Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
File: CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer (raw, json)
Hash identifier: V3toe9hrcnzJZAm9KfRwzA3WJlVLhesT1nj6+dnWT5c=
Subject key identifier: 09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BBFB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Jun 2026 00:11:36 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 154703
IP: 2402:6260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179195 (0x2bbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 9 00:11:36 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91F89DB, serialNumber=09B1C8604234172274BA8494EB4266748F55029F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:8a:14:5f:e5:60:e0:c2:c5:5c:fa:e8:1a:
c5:5b:04:55:46:4e:db:2d:24:07:fe:4a:86:01:cc:
ea:bc:5b:38:c1:54:d4:46:11:65:16:aa:bb:7f:d7:
de:ed:c5:6f:d8:f4:4e:f9:43:ee:c8:24:f4:2f:bd:
51:21:f1:48:98:01:55:3c:77:e7:7d:8c:ab:09:5f:
8e:9a:bf:23:c1:93:36:5e:12:7c:13:8f:83:fe:2f:
2b:ba:f6:80:eb:81:18:f5:96:54:61:61:eb:b0:9e:
c5:b1:0d:24:ba:9f:58:95:bf:cd:59:5e:64:a9:01:
e5:13:af:e8:92:ba:ac:6c:fd:98:82:5e:ed:c5:38:
8c:3d:5a:af:a7:26:70:71:a3:0b:ff:f4:89:5f:f7:
b5:ab:42:07:b5:57:db:af:50:7d:2d:43:69:6c:d2:
49:04:40:74:85:b7:4b:af:8c:24:bf:30:af:cb:1b:
01:20:a3:35:81:25:fc:98:02:f7:e1:08:7b:a7:8b:
2e:94:46:69:43:02:85:b8:86:09:d6:fa:1d:9c:51:
8a:80:43:c0:04:cd:42:71:68:aa:cb:1f:93:8e:1a:
f7:93:05:3a:c9:9b:6f:f4:e6:9c:55:2d:74:91:d2:
87:f6:aa:5f:3b:3a:1b:8b:31:b3:8c:91:b8:7d:10:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154703
sbgp-ipAddrBlock: critical
IPv6:
2402:6260::/32
Signature Algorithm: sha256WithRSAEncryption
62:e0:20:2a:d6:0e:7c:36:a8:ce:62:de:1d:e1:ed:8d:cb:d3:
8c:cc:4b:b4:a5:5c:5e:35:04:47:bb:ce:4f:06:8e:f4:c4:d9:
7e:ae:6f:0a:f7:9c:75:11:cb:61:ce:f0:ae:fa:5d:72:30:9b:
3d:e7:65:40:6e:ee:d8:a1:a2:36:26:c1:aa:05:7e:d5:06:ae:
0e:40:1c:e1:c9:07:9e:f2:ea:7f:42:b5:65:8b:7b:ab:17:fe:
45:6e:f5:87:0a:e0:ac:06:c5:4b:18:d4:df:d0:6c:7e:fc:30:
7f:95:04:a3:aa:cd:50:61:df:26:93:45:d4:9f:fa:71:a0:bd:
bb:49:0d:b6:8d:78:46:20:85:d6:8e:57:db:c5:6a:80:78:df:
30:44:1e:7d:f2:36:91:eb:04:b9:d6:67:08:5e:c1:75:88:34:
2e:75:80:f5:34:22:11:86:ee:d0:0f:42:8a:55:9f:60:1d:c1:
56:5b:c3:26:3f:c8:ce:5a:3e:3d:76:cb:07:19:8c:e0:49:f7:
72:77:ca:5b:92:de:4b:0e:43:b7:00:1b:24:2e:21:96:8d:33:
4e:7a:17:c0:e4:95:20:35:3d:16:bd:d2:9c:21:24:a2:b6:f7:
4b:a1:1f:62:df:f5:30:39:b1:fb:54:f7:21:00:20:49:21:89:
7a:44:08:27
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDArv7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYwOTAwMTEzNloXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjg5REIxMTAvBgNVBAUTKDA5QjFDODYwNDIzNDE3MjI3NEJBODQ5
NEVCNDI2Njc0OEY1NTAyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDU4ooUX+Vg4MLFXProGsVbBFVGTtstJAf+SoYBzOq8WzjBVNRGEWUWqrt/197t
xW/Y9E75Q+7IJPQvvVEh8UiYAVU8d+d9jKsJX46avyPBkzZeEnwTj4P+Lyu69oDr
gRj1llRhYeuwnsWxDSS6n1iVv81ZXmSpAeUTr+iSuqxs/ZiCXu3FOIw9Wq+nJnBx
owv/9Ilf97WrQge1V9uvUH0tQ2ls0kkEQHSFt0uvjCS/MK/LGwEgozWBJfyYAvfh
CHuniy6URmlDAoW4hgnW+h2cUYqAQ8AEzUJxaKrLH5OOGveTBTrJm2/05pxVLXSR
0of2ql87OhuLMbOMkbh9EMpvAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUCbHIYEI0
FyJ0uoSU60JmdI9VAp8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY4OURCL0MzRUEwNjYyNjM5NzExRjE5OEZBODE1ODZFNDdBODg4LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGODlEQi9DM0VBMDY2MjYzOTcxMUYxOThGQTgxNTg2RTQ3QTg4OC9DYkhJWUVJ
MEZ5SjB1b1NVNjBKbWRJOVZBcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlxPMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJiYDANBgkq
hkiG9w0BAQsFAAOCAQEAYuAgKtYOfDaozmLeHeHtjcvTjMxLtKVcXjUER7vOTwaO
9MTZfq5vCvecdRHLYc7wrvpdcjCbPedlQG7u2KGiNibBqgV+1QauDkAc4ckHnvLq
f0K1ZYt7qxf+RW71hwrgrAbFSxjU39Bsfvwwf5UEo6rNUGHfJpNF1J/6caC9u0kN
to14RiCF1o5X28VqgHjfMEQeffI2kesEudZnCF7BdYg0LnWA9TQiEYbu0A9CilWf
YB3BVlvDJj/Izlo+PXbLBxmM4En3cnfKW5LeSw5DtwAbJC4hlo0zTnoXwOSVIDU9
Fr3SnCEkorb3S6EfYt/1MDmx+1T3IQAgSSGJekQIJw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:56 2026 by rpki-client