Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.cer (raw, json)
Hash identifier: Vy70Q2bLM/E5hYF34JlBoHPmVg4X4tmH/3lTQubFG/o=
Subject key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029714
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:32:58 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 133526
IP: 27.0.192.0/22
IP: 43.243.220.0/22
IP: 45.113.160.0/22
IP: 45.116.212.0/22
IP: 45.120.184.0/22
IP: 103.13.220.0/22
IP: 103.57.24.0/22
IP: 103.61.0.0/22
IP: 103.79.52.0/22
IP: 103.80.124.0/22
IP: 103.123.160.0/22
IP: 103.208.32.0/22
IP: 103.229.180.0/22
IP: 103.233.184.0/22
IP: 116.193.152.0/22
IP: 202.53.136.0/22
IP: 2400:5340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169748 (0x29714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:32:58 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:55:0d:dd:89:47:c7:7b:2b:c5:62:97:66:
e1:fc:92:83:bd:b5:29:96:b0:c0:cd:1a:46:65:d9:
c7:90:e5:ae:57:a5:34:56:49:19:26:50:a2:b7:27:
33:df:eb:4f:89:e8:61:0a:ea:bc:98:07:c0:c9:ef:
2d:e8:41:3f:d9:d8:8c:64:80:73:9d:4c:b6:6e:3c:
35:18:fc:78:f2:aa:18:49:7c:05:60:05:58:b3:25:
65:c7:8e:6b:76:dd:e1:67:d4:07:56:43:d9:be:e3:
35:34:cb:8e:18:89:67:7b:d1:fa:e7:5e:1f:93:b9:
70:36:a1:d3:43:98:fb:c3:74:6c:bd:81:6d:60:29:
5b:24:32:18:60:60:53:43:07:d9:f6:a7:2d:6a:a7:
c7:99:f2:68:73:91:9f:e8:7b:1e:b8:5c:91:46:e7:
16:7b:92:b9:a7:a6:c3:43:a2:fb:8b:ee:03:38:d5:
b5:d5:61:2c:82:85:e5:9d:7c:2c:9d:6e:3e:5c:3e:
54:3c:73:71:a3:9a:06:fa:16:e5:65:ce:e3:82:15:
9e:93:0f:e8:0e:1e:4a:57:93:28:9d:33:12:e3:3d:
5f:ff:97:20:90:20:fe:bc:a7:9b:ee:04:44:55:cb:
7b:ce:db:5b:67:1b:34:20:6a:e0:8d:ef:74:d2:43:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133526
sbgp-ipAddrBlock: critical
IPv4:
27.0.192.0/22
43.243.220.0/22
45.113.160.0/22
45.116.212.0/22
45.120.184.0/22
103.13.220.0/22
103.57.24.0/22
103.61.0.0/22
103.79.52.0/22
103.80.124.0/22
103.123.160.0/22
103.208.32.0/22
103.229.180.0/22
103.233.184.0/22
116.193.152.0/22
202.53.136.0/22
IPv6:
2400:5340::/32
Signature Algorithm: sha256WithRSAEncryption
0c:af:c7:01:55:ba:e4:32:ca:d6:74:f9:75:3e:ab:9b:f7:51:
53:83:f9:66:10:7e:1a:d0:23:5e:88:7a:cf:c1:4c:d1:e1:a9:
53:10:0f:c0:42:05:f1:34:1d:e0:d8:db:97:4a:e3:74:e7:40:
99:2f:d3:f6:2c:79:20:f8:0e:a5:f5:2c:2d:da:4a:95:64:ac:
cf:ce:eb:b6:a6:d9:9a:33:41:27:c4:3f:85:8f:e8:ff:10:63:
2e:f2:b2:0a:90:4e:21:9e:28:60:9a:12:43:b2:fe:07:f4:2a:
a4:cd:a0:61:26:20:b6:a2:b4:f2:00:ae:fa:6c:96:e1:ff:ce:
f2:1f:55:e1:93:df:d2:49:94:eb:70:d9:eb:dc:1d:92:4a:9f:
b7:0b:a8:e9:cb:0c:6d:4f:f8:8e:1e:5f:c5:3c:79:0b:f8:7c:
7a:8a:9a:07:e7:b9:da:fb:12:4c:e7:0e:02:e5:19:80:f0:10:
3e:c8:57:81:4b:73:a1:42:e1:9b:c1:28:15:a2:33:d9:0d:44:
ad:3e:09:bb:19:db:be:92:a2:60:2e:52:3a:8a:20:cf:48:1a:
82:37:ca:41:92:c6:4c:a5:10:3a:82:71:e2:64:67:89:f0:ac:
11:2b:ce:6c:82:e5:3f:63:7a:40:4e:01:52:d8:cc:c4:a6:f6:
89:2e:81:50
-----BEGIN CERTIFICATE-----
MIIGhDCCBWygAwIBAgIDApcUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMzI1OFoXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTE4NTMxMTAvBgNVBAUTKEZEOTE0N0FFRjZBMzMwRDE4REQ0QzlD
RkQ4NjQyRjBFREFBN0I5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvNFUN3YlHx3srxWKXZuH8koO9tSmWsMDNGkZl2ceQ5a5XpTRWSRkmUKK3JzPf
60+J6GEK6ryYB8DJ7y3oQT/Z2IxkgHOdTLZuPDUY/HjyqhhJfAVgBVizJWXHjmt2
3eFn1AdWQ9m+4zU0y44YiWd70frnXh+TuXA2odNDmPvDdGy9gW1gKVskMhhgYFND
B9n2py1qp8eZ8mhzkZ/oex64XJFG5xZ7krmnpsNDovuL7gM41bXVYSyCheWdfCyd
bj5cPlQ8c3Gjmgb6FuVlzuOCFZ6TD+gOHkpXkyidMxLjPV//lyCQIP68p5vuBERV
y3vO21tnGzQgauCN73TSQ0EhAgMBAAGjggN5MIIDdTAdBgNVHQ4EFgQU/ZFHrvaj
MNGN1MnP2GQvDtqnuQcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUxODUzLzFBQjE1QjhDQkRCMDExRjA4N0VERTkyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMTg1My8xQUIxNUI4Q0JEQjAxMUYwODdFREU5MjlDNEY5QUUwMi9fWkZIcnZh
ak1OR04xTW5QMkdRdkR0cW51UWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgmWMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAhsAwAMEAivz
3AMEAi1xoAMEAi101AMEAi14uAMEAmcN3AMEAmc5GAMEAmc9AAMEAmdPNAMEAmdQ
fAMEAmd7oAMEAmfQIAMEAmfltAMEAmfpuAMEAnTBmAMEAso1iDANBAIAAjAHAwUA
JABTQDANBgkqhkiG9w0BAQsFAAOCAQEADK/HAVW65DLK1nT5dT6rm/dRU4P5ZhB+
GtAjXoh6z8FM0eGpUxAPwEIF8TQd4Njbl0rjdOdAmS/T9ix5IPgOpfUsLdpKlWSs
z87rtqbZmjNBJ8Q/hY/o/xBjLvKyCpBOIZ4oYJoSQ7L+B/QqpM2gYSYgtqK08gCu
+myW4f/O8h9V4ZPf0kmU63DZ69wdkkqftwuo6csMbU/4jh5fxTx5C/h8eoqaB+e5
2vsSTOcOAuUZgPAQPshXgUtzoULhm8EoFaIz2Q1ErT4JuxnbvpKiYC5SOoogz0ga
gjfKQZLGTKUQOoJx4mRnifCsESvObILlP2N6QE4BUtjMxKb2iS6BUA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:07 2026 by rpki-client