Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
File: 3owRZVEEK-jnJkvttYLwo3e7JL0.cer (raw, json)
Hash identifier: 4ucLEsDJ6tmS4ATirS5fvmiV2GIMRtCjqbPuXN4AR4I=
Subject key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029750
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:34:03 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 43.226.20.0/22
IP: 103.45.68.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169808 (0x29750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:34:03 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:db:7b:9a:bc:28:07:54:29:b4:2a:80:d7:
df:2b:20:21:ae:2b:96:32:2c:a4:53:d8:a9:6b:c4:
40:40:b9:b0:2e:f9:16:b5:72:5f:1e:50:d9:94:75:
c1:23:07:13:35:94:80:bf:73:33:ec:1f:02:e3:85:
4b:a3:a5:18:56:da:7d:df:4d:5d:3f:e7:3c:9a:18:
42:f7:7b:57:30:8d:7a:59:2d:85:36:7a:1f:a1:8d:
08:41:73:42:38:c7:ec:d8:b9:39:2f:81:e5:de:21:
49:1b:09:a4:38:d7:b8:34:8d:0b:35:71:2c:9c:1d:
9b:20:81:0f:3b:af:c0:09:d7:74:7f:3c:18:d0:7b:
c8:eb:5b:4d:d4:db:b3:e6:5d:db:8c:06:d1:f0:29:
a7:67:71:51:73:4f:77:33:59:84:a2:2d:cc:f1:8f:
6d:3f:a7:95:f9:e3:ba:8a:41:bc:36:f7:6c:da:cd:
bc:22:05:ae:6e:5c:07:8a:a2:25:b8:bc:96:e7:dc:
d7:16:f1:fb:1b:55:de:c9:14:0f:aa:70:37:73:d8:
5e:90:aa:08:7e:c4:50:be:d0:79:7c:91:6e:d0:3e:
19:b6:c6:bd:7b:ae:85:30:17:89:43:a0:07:56:05:
76:2e:ff:60:15:66:e8:20:ac:b1:99:74:70:bc:59:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.20.0/22
103.45.68.0/22
Signature Algorithm: sha256WithRSAEncryption
08:32:bc:44:1b:b9:a4:70:5b:10:0b:49:1e:d1:8e:fa:0b:d7:
a3:94:ed:13:85:ea:6d:12:ea:94:9a:a1:92:be:cb:20:e3:e3:
51:31:83:41:6f:11:28:94:49:d3:f4:3c:6b:2b:04:a9:7b:e7:
21:47:47:ec:a4:e4:fb:7d:e2:dd:ab:f5:a8:47:ec:16:d4:89:
73:3e:a5:86:ae:53:04:94:88:22:02:8f:01:74:b0:1d:4e:94:
c5:92:34:cd:dc:2a:1b:b9:53:72:92:6b:94:e6:60:ed:f1:0c:
e5:3d:b8:35:64:0e:9c:9a:d2:0d:e9:04:95:27:62:1e:49:74:
78:da:c8:da:a6:3f:b3:f7:88:b2:df:16:74:15:53:34:ac:59:
8a:dc:61:12:bf:b8:41:10:d0:59:21:08:aa:d7:9f:56:90:0c:
3c:93:59:ea:36:29:1a:3e:ec:2f:ca:cf:79:5d:1f:5f:d7:1e:
7d:f5:4e:22:6a:cb:a5:ef:f6:70:f3:dd:54:e7:65:95:f6:66:
0d:14:42:33:d4:61:3a:46:da:fb:ba:5e:89:34:74:44:9d:c5:
bb:06:76:e0:93:2c:23:ef:a6:39:79:46:be:21:de:ad:85:30:
fa:ca:7e:7a:51:5b:02:36:45:8a:4c:dc:e1:31:a2:a1:a9:77:
a8:bf:ab:b2
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDApdQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMzQwM1oXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDcxQTAxMTAvBgNVBAUTKERFOEMxMTY1NTEwNDJCRThFNzI2NEJF
REI1ODJGMEEzNzdCQjI0QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCf8Nt7mrwoB1QptCqA198rICGuK5YyLKRT2KlrxEBAubAu+Ra1cl8eUNmUdcEj
BxM1lIC/czPsHwLjhUujpRhW2n3fTV0/5zyaGEL3e1cwjXpZLYU2eh+hjQhBc0I4
x+zYuTkvgeXeIUkbCaQ417g0jQs1cSycHZsggQ87r8AJ13R/PBjQe8jrW03U27Pm
XduMBtHwKadncVFzT3czWYSiLczxj20/p5X547qKQbw292zazbwiBa5uXAeKoiW4
vJbn3NcW8fsbVd7JFA+qcDdz2F6Qqgh+xFC+0Hl8kW7QPhm2xr17roUwF4lDoAdW
BXYu/2AVZuggrLGZdHC8WZY9AgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQU3owRZVEE
K+jnJkvttYLwo3e7JL0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ3MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NzFBMC9ENjk5NERFNkRBM0UxMUYwODFGNUE0NTc4RUQzNjQxRC8zb3dSWlZF
RUstam5Ka3Z0dFlMd28zZTdKTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBAIr4hQDBAJnLUQwDQYJKoZIhvcNAQELBQADggEBAAgyvEQbuaRw
WxALSR7RjvoL16OU7ROF6m0S6pSaoZK+yyDj41Exg0FvESiUSdP0PGsrBKl75yFH
R+yk5Pt94t2r9ahH7BbUiXM+pYauUwSUiCICjwF0sB1OlMWSNM3cKhu5U3KSa5Tm
YO3xDOU9uDVkDpya0g3pBJUnYh5JdHjayNqmP7P3iLLfFnQVUzSsWYrcYRK/uEEQ
0FkhCKrXn1aQDDyTWeo2KRo+7C/Kz3ldH1/XHn31TiJqy6Xv9nDz3VTnZZX2Zg0U
QjPUYTpG2vu6Xok0dESdxbsGduCTLCPvpjl5Rr4h3q2FMPrKfnpRWwI2RYpM3OEx
oqGpd6i/q7I=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:28:46 2026 by rpki-client