Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
File: 0veTjOlKDq6WOebJeYtkX6kMwf0.cer (raw, json)
Hash identifier: mg13HvAegyy/H859iJKyeAabvjzrinyq9b2BKJM7cvw=
Subject key identifier: D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BA2E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jun 2026 12:57:14 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 24463
AS: 136467
IP: 203.21.156.0/22
IP: 203.21.176.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178734 (0x2ba2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 3 12:57:14 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A913BB38, serialNumber=D2F7938CE94A0EAE9639E6C9798B645FA90CC1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:cc:14:a6:84:f4:c8:c8:29:bb:4e:09:bf:
a6:09:c7:ab:b6:15:eb:5e:07:7d:2c:23:e5:9e:ca:
38:c0:11:34:ba:f3:b6:19:51:57:b3:63:b6:46:14:
ed:2c:8e:d4:f9:c4:3b:72:68:92:8e:1d:de:48:e4:
99:f7:73:25:86:48:bd:d2:d1:ba:c1:1d:dd:ca:51:
62:77:fc:2c:93:90:8c:e5:58:d4:69:3a:98:75:63:
d0:c6:b7:de:9e:2d:73:eb:7f:1e:24:df:75:34:06:
9a:a6:89:a1:9c:ef:87:e3:9b:96:5d:f7:39:2c:ee:
d0:8c:6d:b6:6b:e6:86:e9:a3:70:26:64:b7:dd:e8:
cd:3d:9a:48:62:fa:4d:c2:76:74:8e:06:56:b5:fa:
98:84:38:c9:17:00:7d:24:2d:fd:c1:5b:82:2a:7a:
0a:29:2a:79:b7:fa:6c:2b:99:5a:23:a1:1f:79:6d:
7d:fc:a3:eb:da:74:cd:0d:d1:38:3d:8c:0b:6a:28:
7f:e4:9a:8b:bb:72:fa:5b:5d:9c:f0:cb:ca:d0:e0:
70:85:e6:fe:a8:e4:c3:b2:57:65:62:e2:b0:4a:9e:
fb:29:be:6e:85:60:ad:ed:23:c4:2f:47:1f:6a:8c:
6a:c5:bc:6b:50:ef:b2:c3:2b:9a:0d:bc:c5:bd:84:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24463
136467
sbgp-ipAddrBlock: critical
IPv4:
203.21.156.0/22
203.21.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:5f:05:56:1a:2d:b6:48:d0:17:36:00:a2:6c:80:eb:fb:21:
5a:cf:fa:99:f4:8d:cc:d0:60:46:f4:33:52:58:9b:f4:de:99:
75:54:5d:61:23:1a:73:a9:61:52:c5:8f:3b:4f:6f:aa:04:4f:
87:a5:ae:65:f6:18:12:9e:d5:93:fa:7c:b3:a4:c3:14:0e:fb:
cd:69:34:0f:df:01:b5:54:e9:01:95:72:ef:8e:81:ef:a4:1e:
e8:f5:ea:65:04:9f:02:85:27:43:dd:c7:ee:57:08:f6:62:34:
4a:42:91:0b:6d:11:45:2d:86:75:98:d6:03:3e:3c:cd:5d:72:
9f:13:9d:68:4d:67:bd:e4:77:14:4b:64:d3:01:46:60:f8:9c:
4c:77:42:07:74:45:bf:44:96:d7:1b:7e:ca:5f:0d:55:98:4a:
81:ca:cb:89:a5:2f:70:54:69:de:7f:7c:06:d4:63:f3:37:b8:
38:fd:6f:20:50:92:bc:97:9e:1f:54:99:0c:d8:71:25:c4:ed:
d4:65:1a:bd:b0:23:64:e1:f5:42:2a:fb:a5:62:f5:b5:30:3f:
b9:35:89:fe:5b:05:4d:33:bc:f7:62:4f:c1:f2:ca:d1:7f:44:
12:8e:6e:24:92:30:7d:1f:33:b7:d3:c9:6a:07:8f:bb:62:17:
41:8e:ac:e9
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgIDArouMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYwMzEyNTcxNFoXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0JCMzgxMTAvBgNVBAUTKEQyRjc5MzhDRTk0QTBFQUU5NjM5RTZD
OTc5OEI2NDVGQTkwQ0MxRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC84swUpoT0yMgpu04Jv6YJx6u2FeteB30sI+WeyjjAETS687YZUVezY7ZGFO0s
jtT5xDtyaJKOHd5I5Jn3cyWGSL3S0brBHd3KUWJ3/CyTkIzlWNRpOph1Y9DGt96e
LXPrfx4k33U0BpqmiaGc74fjm5Zd9zks7tCMbbZr5obpo3AmZLfd6M09mkhi+k3C
dnSOBla1+piEOMkXAH0kLf3BW4IqegopKnm3+mwrmVojoR95bX38o+vadM0N0Tg9
jAtqKH/kmou7cvpbXZzwy8rQ4HCF5v6o5MOyV2Vi4rBKnvspvm6FYK3tI8QvRx9q
jGrFvGtQ77LDK5oNvMW9hDoZAgMBAAGjggMZMIIDFTAdBgNVHQ4EFgQU0veTjOlK
Dq6WOebJeYtkX6kMwf0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNCQjM4LzI2MDFCMTQwNEYzMTExRjFCNDM4MkNCQkIyODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzQkIzOC8yNjAxQjE0MDRGMzExMUYxQjQzODJDQkJCMjgzMzc3My8wdmVUak9s
S0RxNldPZWJKZVl0a1g2a013ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICX48CAwIVEzAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAssVnAME
BMsVsDANBgkqhkiG9w0BAQsFAAOCAQEApl8FVhottkjQFzYAomyA6/shWs/6mfSN
zNBgRvQzUlib9N6ZdVRdYSMac6lhUsWPO09vqgRPh6WuZfYYEp7Vk/p8s6TDFA77
zWk0D98BtVTpAZVy746B76Qe6PXqZQSfAoUnQ93H7lcI9mI0SkKRC20RRS2GdZjW
Az48zV1ynxOdaE1nveR3FEtk0wFGYPicTHdCB3RFv0SW1xt+yl8NVZhKgcrLiaUv
cFRp3n98BtRj8ze4OP1vIFCSvJeeH1SZDNhxJcTt1GUavbAjZOH1Qir7pWL1tTA/
uTWJ/lsFTTO892JPwfLK0X9EEo5uJJIwfR8zt9PJagePu2IXQY6s6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:45 2026 by rpki-client