
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer
File: oaOkEem3sQig0u6lKRHrNHEHOj4.cer (raw, json)
Hash identifier: fl5RclfCF0nXXoQQgWgdqAB33O7VDiI4fOMPVbTN8yU=
Subject key identifier: A1:A3:A4:11:E9:B7:B1:08:A0:D2:EE:A5:29:11:EB:34:71:07:3A:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CDEF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 06:53:15 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154844
IP: 163.52.13.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183791 (0x2cdef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 06:53:15 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9158D68, serialNumber=A1A3A411E9B7B108A0D2EEA52911EB3471073A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:59:92:86:e4:89:18:aa:52:c9:cf:cc:22:
cf:58:57:71:d4:d3:97:d4:3d:39:50:79:c1:69:7b:
c9:72:65:e5:f9:ea:98:7b:cc:ad:fe:13:ed:98:62:
49:26:09:d6:77:0b:4b:5f:57:2f:2d:f5:d9:5f:a8:
1c:ae:8e:31:77:b1:37:ed:74:da:59:91:6f:14:4f:
27:f8:40:a9:ab:bb:54:a7:7f:fb:c2:2b:99:36:71:
8b:57:aa:18:10:4d:3c:2a:cc:85:06:b9:0b:ee:da:
de:51:df:e5:23:05:d0:0b:cb:65:b2:8f:b7:a8:8f:
58:c1:37:55:0f:39:91:99:96:a8:81:46:fb:2f:23:
e4:4e:03:6a:76:28:cf:dc:66:34:b1:90:a0:11:e6:
41:b3:d7:a0:ae:d5:1b:ac:20:7e:40:38:25:94:e0:
f7:7a:6a:80:84:d4:fc:35:da:17:10:70:26:60:8d:
db:11:71:d1:06:28:cd:76:3e:b2:76:83:be:9e:c8:
a7:13:87:0f:a1:dd:c4:2a:fc:57:eb:f5:35:9f:fc:
c5:16:c9:49:3b:08:c2:d1:2a:4c:26:e5:b1:9f:ff:
7c:0d:2a:df:52:87:75:48:91:bd:6d:15:6d:e3:bf:
d2:bc:ba:ab:24:ce:94:25:83:e2:f0:40:73:66:d4:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:A4:11:E9:B7:B1:08:A0:D2:EE:A5:29:11:EB:34:71:07:3A:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154844
sbgp-ipAddrBlock: critical
IPv4:
163.52.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:13:31:e3:2b:8b:e8:9e:6c:35:41:76:eb:db:51:f5:a2:bb:
3c:24:d3:df:ac:02:c9:0e:55:82:44:5b:c5:76:c7:e7:3f:69:
c1:5e:e8:15:e4:3a:c9:f7:4d:c5:81:0a:0a:bb:4e:e4:76:53:
3b:cf:64:60:1b:0f:02:07:f7:6a:4c:a5:1d:d2:07:4b:16:45:
1f:81:ec:17:e3:ac:ca:c8:73:85:14:e9:c3:ce:86:d3:6f:0b:
fe:f5:4e:c3:04:63:48:d0:8b:54:f1:0a:d4:85:91:b2:d9:48:
f0:22:a1:49:99:28:c3:be:54:d1:1a:47:8a:d9:3c:83:90:ad:
d9:7e:49:32:70:51:7b:57:bb:d2:65:0c:0d:51:55:df:d6:39:
02:2c:72:a9:2a:45:1d:38:df:a0:95:60:c1:1d:ff:ff:c2:87:
83:69:1f:10:55:84:e1:98:93:68:b2:d7:89:71:8d:ab:21:28:
a1:30:e1:10:f8:cf:56:d6:4f:82:89:5a:c7:5f:d8:90:a5:95:
d8:cd:3b:f8:c9:00:8e:76:a4:1c:a6:75:cf:7f:00:3d:3f:43:
bc:ff:f0:93:3a:0a:a1:a6:d6:b1:97:43:e2:5d:02:45:58:1b:
e4:76:7f:b0:f3:f7:42:30:5a:50:43:d5:b0:64:94:51:f8:3f:
3c:cf:e0:0f
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAs3vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgxODA2NTMxNVoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNThENjgxMTAvBgNVBAUTKEExQTNBNDExRTlCN0IxMDhBMEQyRUVB
NTI5MTFFQjM0NzEwNzNBM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVAFmShuSJGKpSyc/MIs9YV3HU05fUPTlQecFpe8lyZeX56ph7zK3+E+2YYkkm
CdZ3C0tfVy8t9dlfqByujjF3sTftdNpZkW8UTyf4QKmru1Snf/vCK5k2cYtXqhgQ
TTwqzIUGuQvu2t5R3+UjBdALy2Wyj7eoj1jBN1UPOZGZlqiBRvsvI+ROA2p2KM/c
ZjSxkKAR5kGz16Cu1RusIH5AOCWU4Pd6aoCE1Pw12hcQcCZgjdsRcdEGKM12PrJ2
g76eyKcThw+h3cQq/Ffr9TWf/MUWyUk7CMLRKkwm5bGf/3wNKt9Sh3VIkb1tFW3j
v9K8uqskzpQlg+LwQHNm1IxZAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUoaOkEem3
sQig0u6lKRHrNHEHOj4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU4RDY4LzdBNDM3Q0MwOUFEMTExRjE4OTJCRUY1MjRDMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1OEQ2OC83QTQzN0NDMDlBRDExMUYxODkyQkVGNTI0QzExRjk3MC9vYU9rRWVt
M3NRaWcwdTZsS1JIck5IRUhPajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlzcMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAozQNMA0GCSqG
SIb3DQEBCwUAA4IBAQC3EzHjK4vonmw1QXbr21H1ors8JNPfrALJDlWCRFvFdsfn
P2nBXugV5DrJ903FgQoKu07kdlM7z2RgGw8CB/dqTKUd0gdLFkUfgewX46zKyHOF
FOnDzobTbwv+9U7DBGNI0ItU8QrUhZGy2UjwIqFJmSjDvlTRGkeK2TyDkK3Zfkky
cFF7V7vSZQwNUVXf1jkCLHKpKkUdON+glWDBHf//woeDaR8QVYThmJNosteJcY2r
ISihMOEQ+M9W1k+CiVrHX9iQpZXYzTv4yQCOdqQcpnXPfwA9P0O8//CTOgqhptax
l0PiXQJFWBvkdn+w8/dCMFpQQ9WwZJRR+D88z+AP
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:00 2026 by rpki-client