Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
File: hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer (raw, json)
Hash identifier: MhYTFPpDnJyZqISm/sCxvYRkYcMCjOCMbKn/o7SBysg=
Subject key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D922
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Sep 2026 07:16:31 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154189
IP: 202.66.182.0/23
IP: 2001:df6:1240::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186658 (0x2d922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 29 07:16:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:13:31:16:46:c7:db:bf:8b:29:e4:78:c4:
c5:47:40:cd:2d:17:9b:c1:c2:a7:8d:29:71:e0:d7:
0e:2a:c1:eb:b3:38:a5:fc:4b:8d:4c:0c:7c:1d:82:
1a:ad:12:56:1c:a7:38:a1:30:68:68:67:18:c0:23:
a9:2f:16:7a:0a:a8:e9:7c:e3:18:dd:6a:64:a3:93:
26:1c:b2:f9:18:f6:3f:31:65:fa:e5:06:5d:7e:32:
0b:ae:71:c9:d1:28:e1:57:68:38:6d:13:f4:0b:ba:
d8:84:fb:9d:19:06:0f:65:b9:a9:b5:f8:a9:c3:dc:
c0:b8:2f:ef:0b:29:70:45:82:3b:ca:dc:b1:1d:81:
50:b1:4f:1e:64:2d:de:d6:cb:ca:43:6b:7b:24:bf:
58:14:9c:fd:1c:cf:22:b8:73:34:51:64:f2:43:3b:
80:f0:4d:df:78:92:29:bb:f0:bf:be:e9:95:a7:67:
14:cd:5e:80:2d:f6:0b:d1:82:82:98:89:f4:05:19:
12:77:43:5a:9b:1f:a0:93:b0:d2:7c:54:29:bb:c3:
ea:0b:0c:a4:07:bb:12:d7:e0:f6:28:df:10:59:f5:
12:eb:ee:88:7a:36:f4:c9:83:a3:15:c2:e5:3d:b7:
56:c2:e6:b2:72:46:4d:27:05:98:4b:d8:bd:84:61:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154189
sbgp-ipAddrBlock: critical
IPv4:
202.66.182.0/23
IPv6:
2001:df6:1240::/48
Signature Algorithm: sha256WithRSAEncryption
15:57:b0:59:dd:38:c6:8d:19:5b:fd:f7:4c:2e:b9:ea:d5:86:
bf:76:18:d7:64:6e:a1:1c:f9:4d:18:2a:40:83:a6:00:e9:27:
cb:b4:84:3a:77:73:9b:fd:98:71:1c:aa:0e:5c:93:28:1f:a4:
ed:ef:c5:b9:6c:00:9b:71:49:2e:b6:50:34:84:d2:34:73:59:
8a:bb:f9:ea:4b:ed:4d:12:26:61:81:2d:a0:57:ab:a0:e2:1a:
e5:cc:8f:ee:27:b5:6b:12:b6:22:9a:fc:dd:04:ba:a9:64:fe:
6f:dc:d7:bf:1e:e7:9c:17:20:f2:25:f5:43:1f:69:76:e6:ed:
5d:da:69:e8:bc:25:93:b2:7d:5e:a6:ce:ed:0a:b3:ca:aa:f8:
2d:1e:5b:d0:03:b4:7a:b5:89:07:c0:8f:b8:35:c4:52:d7:ee:
d6:03:51:5c:ff:26:35:11:7e:84:d6:f7:04:7f:5f:1e:fe:f5:
9a:2b:6e:f1:da:f7:98:98:d6:03:ad:34:b8:14:b7:19:d4:ec:
35:9c:72:57:33:e8:11:c5:0d:11:32:1b:5b:d3:3e:e8:a0:69:
75:cb:5a:7b:b6:d9:45:b0:11:1d:c8:f3:ed:1c:13:c6:8a:c7:
82:4d:94:e5:b5:69:32:54:1e:55:e0:22:48:c8:f7:f5:53:51:
92:cc:2c:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 7 08:01:56 2026 by rpki-client