
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer (raw, json)
Hash identifier: aLY3xj+UsWIFzvG8D+eYJ5yvLBaZWt2YUAUGOUuelb0=
Subject key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C809
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 14:21:16 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 132475
IP: 2001:df5:9440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182281 (0x2c809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 14:21:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:13:66:46:73:07:95:ec:d8:d6:ae:4d:dc:
dc:5b:f8:e3:29:73:22:c7:0a:7c:0f:9d:4c:02:f4:
30:55:98:34:69:7c:d1:63:3a:28:95:f4:03:42:58:
52:7c:b8:d6:63:b2:89:a5:67:ce:e7:1f:4a:db:59:
24:95:5d:48:9a:fb:1c:1c:f1:fb:4a:25:74:f6:33:
77:e0:26:f6:b8:09:4b:6b:16:4d:2a:ca:52:78:7f:
4d:95:07:28:62:d9:57:92:b3:03:49:bf:84:92:19:
1a:9b:6f:15:ba:ef:9e:36:45:bc:3a:9b:b2:e0:6a:
4a:15:e6:6c:8d:c7:89:a6:75:95:60:f5:cd:e8:b1:
e5:bf:19:e1:e1:fe:8f:b1:6e:21:21:98:12:b2:46:
10:2b:e3:2d:ab:2c:51:47:6c:9b:3d:65:1c:17:f5:
ad:bb:7d:30:6b:0a:5f:95:50:6a:c4:74:3d:c3:57:
2d:64:a5:ab:a2:34:72:78:a7:75:8e:33:d7:92:c8:
09:0e:f7:04:e5:37:38:da:b4:dd:50:12:27:b2:51:
97:4c:9f:f1:b1:72:7a:21:67:18:02:dd:2d:c5:dc:
76:97:47:b2:c2:73:8e:4a:2c:60:11:f0:c0:56:c2:
20:48:4e:69:00:be:6d:69:4b:43:b5:33:ce:2b:4c:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132475
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:9440::/48
Signature Algorithm: sha256WithRSAEncryption
b0:b7:41:1c:96:2e:b9:57:e6:a4:93:8c:63:85:21:ad:ee:e9:
9c:90:97:42:76:34:4a:9d:8f:1e:0f:03:34:8d:56:49:ea:e3:
8b:26:60:9b:81:4d:dc:e4:4a:75:c3:8b:1a:9d:ee:5e:7d:c7:
eb:03:6c:fb:79:6c:57:c7:7a:c9:6c:12:a6:54:ac:21:14:73:
3b:2e:4f:af:b5:7d:8b:bd:1b:86:5b:e5:e3:42:30:86:3e:e9:
1a:96:33:5f:2d:24:fb:4b:ed:ba:71:ee:b9:4e:e3:00:ff:64:
ba:6c:8c:c1:ad:61:9f:0a:5f:6d:8d:d0:79:1f:0a:a1:d5:68:
6d:f2:6c:43:2a:ec:7b:f6:95:0a:27:52:f8:b8:5f:47:31:94:
49:6f:7a:35:65:e6:27:af:1d:51:0a:c2:4e:49:86:7b:d0:f8:
86:7f:2d:9b:fc:ab:7d:85:f0:c8:a4:72:72:3b:6d:88:42:16:
16:9c:3a:35:c5:d6:16:00:cc:47:0c:ef:c7:ce:8c:9b:94:dc:
1e:5c:ac:18:e0:a5:a8:5c:6e:40:16:ff:b6:7c:ac:a7:e8:ea:
fa:65:10:47:72:d2:92:0f:9f:58:e4:0a:3d:50:88:cf:39:83:
1e:9f:5c:50:b5:c1:e3:5c:89:17:60:fe:8c:f3:83:1f:72:3c:
aa:a1:14:e3
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAsgJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcyODE0MjExNloXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEVGODcxMTAvBgNVBAUTKDBCNkNEMTI3RDA0RUVDM0U4RUU0MTgz
OTE5NDE0RkQ3RUYzOUQ5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSmRNmRnMHlezY1q5N3Nxb+OMpcyLHCnwPnUwC9DBVmDRpfNFjOiiV9ANCWFJ8
uNZjsomlZ87nH0rbWSSVXUia+xwc8ftKJXT2M3fgJva4CUtrFk0qylJ4f02VByhi
2VeSswNJv4SSGRqbbxW67542Rbw6m7LgakoV5myNx4mmdZVg9c3oseW/GeHh/o+x
biEhmBKyRhAr4y2rLFFHbJs9ZRwX9a27fTBrCl+VUGrEdD3DVy1kpauiNHJ4p3WO
M9eSyAkO9wTlNzjatN1QEieyUZdMn/GxcnohZxgC3S3F3HaXR7LCc45KLGAR8MBW
wiBITmkAvm1pS0O1M84rTGa5AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUC2zRJ9BO
7D6O5Bg5GUFP1+852SQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFRjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RUY4Ny8zQ0JFMzlBMjM4QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlC
TzdENk81Qmc1R1VGUDEtODUyU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgV7MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9ZRAMA0G
CSqGSIb3DQEBCwUAA4IBAQCwt0Ecli65V+akk4xjhSGt7umckJdCdjRKnY8eDwM0
jVZJ6uOLJmCbgU3c5Ep1w4sane5efcfrA2z7eWxXx3rJbBKmVKwhFHM7Lk+vtX2L
vRuGW+XjQjCGPukaljNfLST7S+26ce65TuMA/2S6bIzBrWGfCl9tjdB5Hwqh1Wht
8mxDKux79pUKJ1L4uF9HMZRJb3o1ZeYnrx1RCsJOSYZ70PiGfy2b/Kt9hfDIpHJy
O22IQhYWnDo1xdYWAMxHDO/HzoyblNweXKwY4KWoXG5AFv+2fKyn6Or6ZRBHctKS
D59Y5Ao9UIjPOYMen1xQtcHjXIkXYP6M84MfcjyqoRTj
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:49 2026 by rpki-client