Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
File: hcB2_Z7Aaao764dTTpR6icQ9lso.cer (raw, json)
Hash identifier: UxTQDyddE0Mecae1NDj8I2shsrFZQdcatmb/ZM/qRXM=
Subject key identifier: 85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C178
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Jul 2026 06:39:39 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 149632
IP: 2402:6560::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180600 (0x2c178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 06:39:39 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91E5EB9, serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:99:d3:f0:c9:1e:b8:da:91:5c:82:95:e0:02:
d5:b9:32:d2:de:a7:30:82:e7:53:8e:1c:b7:08:f4:
a0:d4:1f:7f:5a:2b:75:10:fa:5a:05:b6:eb:c1:91:
54:0a:1c:3b:59:82:88:5c:9b:23:11:d8:96:f2:54:
66:93:00:ff:0e:01:0f:7c:86:d4:03:1c:b9:99:91:
7e:b5:ff:b7:90:29:eb:d9:09:9e:e9:18:9b:1e:88:
4b:78:bf:75:a0:a1:eb:dd:09:aa:b5:5a:53:bf:4b:
bd:0a:c5:4f:93:42:1d:41:f4:99:7b:fa:aa:cb:63:
7a:4a:1c:de:d4:7e:c3:b4:ae:89:8c:27:7c:be:79:
e4:66:95:19:f3:28:ef:5a:ac:22:02:94:3b:6e:7b:
ca:ea:34:29:59:cd:9d:01:cb:7e:4b:7c:e9:f2:db:
ea:06:b8:16:07:1f:b2:6c:81:6f:d0:4b:17:f2:9f:
06:b7:9c:2e:ef:29:fc:40:e7:3e:c1:14:43:0a:81:
4b:e9:5f:bc:a9:e2:be:fe:47:59:3f:ef:00:5e:d7:
7e:a6:a5:13:e1:8e:f2:f9:4e:8f:ad:50:10:de:61:
40:4c:8e:7d:39:aa:3a:54:5a:25:4d:97:07:89:f6:
2b:ea:ff:29:e4:cb:e7:39:b7:58:22:7c:f1:da:4d:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149632
sbgp-ipAddrBlock: critical
IPv6:
2402:6560::/32
Signature Algorithm: sha256WithRSAEncryption
04:fc:1a:07:59:d8:6e:f6:f1:c2:26:7a:ec:fe:5a:34:6c:48:
3a:d7:5b:03:42:c4:a5:58:3a:37:37:71:6c:90:49:94:f9:ca:
fe:64:3a:21:a5:40:72:a5:61:e9:85:8a:cf:15:01:02:db:a2:
bf:fe:43:2b:f2:2a:f1:f5:fd:8d:31:aa:b9:cb:9c:11:2b:ab:
cf:f4:07:13:01:40:28:75:e0:f6:31:30:ce:79:46:db:00:63:
59:f3:33:08:01:3a:78:17:27:eb:d6:43:9c:ba:70:a2:a7:4c:
94:51:b2:92:76:3c:78:4d:f7:a6:00:b4:81:53:2f:73:bd:c0:
0d:c3:36:05:30:f5:f3:f4:bf:08:ea:3c:c9:f4:8f:e6:13:aa:
9c:8d:ce:22:f4:1c:75:8d:38:62:a1:4d:53:92:b1:5c:ec:d4:
70:99:52:4f:64:58:61:38:2e:69:c4:7b:01:1d:a2:e8:5d:0b:
b1:e5:8a:40:a6:ac:c0:83:30:bd:08:cd:c5:2d:11:6f:e1:d9:
71:2f:71:03:c2:65:26:b8:cf:c0:88:50:a0:cb:aa:df:7b:ba:
1e:f4:e9:f2:09:86:dc:ab:09:98:e1:02:cd:8f:0a:c1:a0:e2:
5c:84:28:85:cd:b6:d6:72:b5:ac:80:ec:74:1d:01:fe:b3:ec:
76:9a:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:09:39 2026 by rpki-client