Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
File: ddHHozMD2o3GQirjUXA_KlKN874.cer (raw, json)
Hash identifier: gVecMSwHcCiuNFtvWR7g1ds4arICTAlBBAArlzErvnQ=
Subject key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029677
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:29:07 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 137249
IP: 103.106.20.0/22
IP: 2402:37c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169591 (0x29677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:29:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1e:b7:b9:9b:4a:25:04:e2:ee:60:78:27:58:
fa:4c:6e:bd:53:59:2b:3e:7a:e2:69:93:a4:ba:19:
f7:56:f0:a0:75:c6:fc:aa:e1:5c:19:0d:58:af:5e:
09:09:89:34:86:3e:3c:eb:88:38:1a:f7:a4:18:d6:
dc:58:be:78:e9:96:ae:d2:c3:67:d4:29:56:2e:b5:
4f:c1:ed:bc:95:f8:da:38:66:c7:05:77:41:10:a6:
2b:2b:25:e6:da:8c:32:b8:44:f3:e2:10:c6:05:cc:
7f:8b:49:98:20:62:c3:30:4a:80:06:e1:cd:ef:bf:
99:bf:7c:44:7e:60:65:a0:ce:1b:05:cc:2f:c8:17:
4e:63:cd:f8:8a:4a:42:d2:d0:37:18:ef:63:4b:94:
9b:a9:68:ec:95:42:fd:b8:a4:3c:d4:8c:21:b7:db:
bf:10:86:cd:b6:d3:41:f1:43:67:1c:59:43:ba:6e:
a8:80:65:ed:55:ef:6f:4e:be:c4:f7:56:ed:38:ae:
6e:71:c1:f7:38:26:6f:e0:f5:14:df:c7:96:27:0d:
75:ab:0c:c4:e3:71:2d:dd:3d:63:7d:14:d5:02:7f:
27:ba:aa:78:a3:77:be:cb:81:55:22:e1:9e:cb:4b:
fd:ef:d3:94:90:2e:8b:74:05:ac:26:51:2f:cb:62:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137249
sbgp-ipAddrBlock: critical
IPv4:
103.106.20.0/22
IPv6:
2402:37c0::/32
Signature Algorithm: sha256WithRSAEncryption
58:4a:21:09:98:47:ae:8c:24:62:04:cc:87:cc:db:a8:61:80:
e5:2c:96:86:b0:e6:6a:1f:48:a9:9e:85:35:b4:3d:fc:25:26:
00:68:75:df:8b:2e:af:15:5f:d1:29:09:11:b7:13:09:ee:dc:
c4:c9:c4:55:ca:eb:b2:22:28:5f:f5:41:07:01:91:01:0e:c2:
44:d6:08:96:53:b8:55:2e:12:d0:d5:1f:23:5c:45:65:36:ec:
5f:5a:61:61:86:4d:31:ba:1c:76:05:78:f5:2d:a2:aa:f0:90:
23:b1:08:51:3e:2a:cf:a4:db:ab:c4:1e:60:9e:38:80:b3:8c:
4a:3a:98:ba:9d:73:cb:fe:4b:a6:ec:f2:c7:6c:b5:0d:d7:16:
d8:90:0f:e0:77:32:4d:e1:56:9a:42:a9:73:d2:c7:29:10:e8:
cd:a9:f2:d0:71:08:e4:4b:c8:27:94:bf:1b:12:9f:dc:47:bb:
3e:4e:50:43:15:06:21:79:d4:93:e0:87:e8:44:a0:85:f6:28:
5d:9c:50:88:46:8b:c2:25:c3:1f:51:73:17:3a:39:3b:31:4a:
2b:6e:bc:44:7e:c9:bd:f4:e3:b9:a7:ed:34:a8:bd:a6:f1:ab:
82:39:e9:f7:72:8b:ce:a9:38:0a:46:40:07:66:71:1f:c6:f7:
f3:01:1c:86
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDApZ3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMjkwN1oXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFF
MzUxNzAzRjJBNTI4REYzQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD2Hre5m0olBOLuYHgnWPpMbr1TWSs+euJpk6S6GfdW8KB1xvyq4VwZDVivXgkJ
iTSGPjzriDga96QY1txYvnjplq7Sw2fUKVYutU/B7byV+No4ZscFd0EQpisrJeba
jDK4RPPiEMYFzH+LSZggYsMwSoAG4c3vv5m/fER+YGWgzhsFzC/IF05jzfiKSkLS
0DcY72NLlJupaOyVQv24pDzUjCG3278Qhs2200HxQ2ccWUO6bqiAZe1V729OvsT3
Vu04rm5xwfc4Jm/g9RTfx5YnDXWrDMTjcS3dPWN9FNUCfye6qnijd77LgVUi4Z7L
S/3v05SQLot0BawmUS/LYq01AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUddHHozMD
2o3GQirjUXA/KlKN874wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM1ODMyLzZENjBGOUQ4ODc5NzExRUU5RjNFRDQ0RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNTgzMi82RDYwRjlEODg3OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pN
RDJvM0dRaXJqVVhBX0tsS044NzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhghMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2oUMA0EAgAC
MAcDBQAkAjfAMA0GCSqGSIb3DQEBCwUAA4IBAQBYSiEJmEeujCRiBMyHzNuoYYDl
LJaGsOZqH0ipnoU1tD38JSYAaHXfiy6vFV/RKQkRtxMJ7tzEycRVyuuyIihf9UEH
AZEBDsJE1giWU7hVLhLQ1R8jXEVlNuxfWmFhhk0xuhx2BXj1LaKq8JAjsQhRPirP
pNurxB5gnjiAs4xKOpi6nXPL/kum7PLHbLUN1xbYkA/gdzJN4VaaQqlz0scpEOjN
qfLQcQjkS8gnlL8bEp/cR7s+TlBDFQYhedST4IfoRKCF9ihdnFCIRovCJcMfUXMX
Ojk7MUorbrxEfsm99OO5p+00qL2m8auCOen3covOqTgKRkAHZnEfxvfzARyG
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:55 2026 by rpki-client