Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
File: Ym10UmNzXXYYZJvVMYyB-6it3MA.cer (raw, json)
Hash identifier: J5YB6L/TCN6+y1lSFUpXsWNqfwG56eNKT2dCjpymF7I=
Subject key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029B99
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:53:33 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 138668
IP: 2401:d4a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170905 (0x29b99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:53:33 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:97:f5:76:e8:c0:38:c4:ac:a6:ee:8c:e4:
f4:cb:77:a4:d7:8b:18:c8:b7:a3:53:e9:7e:d0:10:
bb:0c:8f:a7:b2:1f:4b:44:01:7f:8f:7e:c6:dd:f4:
49:b8:b2:e7:4b:d7:ce:a5:e4:f7:51:e4:f1:75:49:
fb:83:37:bf:88:bd:e1:7d:93:85:f7:ba:63:d9:6a:
09:c6:ac:38:a2:6d:e4:68:b1:5c:ca:1e:42:79:52:
86:da:30:b5:a2:75:f8:51:17:95:84:79:9d:3e:27:
58:eb:ad:81:ab:97:83:e6:e3:f8:c4:43:93:33:2a:
5c:2f:db:19:96:dc:e5:42:21:3c:0c:21:4f:70:61:
ac:ec:d3:cf:8a:b9:63:6f:aa:f7:3b:9d:4b:42:71:
87:fb:a4:06:61:c0:78:7e:8e:07:86:9c:25:35:48:
38:95:fd:90:5f:cb:e9:77:c9:bf:d0:8b:4e:28:69:
ae:8a:6e:c8:2c:49:51:6a:dd:d1:72:7e:1a:0e:88:
ac:71:93:ea:02:f0:75:53:9f:d4:80:57:05:f2:55:
18:66:f3:24:5d:de:43:4a:57:63:8b:85:66:d3:d5:
eb:70:e6:91:1d:f3:ac:29:ac:bd:e2:83:97:ca:a5:
2a:3e:62:3d:d8:c8:84:a3:82:9d:e4:22:f4:95:a5:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138668
sbgp-ipAddrBlock: critical
IPv6:
2401:d4a0::/32
Signature Algorithm: sha256WithRSAEncryption
22:67:06:33:24:32:2f:45:75:f5:6e:3b:8c:3e:7d:cf:56:bb:
30:39:3c:c6:10:66:a3:6d:52:ea:d3:e2:2e:93:49:90:b2:86:
0e:51:51:62:bd:89:67:a4:3d:4e:67:5b:63:25:3f:28:1c:9a:
64:84:40:1f:c3:14:65:ca:51:60:2c:49:49:be:b0:51:ad:5b:
27:91:af:90:72:33:46:a9:c8:fe:4c:13:dd:d0:d2:37:b3:e1:
c5:9c:56:c1:10:94:c3:11:71:d5:c6:43:29:74:5b:6b:34:e8:
f3:51:86:68:c9:1e:b8:a9:40:8d:3d:ef:df:41:3f:25:62:19:
9f:a1:5a:31:97:92:28:b7:57:90:e0:0a:c8:bb:df:22:f2:c2:
88:ff:f4:5d:96:91:3a:7d:b0:82:f5:7f:13:43:67:df:3d:3f:
86:ae:ed:5f:93:4c:ac:93:85:96:fc:67:2c:de:27:fe:37:d3:
d7:dd:e4:dc:9f:e2:a9:ec:23:9e:74:cc:dd:e7:4d:76:2f:1f:
65:eb:0d:15:c8:76:75:79:d3:76:66:bb:ee:f0:1c:3b:3b:3a:
a8:92:d4:35:4f:4e:48:be:42:50:cb:c6:ce:39:35:f0:8f:34:
11:1b:f5:94:43:b4:e9:5b:82:9c:f3:27:0a:e4:ee:61:4c:3a:
b6:cc:b0:f7
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDApuZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzNTMzM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkI3RkMxMTAvBgNVBAUTKDYyNkQ3NDUyNjM3MzVENzYxODY0OUJE
NTMxOEM4MUZCQThBRERDQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9vZf1dujAOMSspu6M5PTLd6TXixjIt6NT6X7QELsMj6eyH0tEAX+Pfsbd9Em4
sudL186l5PdR5PF1SfuDN7+IveF9k4X3umPZagnGrDiibeRosVzKHkJ5UobaMLWi
dfhRF5WEeZ0+J1jrrYGrl4Pm4/jEQ5MzKlwv2xmW3OVCITwMIU9wYazs08+KuWNv
qvc7nUtCcYf7pAZhwHh+jgeGnCU1SDiV/ZBfy+l3yb/Qi04oaa6KbsgsSVFq3dFy
fhoOiKxxk+oC8HVTn9SAVwXyVRhm8yRd3kNKV2OLhWbT1etw5pEd86wprL3ig5fK
pSo+Yj3YyISjgp3kIvSVpQxBAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUYm10UmNz
XXYYZJvVMYyB+6it3MAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZCN0ZDL0NGOEUzMDE2MDNBNzExRjBBN0ZGOUM4N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2QjdGQy9DRjhFMzAxNjAzQTcxMUYwQTdGRjlDODdDNEY5QUUwMi9ZbTEwVW1O
elhYWVlaSnZWTVl5Qi02aXQzTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh2sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHUoDANBgkq
hkiG9w0BAQsFAAOCAQEAImcGMyQyL0V19W47jD59z1a7MDk8xhBmo21S6tPiLpNJ
kLKGDlFRYr2JZ6Q9TmdbYyU/KByaZIRAH8MUZcpRYCxJSb6wUa1bJ5GvkHIzRqnI
/kwT3dDSN7PhxZxWwRCUwxFx1cZDKXRbazTo81GGaMkeuKlAjT3v30E/JWIZn6Fa
MZeSKLdXkOAKyLvfIvLCiP/0XZaROn2wgvV/E0Nn3z0/hq7tX5NMrJOFlvxnLN4n
/jfT193k3J/iqewjnnTM3edNdi8fZesNFch2dXnTdma77vAcOzs6qJLUNU9OSL5C
UMvGzjk18I80ERv1lEO06VuCnPMnCuTuYUw6tsyw9w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:06 2026 by rpki-client