Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
File: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer (raw, json)
Hash identifier: 96D3u3PyEYTAQ2ejFsL2JU1cnJZdM4bgfKSZN5Tr+/A=
Subject key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB59
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Apr 2026 08:37:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 132692
IP: 45.64.60.0/22
IP: 103.18.56.0/22
IP: 2406:7100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174937 (0x2ab59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 08:37:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:4c:aa:f3:e8:14:4a:a4:22:5a:d0:23:14:
45:62:dc:c6:7f:ae:0e:d1:4d:01:8d:dc:af:a1:87:
cc:6d:c4:4d:47:ff:62:ea:41:e2:aa:a4:ee:f8:c1:
63:24:e8:e0:b4:53:61:06:89:70:86:44:be:85:d5:
fa:0c:78:fd:23:91:0b:fa:16:a0:f8:49:90:0f:a5:
c1:96:7a:92:67:33:84:a0:b2:55:86:f3:77:bf:16:
d4:34:3f:a7:58:45:c3:c0:6b:18:0d:cb:23:35:06:
86:d9:0a:09:41:2e:35:2d:3f:5c:a7:49:27:87:68:
f9:34:59:34:7d:38:7b:5a:c0:f3:a1:03:87:8b:b2:
94:80:6a:af:bd:08:b0:d8:a7:8b:fb:f9:dc:b0:b6:
75:ea:14:71:f3:ae:3d:42:8d:de:70:3b:1c:71:03:
45:88:a1:32:c3:b6:bc:65:14:70:c2:a4:a4:2c:c1:
47:6b:1d:c3:9b:da:c9:83:49:5e:8e:d8:6f:3d:6b:
b0:fd:78:69:44:d4:40:04:ed:f7:0b:b0:06:20:f6:
b6:9b:c4:2e:0e:2a:ea:1a:48:7e:1b:8b:a6:9a:db:
51:6e:e3:73:ce:90:0f:71:12:51:7e:52:8a:67:7b:
4e:fd:9a:9e:3e:00:40:d0:be:4c:6c:6a:98:93:6e:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132692
sbgp-ipAddrBlock: critical
IPv4:
45.64.60.0/22
103.18.56.0/22
IPv6:
2406:7100::/32
Signature Algorithm: sha256WithRSAEncryption
6b:9f:59:6f:8b:86:e6:d9:08:6b:96:aa:6e:73:7c:d2:fc:15:
93:59:eb:c6:5e:8e:02:62:4c:03:52:70:05:36:96:17:99:30:
b0:de:55:25:66:bb:72:e2:6e:8a:7c:76:af:e1:59:fa:3c:7b:
08:3d:36:4c:8d:42:6f:1f:86:be:04:3c:ae:46:5d:63:1d:96:
7e:28:d9:10:3a:dc:3f:08:05:8b:59:dd:69:02:f2:23:38:b7:
75:ed:39:55:86:07:ad:3b:f9:dc:32:cd:15:00:7e:ec:59:bc:
0f:52:bc:49:cb:c0:7f:0f:6e:f3:cb:53:58:ff:ff:48:cb:27:
d8:93:91:b7:91:13:af:28:5e:2b:13:28:00:b8:a8:44:0c:99:
50:35:85:22:24:86:e7:0f:bc:80:d4:7c:b8:d7:2d:95:d4:0a:
55:c3:85:e1:8b:68:60:45:6d:d9:87:f3:1d:56:29:5f:63:49:
a7:d3:74:b8:a8:f8:7f:29:ab:79:0c:84:00:45:1e:f0:8f:ec:
ba:a5:e2:32:86:c9:4c:6d:2c:57:84:79:c1:17:6c:16:81:9f:
6a:d1:d9:57:aa:4c:48:7c:56:14:8f:57:ef:d4:45:fc:3a:42:
da:66:aa:b5:42:5e:8d:5a:55:ff:b4:02:1a:67:30:d0:a2:4c:
b5:2d:7e:f5
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAqtZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQwOTA4Mzc1NFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUE4NUExMTAvBgNVBAUTKEU4MDY0MDMxMzQ1MkQwNTM0N0FFQjlF
QUFCNjBEQjhFMDBDMjE5MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzikyq8+gUSqQiWtAjFEVi3MZ/rg7RTQGN3K+hh8xtxE1H/2LqQeKqpO74wWMk
6OC0U2EGiXCGRL6F1foMeP0jkQv6FqD4SZAPpcGWepJnM4SgslWG83e/FtQ0P6dY
RcPAaxgNyyM1BobZCglBLjUtP1ynSSeHaPk0WTR9OHtawPOhA4eLspSAaq+9CLDY
p4v7+dywtnXqFHHzrj1Cjd5wOxxxA0WIoTLDtrxlFHDCpKQswUdrHcOb2smDSV6O
2G89a7D9eGlE1EAE7fcLsAYg9rabxC4OKuoaSH4bi6aa21Fu43POkA9xElF+Uopn
e079mp4+AEDQvkxsapiTblirAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU6AZAMTRS
0FNHrrnqq2DbjgDCGQswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFBODVBL0FCQkM2NzlFMERGQTExRjE5MjhDNEI1QTA1M0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBQTg1QS9BQkJDNjc5RTBERkExMUYxOTI4QzRCNUEwNTNEOEM2Ny82QVpBTVRS
UzBGTkhycm5xcTJEYmpnRENHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgZUMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLUA8AwQCZxI4
MA0EAgACMAcDBQAkBnEAMA0GCSqGSIb3DQEBCwUAA4IBAQBrn1lvi4bm2Qhrlqpu
c3zS/BWTWevGXo4CYkwDUnAFNpYXmTCw3lUlZrty4m6KfHav4Vn6PHsIPTZMjUJv
H4a+BDyuRl1jHZZ+KNkQOtw/CAWLWd1pAvIjOLd17TlVhgetO/ncMs0VAH7sWbwP
UrxJy8B/D27zy1NY//9IyyfYk5G3kROvKF4rEygAuKhEDJlQNYUiJIbnD7yA1Hy4
1y2V1ApVw4Xhi2hgRW3Zh/MdVilfY0mn03S4qPh/Kat5DIQARR7wj+y6peIyhslM
bSxXhHnBF2wWgZ9q0dlXqkxIfFYUj1fv1EX8OkLaZqq1Ql6NWlX/tAIaZzDQoky1
LX71
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:12:16 2026 by rpki-client