Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
File: OYkRMAEE18WLMm5WZLPXmi1GRuA.cer (raw, json)
Hash identifier: v/HeBORvcJX6+JPgd+KTz4TcovKZ31nz5JdoLBp7oTU=
Subject key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E3D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Nov 2026 14:09:58 +0000
Certificate not after: Mon 01 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 138167
IP: 103.121.224.0/22
IP: 2403:72c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 20:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189401 (0x2e3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 14:09:58 2026 GMT
Not After : Mar 1 00:00:00 2027 GMT
Subject: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:b2:0f:65:13:ae:93:40:7a:3a:60:b6:8a:
7b:15:72:62:28:2f:d3:a0:ce:74:c3:18:36:f9:c7:
0e:c2:b9:8e:50:e7:5c:d6:4d:84:ab:5c:82:a3:fd:
bf:df:5f:0e:96:b1:ac:83:a5:e5:80:26:6f:5a:17:
c0:69:df:6d:7b:f4:2e:29:d1:ce:04:69:16:6e:fd:
0e:6e:88:aa:dc:04:50:43:b3:6a:8e:94:58:ed:4a:
18:db:82:e5:08:bd:d5:c4:cb:68:61:3e:f4:ec:96:
18:4f:70:db:bd:0f:b2:1b:47:12:d4:2b:2a:4a:ab:
71:50:41:2e:32:12:6f:a2:37:e0:4b:f7:03:4f:93:
2f:12:5e:0b:e2:8f:4a:99:59:56:4f:7c:76:7d:e2:
a5:cb:57:9a:1e:87:a6:58:3c:0d:50:d5:4c:61:07:
9d:84:ff:e4:d7:9b:5e:5d:25:4b:6b:50:9b:83:d8:
ed:d4:eb:50:c4:7e:85:a7:3b:3a:fd:c6:16:5d:79:
ee:34:89:b9:6b:f9:be:72:93:0b:8b:38:ff:5f:f2:
6a:1c:09:d4:be:d7:a6:cf:a1:56:5a:06:81:86:04:
cc:ff:c8:11:c4:5c:2d:5c:52:bd:53:6f:76:e7:cf:
57:2c:ef:cc:54:ac:6d:4e:8f:01:00:ce:a8:0c:76:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138167
sbgp-ipAddrBlock: critical
IPv4:
103.121.224.0/22
IPv6:
2403:72c0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:49:5b:04:86:be:c4:ec:da:cf:13:23:b2:81:73:46:f5:3b:
c6:0b:c2:8d:4a:e1:9e:50:d8:64:32:04:4e:28:86:45:e3:79:
7e:23:e2:d7:03:26:97:e3:62:10:41:b5:d0:d2:42:7e:31:6a:
76:5b:27:33:30:44:30:3a:c4:23:53:fc:d6:7e:19:ad:58:9b:
4f:b2:1a:f6:eb:4f:5a:d2:21:e1:26:5d:68:5a:13:df:d6:62:
97:26:5b:2d:35:c3:69:93:a0:44:f5:d8:ff:de:fb:71:8e:49:
7c:90:e5:fa:d7:b2:09:a2:fc:ec:5f:14:89:13:9c:45:d5:38:
e9:bf:0a:0f:ca:f9:b3:b4:b9:e4:5f:f4:fb:4d:ec:c4:28:df:
d8:0f:fb:be:6c:49:cf:eb:3a:26:5f:5b:b1:a2:c8:26:84:2e:
3a:2f:9d:54:25:6e:8f:36:56:94:80:83:d7:28:06:72:6a:9d:
3d:26:24:b6:43:ea:fe:4a:7e:2e:d0:a5:dd:dd:8b:32:1b:a5:
52:78:84:3f:0b:77:2d:37:db:89:df:b2:05:1c:7c:5b:b4:21:
66:c4:35:df:21:22:f1:e7:83:51:7d:e7:c4:7e:47:a5:34:b5:
13:c1:33:1b:56:c2:ae:ef:ce:35:bb:56:05:91:83:8e:06:a1:
53:69:92:76
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAuPZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTEwMjE0MDk1OFoXDTI3MDMwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1
NjY0QjNENzlBMkQ0NjQ2RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNILIPZROuk0B6OmC2insVcmIoL9OgznTDGDb5xw7CuY5Q51zWTYSrXIKj/b/f
Xw6WsayDpeWAJm9aF8Bp32179C4p0c4EaRZu/Q5uiKrcBFBDs2qOlFjtShjbguUI
vdXEy2hhPvTslhhPcNu9D7IbRxLUKypKq3FQQS4yEm+iN+BL9wNPky8SXgvij0qZ
WVZPfHZ94qXLV5oeh6ZYPA1Q1UxhB52E/+TXm15dJUtrUJuD2O3U61DEfoWnOzr9
xhZdee40iblr+b5ykwuLOP9f8mocCdS+16bPoVZaBoGGBMz/yBHEXC1cUr1Tb3bn
z1cs78xUrG1OjwEAzqgMdt3VAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUOYkRMAEE
18WLMm5WZLPXmi1GRuAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThGMUM5LzZBNTdBQjhDN0Y5NTExRUFCMEVEODUzN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFF
RTE4V0xNbTVXWkxQWG1pMUdSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhu3MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3ngMA0EAgAC
MAcDBQAkA3LAMA0GCSqGSIb3DQEBCwUAA4IBAQClSVsEhr7E7NrPEyOygXNG9TvG
C8KNSuGeUNhkMgROKIZF43l+I+LXAyaX42IQQbXQ0kJ+MWp2WyczMEQwOsQjU/zW
fhmtWJtPshr2609a0iHhJl1oWhPf1mKXJlstNcNpk6BE9dj/3vtxjkl8kOX617IJ
ovzsXxSJE5xF1TjpvwoPyvmztLnkX/T7TezEKN/YD/u+bEnP6zomX1uxosgmhC46
L51UJW6PNlaUgIPXKAZyap09JiS2Q+r+Sn4u0KXd3YsyG6VSeIQ/C3ctN9uJ37IF
HHxbtCFmxDXfISLx54NRfefEfkelNLUTwTMbVsKu7841u1YFkYOOBqFTaZJ2
-----END CERTIFICATE-----
Generated at Tue Nov 10 23:33:12 2026 by rpki-client