
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
File: -mtidXvK1FesoHClHEgItLfJM3A.cer (raw, json)
Hash identifier: 0aismZoqHzJt/v5PO8syFaH5CFP+qgbhEZqJTKXqGEQ=
Subject key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C5A2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Jul 2026 09:42:59 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 151662
IP: 103.252.138.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181666 (0x2c5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 17 09:42:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:83:70:b2:1c:66:e8:62:92:fa:3f:1b:e3:b0:
e0:4f:6b:ca:3f:c1:40:5c:3a:79:ad:fc:47:73:03:
42:5d:58:cf:17:99:02:40:2d:70:fb:84:61:90:95:
a0:f3:be:98:47:07:8c:c9:26:b3:d1:f7:ce:df:04:
01:3f:7f:8b:4b:21:02:ce:0f:7b:d6:e2:5e:97:93:
b4:a9:e3:7d:f2:5c:a4:29:f7:62:68:51:ca:09:4b:
7b:75:73:00:b5:e4:19:e9:b5:2c:25:46:34:5d:b4:
7c:f5:bc:d6:98:04:ac:7e:2d:fd:58:39:db:3d:9d:
1b:95:d2:84:b1:c7:f1:dd:f8:03:9e:30:c2:45:98:
0a:4c:c1:87:fa:87:39:52:4d:60:2a:40:73:38:16:
a5:4a:40:a7:d0:ce:29:67:2e:2e:47:ad:da:a4:38:
b0:2c:2c:df:c4:a1:a0:de:aa:21:c9:10:02:cb:15:
d4:93:39:e1:80:aa:a8:40:12:32:85:14:99:5c:ce:
c2:37:88:60:6d:99:7c:12:52:2f:79:21:a1:4f:64:
eb:83:8f:05:93:0d:a9:bf:7e:d1:e7:10:49:bc:68:
27:c1:d9:ca:5d:2a:f2:77:8c:83:77:1c:3d:ee:e0:
b8:9c:67:5f:57:fe:a6:3b:d1:bf:60:d4:48:cf:5e:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151662
sbgp-ipAddrBlock: critical
IPv4:
103.252.138.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:65:3a:ff:3a:2f:dc:5a:61:0d:0d:6f:a5:ae:1b:65:bb:4b:
e1:8d:64:95:78:3b:dd:75:89:58:c9:a5:19:3d:9a:c0:88:9e:
ce:6e:7e:e2:8b:db:f5:c6:2d:d4:07:58:e1:cf:0c:3f:87:0b:
d9:ce:fc:74:63:9d:79:2c:50:5b:bb:00:c6:d5:0b:a9:ff:9d:
81:c1:bd:0d:2e:54:6e:84:f7:13:eb:a2:9b:f9:0e:02:ca:2a:
f8:8f:f0:0f:07:5a:f6:23:43:42:e3:97:f5:e3:b2:1b:36:91:
31:52:3e:f0:fe:8c:b7:c3:1f:bc:b8:cf:e4:5f:a5:36:ec:8c:
d8:64:a8:3a:b2:98:57:eb:5c:05:0d:d8:13:1b:a4:b3:6e:08:
53:97:23:90:2e:f2:09:26:7b:c0:ab:7e:01:55:b0:43:c4:07:
ed:d4:ea:50:f4:e0:0a:53:da:aa:4b:77:6d:47:10:f3:13:0c:
9c:a3:36:f8:c5:21:02:6e:7f:8e:f0:eb:ac:3f:eb:6b:01:90:
8d:bf:e7:01:6a:48:a5:33:ba:6c:0a:c7:70:a3:b1:6a:77:71:
2d:59:d7:95:b9:0c:13:8a:b9:4a:6d:dd:51:86:24:b1:24:e6:
68:5c:4d:23:07:13:af:af:05:26:f8:2e:24:9c:c8:b4:fd:89:
c5:d7:15:3a
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAsWiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcxNzA5NDI1OVoXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0UzMjIxMTAvBgNVBAUTKEZBNkI2Mjc1N0JDQUQ0NTdBQ0EwNzBB
NTFDNDgwOEI0QjdDOTMzNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD2g3CyHGboYpL6PxvjsOBPa8o/wUBcOnmt/EdzA0JdWM8XmQJALXD7hGGQlaDz
vphHB4zJJrPR987fBAE/f4tLIQLOD3vW4l6Xk7Sp433yXKQp92JoUcoJS3t1cwC1
5BnptSwlRjRdtHz1vNaYBKx+Lf1YOds9nRuV0oSxx/Hd+AOeMMJFmApMwYf6hzlS
TWAqQHM4FqVKQKfQzilnLi5HrdqkOLAsLN/EoaDeqiHJEALLFdSTOeGAqqhAEjKF
FJlczsI3iGBtmXwSUi95IaFPZOuDjwWTDam/ftHnEEm8aCfB2cpdKvJ3jIN3HD3u
4LicZ19X/qY70b9g1EjPXrIXAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU+mtidXvK
1FesoHClHEgItLfJM3AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdFMzIyL0M5QzJBQUQ4MTg3NjExRjE4NjI4NEU0RTM2M0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3RTMyMi9DOUMyQUFEODE4NzYxMUYxODYyODRFNEUzNjNEOEM2Ny8tbXRpZFh2
SzFGZXNvSENsSEVnSXRMZkpNM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlBuMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/yKMA0GCSqG
SIb3DQEBCwUAA4IBAQCOZTr/Oi/cWmENDW+lrhtlu0vhjWSVeDvddYlYyaUZPZrA
iJ7Obn7ii9v1xi3UB1jhzww/hwvZzvx0Y515LFBbuwDG1Qup/52Bwb0NLlRuhPcT
66Kb+Q4Cyir4j/APB1r2I0NC45f147IbNpExUj7w/oy3wx+8uM/kX6U27IzYZKg6
sphX61wFDdgTG6SzbghTlyOQLvIJJnvAq34BVbBDxAft1OpQ9OAKU9qqS3dtRxDz
Ewycozb4xSECbn+O8OusP+trAZCNv+cBakilM7psCsdwo7Fqd3EtWdeVuQwTirlK
bd1RhiSxJOZoXE0jBxOvrwUm+C4knMi0/YnF1xU6
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:12:01 2026 by rpki-client