Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
File: 10dAEUy69PWZqn5dw0EuEi-ocUw.cer (raw, json)
Hash identifier: qfbjazGD4HR5QmPFEC0ViyJsfZbhK4Klvfnx1luH4Xo=
Subject key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ABFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 11 Apr 2026 04:17:17 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 152107
IP: 36.50.58.0/24
IP: 2401:9160::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175098 (0x2abfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 11 04:17:17 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c9:fa:33:52:1c:7d:bd:69:11:54:f9:95:f7:
83:45:95:72:ac:53:5b:09:44:84:d2:10:07:51:a0:
3e:03:ed:91:ac:34:86:ac:4c:e1:48:44:f3:c9:9a:
df:e6:32:1e:34:64:cc:c0:74:b7:f0:34:71:ab:98:
7d:58:71:72:28:bb:ba:da:a8:c2:e6:93:9f:02:8b:
53:2c:a5:61:fd:a5:93:be:d7:a4:35:a1:a2:b1:97:
ce:6d:09:80:cb:51:fa:aa:a1:fb:c7:01:6f:90:d2:
b7:88:05:9b:d0:e0:09:5f:65:33:eb:89:18:4f:59:
62:30:a9:da:81:64:aa:dd:81:b4:d8:b6:21:4a:ea:
ab:c2:a2:c7:88:10:c3:9f:04:88:1c:56:c6:28:b7:
b2:9a:c5:f9:59:fb:46:64:95:94:c6:b8:99:1f:3c:
c6:5d:95:b7:cb:db:93:38:e8:4c:15:74:b1:33:17:
4c:69:d8:80:2d:1e:15:d2:31:c7:7d:21:51:3d:4b:
c6:24:0e:77:5e:da:10:20:aa:62:9b:33:a4:17:7a:
f8:c0:38:27:1a:ef:de:77:80:ea:a8:f4:fb:56:90:
ce:db:15:05:6d:41:90:a6:c4:9b:76:c9:66:15:68:
a5:85:d2:6e:13:34:7f:53:d7:08:2c:60:96:85:32:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152107
sbgp-ipAddrBlock: critical
IPv4:
36.50.58.0/24
IPv6:
2401:9160::/32
Signature Algorithm: sha256WithRSAEncryption
00:76:bb:3c:ce:f5:e4:59:51:aa:05:07:11:11:91:99:5a:84:
bb:d1:1d:18:14:44:d9:29:78:2d:21:c3:b4:73:3c:cf:3e:4f:
ec:bc:20:59:a3:ca:17:67:97:8e:de:bf:a0:70:4d:8b:94:ad:
8d:26:26:46:e4:2a:2a:67:27:85:1b:44:25:43:ea:a3:f1:23:
62:de:f4:d0:59:c4:a0:3e:f6:d6:86:6b:12:a0:58:9a:fa:7a:
89:64:c8:ce:3e:25:0d:98:45:42:e3:2b:e8:a9:58:84:d4:8b:
5c:8e:c3:3a:74:c1:59:10:43:07:b1:79:44:57:80:84:72:47:
41:82:ec:3f:e0:2e:7a:b3:89:71:e0:45:04:9a:36:6a:40:31:
81:d8:8b:3d:ec:ab:e3:b2:7a:d3:dd:cd:ed:8a:d7:d0:da:3c:
05:44:5a:d1:39:24:c9:13:72:1d:ee:8a:24:74:ee:be:da:2e:
6a:c4:06:28:5e:df:29:6e:e3:62:55:f7:90:b9:a3:23:63:f7:
7a:06:5f:9b:4f:59:63:f1:25:30:0d:ec:9f:18:25:2a:0c:57:
ff:03:3f:c2:8f:cc:30:90:1b:62:ca:8e:f6:f8:a2:db:c3:54:
9b:70:28:58:6f:34:c1:25:22:13:96:7a:f7:92:f0:4b:3e:38:
cb:b9:3d:f7
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAqv6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQxMTA0MTcxN1oXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjlCQUYxMTAvBgNVBAUTKEQ3NDc0MDExNENCQUY0RjU5OUFBN0U1
REMzNDEyRTEyMkZBODcxNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuyfozUhx9vWkRVPmV94NFlXKsU1sJRITSEAdRoD4D7ZGsNIasTOFIRPPJmt/m
Mh40ZMzAdLfwNHGrmH1YcXIou7raqMLmk58Ci1MspWH9pZO+16Q1oaKxl85tCYDL
UfqqofvHAW+Q0reIBZvQ4AlfZTPriRhPWWIwqdqBZKrdgbTYtiFK6qvCoseIEMOf
BIgcVsYot7KaxflZ+0ZklZTGuJkfPMZdlbfL25M46EwVdLEzF0xp2IAtHhXSMcd9
IVE9S8YkDnde2hAgqmKbM6QXevjAOCca7953gOqo9PtWkM7bFQVtQZCmxJt2yWYV
aKWF0m4TNH9T1wgsYJaFMh6RAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU10dAEUy6
9PWZqn5dw0EuEi+ocUwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY5QkFGL0NERjNEQTE2RDIyQjExRUU5OEFDREI0M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2OUJBRi9DREYzREExNkQyMkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5
NjlQV1pxbjVkdzBFdUVpLW9jVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlIrMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAJDI6MA0EAgAC
MAcDBQAkAZFgMA0GCSqGSIb3DQEBCwUAA4IBAQAAdrs8zvXkWVGqBQcREZGZWoS7
0R0YFETZKXgtIcO0czzPPk/svCBZo8oXZ5eO3r+gcE2LlK2NJiZG5CoqZyeFG0Ql
Q+qj8SNi3vTQWcSgPvbWhmsSoFia+nqJZMjOPiUNmEVC4yvoqViE1ItcjsM6dMFZ
EEMHsXlEV4CEckdBguw/4C56s4lx4EUEmjZqQDGB2Is97KvjsnrT3c3titfQ2jwF
RFrROSTJE3Id7ookdO6+2i5qxAYoXt8pbuNiVfeQuaMjY/d6Bl+bT1lj8SUwDeyf
GCUqDFf/Az/Cj8wwkBtiyo72+KLbw1SbcChYbzTBJSITlnr3kvBLPjjLuT33
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:30 2026 by rpki-client