Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.cer (raw, json)
Hash identifier: OVqgoy1pJOiEOnzsjgV3yPnZb90j6bN0RfwwuGqW88g=
Subject key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02949D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:20:47 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 17911
AS: 59254
AS: 150353
IP: 103.224.12.0/22
IP: 122.129.64.0/19
IP: 203.128.0.0/19
IP: 2400:4f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169117 (0x2949d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:20:47 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:c5:28:4f:73:80:65:bf:4f:78:9f:b8:ff:
2e:d3:42:4e:04:b3:72:8e:32:e8:c2:9b:9c:dd:e4:
c9:3d:2f:ec:6a:dd:9a:25:3f:1a:d7:d2:59:56:b6:
ce:f1:85:c8:09:1c:9d:c9:70:6c:91:89:44:80:98:
2c:35:71:4c:6c:20:ad:7f:e0:58:61:23:49:14:38:
c8:bc:4c:0d:ba:f0:0d:a2:b5:4d:cd:bd:e6:23:1a:
23:4b:57:fa:a9:c7:3a:e3:b0:55:c0:74:8f:66:f0:
81:ad:56:da:3a:8b:d1:b8:2a:1b:d2:ba:29:61:ef:
6d:8b:ce:9d:a1:41:eb:e8:de:99:8b:93:e5:83:2b:
55:a5:f6:e1:4a:6b:9a:0a:37:e7:43:6b:51:b1:4c:
fa:ff:86:e8:3c:2b:e1:aa:49:85:16:6d:fa:ef:cd:
2b:3d:a1:d2:d0:e9:51:2d:38:7f:7c:35:49:e3:66:
21:45:db:11:00:8a:d7:7a:36:e0:52:2a:28:3d:fd:
67:86:b7:3f:4f:3f:dd:d2:5a:9c:63:cd:4d:fd:ae:
7d:d2:5f:00:f0:5a:26:60:82:88:08:6f:ce:3a:10:
57:b7:08:cb:72:0a:ef:d0:f5:31:12:98:ca:0a:09:
ac:83:65:83:bb:7a:dd:bc:9d:db:be:1d:9d:45:e5:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17911
59254
150353
sbgp-ipAddrBlock: critical
IPv4:
103.224.12.0/22
122.129.64.0/19
203.128.0.0/19
IPv6:
2400:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
01:e7:d1:68:1c:46:67:aa:1c:4b:34:dd:de:c4:67:e2:ae:6a:
f1:ab:4d:6b:9f:97:6b:24:fd:31:b3:a4:31:5a:4f:0e:25:7d:
d8:fc:cc:cb:52:8f:d2:b9:dd:44:f0:0c:25:25:bb:b2:2a:21:
14:8e:58:7e:bd:f8:7b:84:3b:74:e7:dc:b8:2c:fa:c2:67:7d:
9d:f4:e3:ea:f5:56:4d:9f:13:16:3c:46:3b:f5:d9:37:22:99:
73:1c:29:c3:d1:00:75:7d:0e:91:2a:b0:5a:6e:0e:1a:e8:39:
d4:e1:6d:51:fb:ae:d7:a2:c7:d6:08:d9:97:fa:87:67:20:50:
40:34:22:f5:3b:8d:16:e2:0e:5e:a5:96:02:e9:42:f3:67:66:
64:c1:94:e3:0a:53:73:29:71:9c:58:c3:fc:10:ec:a6:bc:be:
d5:25:21:8c:e3:78:c9:2d:0d:9e:5f:24:31:64:21:55:0c:f9:
18:56:9f:c8:e1:e3:df:08:66:07:dc:5a:dc:80:c0:71:ac:18:
48:14:73:c2:5b:f3:c4:ef:2b:1b:e0:0e:d5:32:84:18:e2:cd:
c1:34:f1:04:8d:ca:18:f6:99:5a:4f:a5:cd:96:ca:8d:de:51:
12:25:c8:27:7a:76:a5:d9:6c:ef:19:d6:47:7f:5d:1b:ab:57:
b1:45:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:48 2026 by rpki-client