Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.cer (raw, json)
Hash identifier: WQI6H12BsUjh+azMu6vRRtBu6v+bsYvJDoawe5EE/jU=
Subject key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DED8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 17 Oct 2026 12:26:55 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 135022
IP: 103.107.122.0/24
IP: 103.110.5.0/24
IP: 103.114.54.0/24
IP: 2401:cc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 09:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188120 (0x2ded8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 12:26:55 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:bb:57:74:4c:6f:d0:99:da:1d:3e:2a:7e:
33:07:84:49:d2:84:a1:3e:e1:18:e2:bf:e8:1d:97:
16:78:5b:b2:fb:bd:b6:cc:86:e0:2e:73:b2:3c:8d:
0d:c5:4d:52:ce:11:92:a6:3c:90:cf:5d:93:2d:3f:
a0:b1:64:16:da:18:33:d5:1a:2f:0f:6d:03:e8:fe:
17:aa:9b:63:d3:21:e3:e4:8a:2b:77:c4:9c:d0:46:
19:d6:19:07:b0:af:ec:ef:9e:30:e8:b4:d0:11:fc:
c8:ab:7c:cf:ed:a9:65:ca:bb:b6:ee:f1:4b:68:3c:
85:1e:ce:71:85:51:81:92:f3:45:cf:93:c9:17:b8:
d8:d5:96:e6:85:8d:62:e2:83:1f:4f:17:4b:f2:3b:
09:c7:83:e1:da:19:66:16:cc:05:2f:66:fd:80:bb:
c7:7f:bc:c9:d6:f6:a1:b9:2e:fb:e4:b7:6f:85:a1:
fc:7a:38:d7:f8:79:ef:5c:c4:4d:e1:a9:cb:51:4f:
7c:8b:1d:89:30:67:2e:ab:65:47:0c:b8:d1:58:37:
30:64:0a:f9:c5:59:1a:69:b4:28:c9:f7:54:0f:6d:
55:4d:ed:6e:d9:aa:7c:1c:76:72:be:b0:e3:3d:46:
1c:75:19:e7:71:a2:9e:31:a5:9e:4a:f7:c1:84:89:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135022
sbgp-ipAddrBlock: critical
IPv4:
103.107.122.0/24
103.110.5.0/24
103.114.54.0/24
IPv6:
2401:cc40::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ef:ce:60:ed:38:56:22:7e:a2:bf:05:b9:2b:c5:f9:f4:73:
b7:c0:99:c8:d7:f5:78:f3:d0:4d:20:f8:9c:f9:d4:a5:ca:e8:
3f:2f:17:1f:bc:7d:7b:00:76:2d:aa:ea:f5:2e:24:c6:cb:68:
f6:4c:e7:50:9b:86:17:02:07:8a:cd:67:07:e9:b9:9b:c1:b2:
ff:09:23:aa:db:74:b8:c1:38:1b:dd:ac:1a:b0:cf:59:d4:6f:
77:40:4f:d2:70:a9:6c:9c:60:05:10:24:44:0b:b1:72:ff:b7:
11:da:cf:99:cb:ed:00:ed:5e:5d:11:47:25:43:85:ba:f1:83:
c2:d8:69:4e:eb:3f:f5:c3:86:06:65:32:e3:77:8e:b7:03:51:
99:0d:b4:7a:a2:e1:bf:c1:8a:d6:ff:4c:07:c3:f5:00:40:b4:
52:82:dc:71:5f:c0:c7:7a:03:cf:07:b3:5a:cf:64:de:2d:15:
bc:62:be:74:cb:21:c5:f5:e1:d4:b0:12:6e:6f:e8:f1:af:02:
1c:6b:70:25:9e:5a:04:00:e5:9e:c1:b5:22:17:60:dc:68:20:
f6:9a:8e:2a:4e:44:07:9e:4f:89:94:12:d7:6c:21:3c:33:b3:
34:21:34:f4:6d:02:95:a2:7f:8d:dd:90:dd:f8:45:55:70:b2:
99:f7:74:dc
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDAt7YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAxNzEyMjY1NVoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUUwOUUxMTAvBgNVBAUTKEUwNUM2NDU1NDVEOUVGODZCNDUxRTUy
MTlEODMyNzYwRjQwNUNBRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8obtXdExv0JnaHT4qfjMHhEnShKE+4Rjiv+gdlxZ4W7L7vbbMhuAuc7I8jQ3F
TVLOEZKmPJDPXZMtP6CxZBbaGDPVGi8PbQPo/heqm2PTIePkiit3xJzQRhnWGQew
r+zvnjDotNAR/MirfM/tqWXKu7bu8UtoPIUeznGFUYGS80XPk8kXuNjVluaFjWLi
gx9PF0vyOwnHg+HaGWYWzAUvZv2Au8d/vMnW9qG5Lvvkt2+Fofx6ONf4ee9cxE3h
qctRT3yLHYkwZy6rZUcMuNFYNzBkCvnFWRpptCjJ91QPbVVN7W7ZqnwcdnK+sOM9
Rhx1Gedxop4xpZ5K98GEie7DAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQU4FxkVUXZ
74a0UeUhnYMnYPQFyugwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFFMDlFL0Q4QkIwRjM2NjFGQTExRjBCRDRGNjA2RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExRTA5RS9EOEJCMEYzNjYxRkExMUYwQkQ0RjYwNkVDNEY5QUUwMi80RnhrVlVY
Wjc0YTBVZVVobllNbllQUUZ5dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg9uMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAZ2t6AwQAZ24F
AwQAZ3I2MA0EAgACMAcDBQAkAcxAMA0GCSqGSIb3DQEBCwUAA4IBAQCL785g7ThW
In6ivwW5K8X59HO3wJnI1/V489BNIPic+dSlyug/LxcfvH17AHYtqur1LiTGy2j2
TOdQm4YXAgeKzWcH6bmbwbL/CSOq23S4wTgb3awasM9Z1G93QE/ScKlsnGAFECRE
C7Fy/7cR2s+Zy+0A7V5dEUclQ4W68YPC2GlO6z/1w4YGZTLjd463A1GZDbR6ouG/
wYrW/0wHw/UAQLRSgtxxX8DHegPPB7Naz2TeLRW8Yr50yyHF9eHUsBJub+jxrwIc
a3AlnloEAOWewbUiF2DcaCD2mo4qTkQHnk+JlBLXbCE8M7M0ITT0bQKVon+N3ZDd
+EVVcLKZ93Tc
-----END CERTIFICATE-----
Generated at Thu Nov 5 13:22:01 2026 by rpki-client