4:dd:eb:d4:aa:ec:25:
63:e7:b6:20:12:cc:ff:89:8c:c9:eb:7c:b5:83:37:bc:28:e0:
5a:e6:67:8b:45:a7:93:0a:b9:1e:49:0f:15:b7:b3:07:2a:17:
ae:f9:f1:98:23:71:b8:7f:05:38:5d:1e:45:2d:80:4a:3d:3f:
6d:57:1f:9d:64:a9:fe:89:9d:86:0e:68:40:a7:39:3a:c4:89:
40:9d:0e:6a:ed:32:90:c7:97:16:86:9e:f8:69:65:b8:10:d5:
74:fa:de:3b:5b:3e:7e:d0:dd:fb:cd:1f:a7:a2:8c:a1:e0:d3:
2a:fa:94:30:9c:f0:dd:9e:d3:64:63:a7:b7:2f:7c:3e:5d:81:
0f:b3:ec:73:1a:ec:19:a7:d9:b7:32:3a:0d:6e:38:e8:f0:be:
74:56:e9:60:e9:fc:c8:fc:dc:38:42:71:ad:e4:71:26:6d:c7:
51:cd:8b:11:a8:3e:e9:89:01:fc:29:6e:3a:5a:f4:e0:db:da:
02:60:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:04:12 2026 by rpki-client