Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer (raw, json)
Hash identifier: VEprpPI4oDGVkg2Octab3ayAoFp82TotGHMpRh1/vd4=
Subject key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0292D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:12:09 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 202.44.128.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168657 (0x292d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:12:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:45:61:7e:86:52:a4:6d:ae:bf:98:7e:89:
a0:82:5e:a1:b0:14:33:11:d1:22:6e:7d:34:d3:a9:
0d:ca:6f:a5:79:97:48:2f:9e:1d:54:90:80:37:7f:
da:90:a3:49:97:bd:ec:3e:3b:e8:62:eb:34:76:38:
b4:8f:48:b5:c4:5e:4d:97:7c:72:0f:c6:33:d2:fe:
1e:f2:f6:83:bf:65:79:67:d9:53:8c:d5:97:6f:35:
74:bc:25:12:94:ff:4e:c5:78:ec:d2:d6:47:3a:dd:
03:3a:a2:e9:27:64:27:8a:79:77:56:2d:e4:4c:29:
05:be:c8:63:d2:a6:e6:77:95:f6:08:68:fd:e3:36:
ea:98:d1:4c:75:a3:72:3b:d3:8e:5d:97:b1:cb:4b:
dd:55:bd:4a:ce:f5:72:a3:06:cf:2f:b4:ff:35:c1:
9e:c6:84:e4:6a:ed:9c:d4:c8:eb:71:8a:9f:4b:8f:
e2:f3:b7:11:b2:25:0c:aa:f3:8c:8d:cc:9f:0f:84:
a9:7e:71:a7:97:dd:73:46:0a:d4:19:f9:38:10:62:
e6:7b:5f:61:b5:1a:ef:51:06:1e:14:52:7a:4b:f3:
d2:e6:40:c2:72:2d:93:cd:8a:62:0e:82:4b:d6:ea:
67:f2:4a:a4:41:c8:f6:82:cf:7f:fa:44:42:43:30:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.44.128.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:9a:13:b6:8a:d4:79:01:21:6e:69:56:2c:9b:7a:57:e5:03:
cf:2a:a8:05:73:d7:96:3f:dd:62:3b:15:3d:91:84:39:90:b6:
3a:6c:92:ed:3a:ea:3a:c5:55:3c:88:b1:86:6d:90:f2:a4:8d:
bf:89:7f:c5:51:1a:a3:81:a9:ca:7a:79:8d:5c:a2:46:65:dd:
80:bb:78:0d:a0:ce:9d:d9:84:5c:2a:50:af:c0:7f:53:2d:d0:
88:b7:f4:01:c8:17:8c:cc:0e:4b:3b:f2:9f:d3:9b:39:9b:a5:
a3:43:92:3f:5c:77:72:85:d9:7b:4d:0e:d6:dc:da:6a:99:81:
1c:9c:c3:f5:c5:3b:dd:39:80:9b:8f:8b:fe:83:ad:17:cc:0a:
b7:e7:e4:e5:b8:e2:1a:96:3c:e5:ea:d0:60:35:a6:95:ea:da:
d9:0e:68:71:e5:53:37:cd:84:4c:ff:00:06:16:48:c6:79:c6:
b4:4c:b5:56:ee:bc:17:d0:db:bc:07:80:30:de:d1:18:46:c5:
97:0d:ad:8a:74:a7:a3:97:67:86:12:3a:ca:a3:2d:08:b6:2f:
d7:f0:40:e1:3f:87:23:a3:74:75:2c:b8:01:a5:26:6e:89:18:
1d:a6:d7:58:65:6a:b1:ff:05:4e:31:ad:65:02:cd:eb:03:e2:
cb:a2:8a:2b
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDApLRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMTIwOVoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzNDQ0ExMTAvBgNVBAUTKDZGRDVCNzQzMUU3MTUwRUQ2NTBGN0Yy
N0EzRENGOEM1Q0VBQzc3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmR0VhfoZSpG2uv5h+iaCCXqGwFDMR0SJufTTTqQ3Kb6V5l0gvnh1UkIA3f9qQ
o0mXvew+O+hi6zR2OLSPSLXEXk2XfHIPxjPS/h7y9oO/ZXln2VOM1ZdvNXS8JRKU
/07FeOzS1kc63QM6ouknZCeKeXdWLeRMKQW+yGPSpuZ3lfYIaP3jNuqY0Ux1o3I7
045dl7HLS91VvUrO9XKjBs8vtP81wZ7GhORq7ZzUyOtxip9Lj+LztxGyJQyq84yN
zJ8PhKl+caeX3XNGCtQZ+TgQYuZ7X2G1Gu9RBh4UUnpL89LmQMJyLZPNimIOgkvW
6mfySqRByPaCz3/6REJDMNMhAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUb9W3Qx5x
UO1lD38no9z4xc6sd2QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTczQ0NBLzFDQTlCODI0NjU0RDExRUZCNDRCN0I1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3M0NDQS8xQ0E5QjgyNDY1NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1
eFVPMWxEMzhubzl6NHhjNnNkMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADKLIAwDQYJKoZIhvcNAQELBQADggEBAMyaE7aK1HkBIW5pViyb
elflA88qqAVz15Y/3WI7FT2RhDmQtjpsku066jrFVTyIsYZtkPKkjb+Jf8VRGqOB
qcp6eY1cokZl3YC7eA2gzp3ZhFwqUK/Af1Mt0Ii39AHIF4zMDks78p/TmzmbpaND
kj9cd3KF2XtNDtbc2mqZgRycw/XFO905gJuPi/6DrRfMCrfn5OW44hqWPOXq0GA1
ppXq2tkOaHHlUzfNhEz/AAYWSMZ5xrRMtVbuvBfQ27wHgDDe0RhGxZcNrYp0p6OX
Z4YSOsqjLQi2L9fwQOE/hyOjdHUsuAGlJm6JGB2m11hlarH/BU4xrWUCzesD4sui
iis=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:27 2026 by rpki-client