Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer (raw, json)
Hash identifier: Hp9u2A//bKKxdotJADp6QWZSBXrcHBNzmCY44k5rfGY=
Subject key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F10
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:09:27 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 137404
IP: 103.107.80.0/22
IP: 2402:4f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171792 (0x29f10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:09:27 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:dd:7e:ed:b0:33:39:65:b3:05:8d:54:4e:
f5:86:67:21:ee:5c:4e:59:1e:e8:69:7b:51:b9:cd:
ff:6e:83:46:34:bd:6c:5c:a2:71:82:64:f6:a5:9f:
75:21:63:3c:6c:a8:a4:85:be:64:62:6b:0f:67:97:
d9:b1:b3:7b:12:79:9d:a0:e5:36:5a:69:b7:92:9b:
92:2b:d7:3b:b1:63:e7:b9:77:fd:6a:99:3f:8e:52:
1f:03:3f:bc:81:2c:5c:9c:c7:b4:f8:0c:94:44:d5:
ad:26:8b:fd:a2:37:fd:ab:86:e2:2b:cd:3c:c7:64:
55:79:66:1d:63:a7:ca:16:29:a2:50:34:ba:10:a3:
7b:a9:20:aa:88:eb:ef:81:b4:c2:f0:ea:df:78:3f:
71:d7:2a:9e:3b:9f:07:4b:8d:62:dd:aa:6d:48:d2:
1f:bc:91:43:63:98:f4:fd:aa:5a:96:ea:82:50:da:
c7:80:fe:70:d9:1f:9d:38:9d:d7:58:02:c4:23:c8:
55:5f:6b:ce:ed:f8:9d:bf:d7:bc:02:91:94:2a:9c:
e6:06:79:0f:b2:1d:b1:ce:7a:75:16:53:af:20:01:
6e:96:14:35:86:f1:b3:e3:eb:2c:4b:ee:c6:f9:15:
0b:62:f9:6d:63:4f:08:b0:b3:60:47:02:5a:75:4e:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137404
sbgp-ipAddrBlock: critical
IPv4:
103.107.80.0/22
IPv6:
2402:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
1e:7b:c5:f3:6a:aa:61:81:6b:ad:0d:a1:42:eb:a2:db:98:ca:
35:5f:f2:4f:9d:74:d0:26:cb:1b:91:48:50:d8:1c:23:01:cb:
ba:87:a0:02:10:6c:d3:3c:9f:6a:98:79:91:60:e0:22:02:c7:
b7:db:bd:77:8f:a2:66:da:75:52:2b:b3:6a:24:7f:01:c8:65:
34:78:84:d5:9f:0d:bd:fb:f0:bc:53:a3:d2:3e:97:62:ae:f9:
57:0d:e0:e1:2c:0b:af:c4:55:73:88:a1:b6:d7:ce:2b:44:80:
5d:0d:6a:7c:c9:0b:ab:b8:be:bc:68:2e:06:1c:5c:74:45:ed:
2b:b6:15:b5:7e:82:db:8c:c1:ec:04:51:e9:98:f3:23:b7:18:
7d:33:08:c0:42:64:95:ee:cf:1a:05:21:55:b5:38:60:59:01:
66:62:07:39:27:8f:fa:47:9c:b8:ef:1e:6a:66:c9:b6:9e:30:
75:7b:6a:80:e1:a5:29:b3:57:5d:7b:83:d5:ef:c5:3e:dd:5d:
cd:c9:a9:4b:ba:5c:1a:d5:14:72:d1:ff:bd:e7:ea:e7:f3:d5:
a8:60:e3:f6:d6:6d:6e:a9:5c:82:4d:79:9b:63:53:b0:b2:04:
6f:31:04:f4:a8:d7:ee:7d:51:62:33:6d:39:12:3c:dd:82:13:
cb:50:6a:87
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAp8QMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzA0MDkyN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTIzQzUxMTAvBgNVBAUTKDI0M0Q5MjQzN0NFMjMwNTAzRTU0OEVG
RDI5M0MyQTYzODFCNUM0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdPN1+7bAzOWWzBY1UTvWGZyHuXE5ZHuhpe1G5zf9ug0Y0vWxconGCZPaln3Uh
YzxsqKSFvmRiaw9nl9mxs3sSeZ2g5TZaabeSm5Ir1zuxY+e5d/1qmT+OUh8DP7yB
LFycx7T4DJRE1a0mi/2iN/2rhuIrzTzHZFV5Zh1jp8oWKaJQNLoQo3upIKqI6++B
tMLw6t94P3HXKp47nwdLjWLdqm1I0h+8kUNjmPT9qlqW6oJQ2seA/nDZH504nddY
AsQjyFVfa87t+J2/17wCkZQqnOYGeQ+yHbHOenUWU68gAW6WFDWG8bPj6yxL7sb5
FQti+W1jTwiws2BHAlp1TjKrAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUJD2SQ3zi
MFA+VI79KTwqY4G1xCYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUyM0M1LzAzNjZEN0FFQUNFMTExRTlCRkE1NjQyM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1MjNDNS8wMzY2RDdBRUFDRTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6
aU1GQS1WSTc5S1R3cVk0RzF4Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhi8MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2tQMA0EAgAC
MAcDBQAkAk9AMA0GCSqGSIb3DQEBCwUAA4IBAQAee8XzaqphgWutDaFC66LbmMo1
X/JPnXTQJssbkUhQ2BwjAcu6h6ACEGzTPJ9qmHmRYOAiAse32713j6Jm2nVSK7Nq
JH8ByGU0eITVnw29+/C8U6PSPpdirvlXDeDhLAuvxFVziKG2184rRIBdDWp8yQur
uL68aC4GHFx0Re0rthW1foLbjMHsBFHpmPMjtxh9MwjAQmSV7s8aBSFVtThgWQFm
Ygc5J4/6R5y47x5qZsm2njB1e2qA4aUps1dde4PV78U+3V3NyalLulwa1RRy0f+9
5+rn89WoYOP21m1uqVyCTXmbY1OwsgRvMQT0qNfufVFiM205EjzdghPLUGqH
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:59 2026 by rpki-client