Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
File: GuuZUbWE4eIbv8UszokJQRPG_Kc.cer (raw, json)
Hash identifier: ZqgDbhpTLEeRNvJOaewrAzuxl6vVOHiUdx6dvVuLRac=
Subject key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E1B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 30 Oct 2026 12:37:18 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 133206
AS: 138572
IP: 103.75.134.0/23
IP: 103.133.96.0/22
IP: 103.204.240.0/22
IP: 203.76.224.0/22
IP: 2404:4ac0::/32
IP: 2404:d4c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 10:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188851 (0x2e1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 30 12:37:18 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:22:82:6d:fb:ff:10:c9:8a:37:03:4a:cb:
3d:0e:38:65:06:fc:52:77:93:f6:c1:2b:c4:e0:df:
96:43:d6:e4:6a:b5:96:78:df:a9:fe:9e:24:43:12:
d8:40:59:35:c8:4a:cc:de:4d:70:8d:a1:97:f9:9d:
d8:29:47:05:09:bd:e8:ab:8b:d8:3e:01:d3:44:e5:
19:db:5d:e4:0e:69:71:ca:6d:78:79:63:a1:e2:a7:
c2:ec:0e:49:fc:ff:07:31:e7:e2:b4:e8:de:46:c1:
f1:87:31:0a:72:1d:86:f3:73:cd:f8:54:c1:16:31:
dc:62:e6:b2:f3:a2:d0:43:37:62:18:bf:ed:5f:43:
05:c7:01:b5:69:cc:c5:2f:e5:3c:3c:c4:84:a1:0f:
6c:e3:d3:a1:f2:b6:26:63:b0:05:6b:48:25:46:c1:
71:7c:e8:cc:86:0b:27:1a:1a:b0:0c:e2:0b:c6:7e:
1f:0d:e8:94:8f:a6:dd:29:06:97:bf:54:56:68:4c:
17:e6:f8:a8:d6:9c:98:b9:f2:94:87:60:b0:a6:fe:
f7:13:22:42:12:e9:91:78:c9:c0:ff:01:bb:29:88:
7c:4e:e8:48:a7:b6:c8:36:fc:a1:26:5f:a6:3b:0c:
ac:15:d5:a7:2a:38:06:1d:b5:05:f3:5c:bc:bc:82:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133206
138572
sbgp-ipAddrBlock: critical
IPv4:
103.75.134.0/23
103.133.96.0/22
103.204.240.0/22
203.76.224.0/22
IPv6:
2404:4ac0::/32
2404:d4c0::/32
Signature Algorithm: sha256WithRSAEncryption
20:cd:f2:04:45:55:46:de:f9:a2:16:dc:15:e8:5f:e3:82:38:
f3:77:3f:af:6e:66:b4:94:58:6c:39:f6:57:b7:2f:ad:7a:93:
09:b2:a7:06:30:31:51:c7:14:09:64:97:e0:f2:b7:27:c4:58:
1b:27:88:7c:cd:90:b3:1f:ed:0b:7a:67:d9:4d:0a:dd:16:d8:
1e:10:6e:66:00:77:22:ca:76:7f:17:29:a2:89:77:96:74:95:
f0:58:f6:0f:f2:d5:06:2b:55:8e:d1:a8:b8:de:99:19:be:6f:
a9:8f:75:19:7f:24:48:31:9c:2d:03:bc:49:87:d1:42:48:72:
ab:79:7b:03:84:14:53:ee:c3:65:4e:5e:e4:f5:90:20:13:00:
75:0a:37:9e:75:18:b5:40:4b:b2:be:ea:08:2f:a0:e7:87:36:
ca:be:cc:09:f7:19:25:dc:c0:bb:42:44:8c:28:18:e9:eb:dc:
c7:40:3e:06:56:68:e4:5e:3d:da:d4:08:92:e3:e0:99:44:fb:
6d:d9:79:b5:e2:6e:de:8f:4a:25:bc:15:6a:51:c0:4c:61:50:
b7:6e:b7:f2:bd:1b:45:0e:d4:57:79:9e:95:bc:6d:ac:df:fb:
0d:ff:9e:d3:cc:bd:99:ce:05:a8:34:06:17:e6:a8:1e:24:70:
64:93:2b:0f
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIDAuGzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAzMDEyMzcxOFoXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUy
Q0NFODkwOTQxMTNDNkZDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEeyKCbfv/EMmKNwNKyz0OOGUG/FJ3k/bBK8Tg35ZD1uRqtZZ436n+niRDEthA
WTXISszeTXCNoZf5ndgpRwUJveiri9g+AdNE5RnbXeQOaXHKbXh5Y6Hip8LsDkn8
/wcx5+K06N5GwfGHMQpyHYbzc834VMEWMdxi5rLzotBDN2IYv+1fQwXHAbVpzMUv
5Tw8xIShD2zj06HytiZjsAVrSCVGwXF86MyGCycaGrAM4gvGfh8N6JSPpt0pBpe/
VFZoTBfm+KjWnJi58pSHYLCm/vcTIkIS6ZF4ycD/AbspiHxO6Eintsg2/KEmX6Y7
DKwV1acqOAYdtQXzXLy8gr0/AgMBAAGjggM8MIIDODAdBgNVHQ4EFgQUGuuZUbWE
4eIbv8UszokJQRPG/KcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJDREM1L0YzREY1ODhDODBCNjExRUJCRUNCRjM3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyQ0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJX
RTRlSWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAghWAgMCHUwwRwYIKwYBBQUHAQcBAf8EODA2MB4EAgABMBgDBAFnS4YD
BAJnhWADBAJnzPADBALLTOAwFAQCAAIwDgMFACQESsADBQAkBNTAMA0GCSqGSIb3
DQEBCwUAA4IBAQAgzfIERVVG3vmiFtwV6F/jgjjzdz+vbma0lFhsOfZXty+tepMJ
sqcGMDFRxxQJZJfg8rcnxFgbJ4h8zZCzH+0LemfZTQrdFtgeEG5mAHciynZ/Fymi
iXeWdJXwWPYP8tUGK1WO0ai43pkZvm+pj3UZfyRIMZwtA7xJh9FCSHKreXsDhBRT
7sNlTl7k9ZAgEwB1CjeedRi1QEuyvuoIL6DnhzbKvswJ9xkl3MC7QkSMKBjp69zH
QD4GVmjkXj3a1AiS4+CZRPtt2Xm14m7ej0olvBVqUcBMYVC3brfyvRtFDtRXeZ6V
vG2s3/sN/57TzL2ZzgWoNAYX5qgeJHBkkysP
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:24:05 2026 by rpki-client