Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
File: XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer (raw, json)
Hash identifier: S35Yv9oDeblgiaQihrlF4eJay1YYLCL0rcIENz+Qp5o=
Subject key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02963F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:28:06 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 154441
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169535 (0x2963f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:28:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:25:05:e4:4e:e2:6c:e0:9e:08:1d:db:30:
4e:b8:fc:c6:b4:d5:0c:49:9a:2e:76:c4:14:07:b7:
4d:d9:6f:28:72:e9:f0:ef:d9:6f:dd:88:7b:5d:83:
40:5e:ce:f2:d8:6d:b9:3a:b7:33:b5:63:ee:12:cf:
0c:80:dd:5f:92:ea:cb:d0:5a:17:c0:cd:88:6c:bb:
7d:14:2c:30:98:ea:07:c4:55:0a:9b:18:a2:d1:de:
ff:7a:15:2d:ac:b9:76:20:82:87:a8:43:52:57:d2:
9c:01:b9:18:22:c0:c6:90:28:84:a4:c8:b0:77:42:
a5:ff:88:66:bc:f9:3b:5b:08:43:ab:10:63:86:f0:
27:98:ff:91:41:36:30:eb:27:45:d7:cd:e9:c1:4f:
59:c7:3f:b3:85:09:93:7c:91:21:25:3f:d5:66:de:
28:0a:af:94:eb:07:7a:27:86:37:7e:cb:13:3a:50:
db:c9:f9:98:d6:3c:98:02:1b:5f:93:58:45:a9:42:
12:16:5f:ff:59:ac:4a:f1:90:d7:64:f5:ec:43:10:
8f:31:d1:c4:68:22:25:7a:30:92:69:55:88:32:53:
61:8c:cb:39:b8:2d:0f:15:c4:85:5a:9a:bf:6d:32:
26:42:83:a6:3c:48:78:96:ea:59:2c:13:58:5a:38:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154441
Signature Algorithm: sha256WithRSAEncryption
a5:4d:6a:0f:0c:d3:f8:85:77:fc:e4:c3:2e:57:11:2b:5e:31:
65:c2:0c:97:f1:6c:90:7e:ec:89:df:98:e8:09:e2:41:6e:fa:
ea:56:39:32:05:3c:19:0d:08:b1:53:c7:4c:a8:c4:88:c3:bb:
63:46:93:af:ac:71:0f:e2:0f:78:f9:2b:fb:7b:c4:ea:11:38:
b5:7c:4e:18:88:d3:c1:aa:2d:3c:e0:06:7f:70:c7:bb:dd:4f:
18:23:d6:67:9b:71:3c:a3:32:68:2e:f9:a2:c5:93:fd:cf:ac:
68:b1:10:a8:6a:85:5b:c7:15:8d:61:3d:57:34:5d:7f:64:da:
f9:77:92:3d:4a:4a:37:95:d9:23:88:20:1e:54:b3:d0:07:c7:
4f:12:55:52:35:71:1e:46:b8:bf:38:07:99:72:52:c8:86:e5:
a3:3d:4b:c2:49:0f:e3:31:f4:eb:93:ae:43:b9:ab:f7:1f:e7:
1b:8c:36:9b:53:ce:a5:27:28:bd:02:9d:e1:68:1b:41:a0:2c:
98:cc:04:44:e4:af:47:1e:57:b9:56:52:05:a1:32:76:5b:08:
50:68:82:08:2b:f0:18:f5:20:a4:ec:62:4f:ab:ac:f9:cb:47:
49:1f:52:ed:f8:b9:3c:08:9d:1c:65:ea:a1:c7:4c:8a:81:7f:
c8:60:06:79
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDApY/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMjgwNloXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjJCOTgxMTAvBgNVBAUTKDVDMDNDNkM5QzcyNkZGM0QyMDI3NDcw
QTE4QTBDODgyMjJFQzY2RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCc/yUF5E7ibOCeCB3bME64/Ma01QxJmi52xBQHt03Zbyhy6fDv2W/diHtdg0Be
zvLYbbk6tzO1Y+4SzwyA3V+S6svQWhfAzYhsu30ULDCY6gfEVQqbGKLR3v96FS2s
uXYggoeoQ1JX0pwBuRgiwMaQKISkyLB3QqX/iGa8+TtbCEOrEGOG8CeY/5FBNjDr
J0XXzenBT1nHP7OFCZN8kSElP9Vm3igKr5TrB3onhjd+yxM6UNvJ+ZjWPJgCG1+T
WEWpQhIWX/9ZrErxkNdk9exDEI8x0cRoIiV6MJJpVYgyU2GMyzm4LQ8VxIVamr9t
MiZCg6Y8SHiW6lksE1haOFB/AgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUXAPGyccm
/z0gJ0cKGKDIgiLsZvswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYyQjk4LzIzOUNBMjBFREM5MzExRjA5OTVEODREOTNGNkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MkI5OC8yMzlDQTIwRURDOTMxMUYwOTk1RDg0RDkzRjZGNTZCQy9YQVBHeWNj
bV96MGdKMGNLR0tESWdpTHNadnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAltJMA0GCSqGSIb3DQEBCwUAA4IBAQClTWoPDNP4hXf85MMuVxErXjFl
wgyX8WyQfuyJ35joCeJBbvrqVjkyBTwZDQixU8dMqMSIw7tjRpOvrHEP4g94+Sv7
e8TqETi1fE4YiNPBqi084AZ/cMe73U8YI9Znm3E8ozJoLvmixZP9z6xosRCoaoVb
xxWNYT1XNF1/ZNr5d5I9Sko3ldkjiCAeVLPQB8dPElVSNXEeRri/OAeZclLIhuWj
PUvCSQ/jMfTrk65Duav3H+cbjDabU86lJyi9Ap3haBtBoCyYzARE5K9HHle5VlIF
oTJ2WwhQaIIIK/AY9SCk7GJPq6z5y0dJH1Lt+Lk8CJ0cZeqhx0yKgX/IYAZ5
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:13 2026 by rpki-client