Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer (raw, json)
Hash identifier: t0qxngEgWZ9CSCjYH4aPdRdG7zPSbcYICRIr/vKzzs0=
Subject key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029662
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:28:44 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 103.82.168.0/22
IP: 125.62.68.0/22
IP: 2400:8640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169570 (0x29662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:28:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:ab:ef:b6:44:44:28:c5:dd:e9:de:fc:b4:
06:c4:89:84:5a:8a:86:e0:86:e0:31:22:7d:a7:7e:
e7:3f:0e:99:1d:1d:bd:b1:d5:e5:b2:dd:8b:12:f2:
b8:8a:18:16:ba:89:90:d9:ee:28:37:de:0c:21:8a:
76:6e:0d:05:31:13:b9:33:7b:20:2b:84:69:93:19:
d7:a5:45:9a:61:36:fb:09:97:8b:c7:84:e4:fb:1d:
96:d6:68:48:e9:a9:0f:9f:91:86:20:ca:72:03:1a:
89:b0:1c:eb:18:0c:93:5a:d4:9e:91:c1:63:47:7e:
df:78:25:04:30:7e:e2:14:f9:c3:0a:d3:87:ff:30:
15:02:d6:f1:a6:74:ec:c8:e5:ff:94:b8:ad:e6:b8:
ec:be:2f:0f:30:65:c6:33:b2:d9:89:72:6d:d9:51:
33:d5:1b:3d:9e:83:cc:2e:b6:e9:b5:20:8d:0a:dd:
0b:eb:f6:4b:1c:99:47:49:81:1e:d4:3f:25:da:31:
2e:12:b9:9f:34:8d:c7:73:21:45:f8:e5:6b:cb:0c:
c9:f9:09:7c:fa:0d:4a:e5:da:0b:ec:e1:8c:a0:fb:
73:e8:2f:e1:ac:75:54:3b:86:40:95:7d:41:c3:8c:
42:95:25:65:8d:53:a9:4d:02:e0:93:e6:66:b9:9f:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.168.0/22
125.62.68.0/22
IPv6:
2400:8640::/32
Signature Algorithm: sha256WithRSAEncryption
a0:f1:ca:7c:d5:6b:31:c9:79:54:d2:4e:52:ac:6d:e5:00:46:
a7:79:af:d7:d3:13:ff:2b:94:c5:8f:0a:fc:51:88:47:ac:aa:
ad:ba:fc:6e:2d:81:24:56:ce:f0:4d:13:99:31:e5:4a:77:b8:
c2:31:37:6f:00:c5:0f:4f:8a:8a:f3:d1:95:48:8f:b7:05:c4:
d7:76:f2:e0:89:cc:28:71:c6:ab:08:9e:39:ea:12:32:2d:ae:
ec:ec:5e:e3:1d:3d:bf:13:06:de:5b:f4:33:b2:f5:3c:6d:ee:
e8:3e:cc:28:65:98:df:e9:23:06:5f:13:a4:25:76:16:b3:f0:
91:59:bb:85:b0:e1:ed:73:7d:99:21:2f:92:3d:9e:c7:7c:97:
f3:26:d8:c7:ef:6e:da:f7:ae:9e:ac:94:ac:9c:c7:15:4e:76:
12:fb:10:41:f4:a7:80:cc:d0:f1:66:90:75:14:95:e8:1c:26:
9f:ec:97:ca:94:88:76:09:b2:81:3f:f1:d3:bc:ef:0a:80:5a:
b0:10:ed:77:77:f9:a4:e2:23:83:eb:79:7f:a7:2f:01:e1:2b:
d7:76:09:bb:02:d9:94:36:62:ce:d5:df:63:8d:6f:83:53:85:
98:1b:a2:0e:53:ff:80:90:15:70:0d:2e:b0:ff:de:18:0f:fc:
e1:a9:f9:9c
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgIDApZiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMjg0NFoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1
MjREMUU4Rjk4QjA4QzI4RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmaavvtkREKMXd6d78tAbEiYRaiobghuAxIn2nfuc/DpkdHb2x1eWy3YsS8riK
GBa6iZDZ7ig33gwhinZuDQUxE7kzeyArhGmTGdelRZphNvsJl4vHhOT7HZbWaEjp
qQ+fkYYgynIDGomwHOsYDJNa1J6RwWNHft94JQQwfuIU+cMK04f/MBUC1vGmdOzI
5f+UuK3muOy+Lw8wZcYzstmJcm3ZUTPVGz2eg8wutum1II0K3Qvr9kscmUdJgR7U
PyXaMS4SuZ80jcdzIUX45WvLDMn5CXz6DUrl2gvs4Yyg+3PoL+GsdVQ7hkCVfUHD
jEKVJWWNU6lNAuCT5ma5n3SvAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUTgc3hmfs
edU9ZQ5STR6PmLCMKOEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYzMkQ3L0Y5Nzk1OUMyMjQxNzExRUQ5QzBDNzAwREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1m
c2VkVTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj
MBIEAgABMAwDBAJnUqgDBAJ9PkQwDQQCAAIwBwMFACQAhkAwDQYJKoZIhvcNAQEL
BQADggEBAKDxynzVazHJeVTSTlKsbeUARqd5r9fTE/8rlMWPCvxRiEesqq26/G4t
gSRWzvBNE5kx5Up3uMIxN28AxQ9Piorz0ZVIj7cFxNd28uCJzChxxqsInjnqEjIt
ruzsXuMdPb8TBt5b9DOy9Txt7ug+zChlmN/pIwZfE6Qldhaz8JFZu4Ww4e1zfZkh
L5I9nsd8l/Mm2Mfvbtr3rp6slKycxxVOdhL7EEH0p4DM0PFmkHUUlegcJp/sl8qU
iHYJsoE/8dO87wqAWrAQ7Xd3+aTiI4PreX+nLwHhK9d2CbsC2ZQ2Ys7V32ONb4NT
hZgbog5T/4CQFXANLrD/3hgP/OGp+Zw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:35 2026 by rpki-client