Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
File: a-Q-axOWQ8tMGebfcyO1A8STEds.cer (raw, json)
Hash identifier: wEBAfYAq/re4KidOwvjyifvqbM3DgwPPtKxs+hs7ifM=
Subject key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0291F7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:07:19 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 58779
AS: 59237
AS: 59337
AS: 132790
AS: 133027
IP: 43.243.224.0/22
IP: 43.252.168.0/22
IP: 103.241.16.0/22
IP: 103.244.52.0/22
IP: 2405:ef00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168439 (0x291f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:07:19 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:ab:3b:1b:a1:38:36:1f:22:4f:8f:53:fb:
ca:cb:3b:72:9f:4f:27:2f:c4:09:46:37:27:5b:0e:
21:3e:82:87:82:2f:ed:27:ef:c7:44:5c:79:91:53:
03:3c:9a:36:2a:52:c5:84:d9:52:53:5d:4b:d7:6b:
1d:f7:8e:f2:64:82:04:d3:de:4e:7a:df:c0:62:55:
a1:78:81:be:44:ab:56:74:20:0c:49:28:f2:de:50:
6a:03:3f:9c:75:4d:2c:dd:80:01:c4:51:6f:fa:8b:
18:25:ad:4b:ad:cc:bf:5f:20:63:70:5a:ef:26:0c:
6e:fb:e2:3d:af:67:c1:ad:de:77:18:8a:eb:b8:17:
77:4e:59:a3:19:7b:17:f5:19:f0:b9:7e:bc:9d:28:
8f:1e:c8:51:22:d9:33:75:cf:8d:0c:a3:f7:5b:02:
81:94:73:ed:d5:c9:ce:70:8f:3f:85:9b:1d:d8:17:
2e:0c:a6:0c:a7:08:ca:4a:cc:f3:68:a9:e2:3f:de:
72:26:55:0e:25:fd:8b:67:ba:b3:fc:40:3e:8c:10:
86:fd:b5:de:48:e7:4a:95:36:4b:b9:e4:79:71:0d:
61:db:41:6d:de:66:5f:2a:13:0c:4e:2d:1f:4c:95:
97:5f:a0:44:ef:f1:86:e0:58:14:92:bc:f6:ab:85:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58779
59237
59337
132790
133027
sbgp-ipAddrBlock: critical
IPv4:
43.243.224.0/22
43.252.168.0/22
103.241.16.0/22
103.244.52.0/22
IPv6:
2405:ef00::/32
Signature Algorithm: sha256WithRSAEncryption
19:0c:d3:f1:00:ec:89:e5:5a:76:db:e3:4e:67:34:ea:4a:38:
97:fa:c4:eb:ec:63:d7:bb:4a:6d:df:ba:5f:1f:14:e6:62:c0:
b4:95:6b:a5:0c:8d:be:e6:82:db:c1:b3:3c:ca:ec:bc:42:5a:
a6:78:98:fb:3c:63:da:68:73:fd:1b:98:cf:c3:57:42:86:58:
b0:6b:78:34:a2:ff:7e:12:92:13:5a:e6:70:ce:f8:f8:7f:40:
1d:81:e9:eb:bc:29:3e:d5:a6:b8:b1:10:e8:09:ad:18:98:25:
bd:e6:5d:10:66:d8:c4:2a:4b:93:64:c0:b0:25:43:4a:40:5b:
23:20:9d:5a:fa:12:2c:6e:90:68:88:71:29:20:0a:25:a3:a4:
61:91:f9:e1:9b:ec:51:c8:35:93:bd:c1:5f:54:91:95:93:df:
01:f5:f5:4b:c5:42:d3:e7:c1:d6:92:e0:49:8e:7d:eb:a7:f0:
16:e0:aa:76:f0:64:f2:f7:ce:c9:e1:0a:79:18:09:ca:18:31:
75:47:5c:c2:1f:db:f1:95:1b:76:e8:98:e0:59:98:f8:ff:3e:
2d:3a:a0:f6:ae:99:d6:b8:95:91:4b:08:62:d9:21:67:30:ce:
77:65:d1:df:0a:45:c0:34:55:18:7e:4d:0f:b6:7d:d5:1e:f4:
0d:07:ba:11
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIDApH3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMDcxOVoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZE
RjczMjNCNTAzQzQ5MzExREIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC18qs7G6E4Nh8iT49T+8rLO3KfTycvxAlGNydbDiE+goeCL+0n78dEXHmRUwM8
mjYqUsWE2VJTXUvXax33jvJkggTT3k5638BiVaF4gb5Eq1Z0IAxJKPLeUGoDP5x1
TSzdgAHEUW/6ixglrUutzL9fIGNwWu8mDG774j2vZ8Gt3ncYiuu4F3dOWaMZexf1
GfC5frydKI8eyFEi2TN1z40Mo/dbAoGUc+3Vyc5wjz+Fmx3YFy4MpgynCMpKzPNo
qeI/3nImVQ4l/YtnurP8QD6MEIb9td5I50qVNku55HlxDWHbQW3eZl8qEwxOLR9M
lZdfoETv8YbgWBSSvParhYzpAgMBAAGjggNEMIIDQDAdBgNVHQ4EFgQUa+Q+axOW
Q8tMGebfcyO1A8STEdswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4RDI3L0MwQzU4MDcwNDJFOTExRTI5NzUwQTMyRTI5NzlCQjIwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhP
V1E4dE1HZWJmY3lPMUE4U1RFZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQgBAf8EHzAd
oBswGQIDAOWbAgMA52UCAwDnyQIDAga2AgMCB6MwQAYIKwYBBQUHAQcBAf8EMTAv
MB4EAgABMBgDBAIr8+ADBAIr/KgDBAJn8RADBAJn9DQwDQQCAAIwBwMFACQF7wAw
DQYJKoZIhvcNAQELBQADggEBABkM0/EA7InlWnbb405nNOpKOJf6xOvsY9e7Sm3f
ul8fFOZiwLSVa6UMjb7mgtvBszzK7LxCWqZ4mPs8Y9poc/0bmM/DV0KGWLBreDSi
/34SkhNa5nDO+Ph/QB2B6eu8KT7VprixEOgJrRiYJb3mXRBm2MQqS5NkwLAlQ0pA
WyMgnVr6EixukGiIcSkgCiWjpGGR+eGb7FHINZO9wV9UkZWT3wH19UvFQtPnwdaS
4EmOfeun8BbgqnbwZPL3zsnhCnkYCcoYMXVHXMIf2/GVG3bomOBZmPj/Pi06oPau
mda4lZFLCGLZIWcwzndl0d8KRcA0VRh+TQ+2fdUe9A0HuhE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:40 2026 by rpki-client