Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer
File: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer (raw, json)
Hash identifier: AalyRwzi2eFiDUGl3CJzwWjAT9/ytogPyYSYtl1pK5s=
Subject key identifier: 90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB18
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 14:22:30 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 203.22.67.0/24
IP: 2001:df1:fc40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174872 (0x2ab18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 8 14:22:30 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9142706, serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:01:4a:1c:9f:22:f5:37:e6:f3:c1:27:80:
46:f3:b3:7e:49:c4:34:2b:48:68:da:09:34:4d:06:
02:39:be:8e:8d:7b:b0:8d:35:00:a4:ff:29:0d:0a:
d7:c8:07:f5:96:f2:6f:27:a5:08:e9:46:ec:eb:72:
c2:df:55:43:b1:ba:90:c4:40:3a:ee:03:40:7b:fe:
94:f4:be:89:87:1c:f8:7c:2f:3b:77:03:85:a2:a2:
bf:3c:04:14:ff:46:f6:75:c8:71:ae:99:76:0d:b0:
b6:d4:96:48:fd:90:8a:b0:b8:de:c7:c5:b6:ad:c0:
93:7d:39:5f:9d:ec:0f:52:b5:9f:a4:44:a2:58:81:
35:6a:d7:a5:87:7d:af:ea:86:c3:82:b7:1c:2e:1b:
1d:86:00:16:7b:c2:2b:af:c1:17:f5:85:f6:ae:70:
4b:b9:24:81:f0:57:e8:d6:7f:13:ff:69:60:4a:aa:
ee:c4:59:66:9a:24:56:89:51:76:40:e7:e3:a1:1e:
08:9e:05:bf:8e:35:cc:07:64:17:ef:ce:76:02:65:
6f:1f:59:f0:24:65:f6:c6:22:76:63:46:8c:e4:2c:
9c:8f:03:72:d5:32:a8:3f:51:d4:68:2e:c9:8b:bb:
49:be:00:f5:5b:93:3b:ae:c4:6d:e5:4b:9a:61:95:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.22.67.0/24
IPv6:
2001:df1:fc40::/48
Signature Algorithm: sha256WithRSAEncryption
ca:10:73:2f:e1:fc:10:cc:ea:86:a0:21:5e:74:cf:2a:4a:4f:
74:c1:24:81:94:c4:c3:42:53:27:c0:07:fb:96:69:3b:0d:48:
c6:bc:ae:ff:f6:93:75:0f:29:1e:7b:93:d2:19:fb:a6:cc:7b:
32:80:90:a7:59:74:36:90:9e:aa:f8:42:38:cc:49:f2:50:4e:
dc:45:36:0d:c5:6f:fe:32:61:c0:ee:2a:90:ab:c0:3f:a8:27:
57:e9:15:74:0f:55:61:92:4b:4f:a0:56:c9:4d:54:bc:a2:4a:
0a:2a:9e:54:2b:5c:b5:e7:2b:12:ae:6d:97:6b:a3:98:bf:ba:
9a:a9:12:ae:5a:1c:51:a3:a9:6c:fa:d5:b4:d9:47:3d:15:7c:
ec:ec:59:3c:6d:65:72:ff:27:23:5a:be:16:36:16:34:21:e4:
ae:18:37:a9:52:c0:3a:08:1e:2e:48:a9:16:26:c7:2f:a5:55:
84:c4:f5:dd:c5:1d:80:25:ea:10:af:26:30:03:01:b4:03:3b:
8d:30:27:69:62:94:31:e2:88:e4:02:52:78:94:cc:0e:d5:b7:
d1:6e:5b:fa:35:dc:76:c3:96:cd:e9:b2:b8:db:48:8c:c5:e3:
3a:e1:24:5e:b8:50:b6:3e:f8:6d:77:73:5b:ec:73:1e:b1:e9:
d1:27:43:72
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAqsYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQwODE0MjIzMFoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDI3MDYxMTAvBgNVBAUTKDkwMDQzQzQwRkEyODdGNUFBQUE0MjVG
NDY1NDQ4NUEzMTExQzNENTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCV6wFKHJ8i9Tfm88EngEbzs35JxDQrSGjaCTRNBgI5vo6Ne7CNNQCk/ykNCtfI
B/WW8m8npQjpRuzrcsLfVUOxupDEQDruA0B7/pT0vomHHPh8Lzt3A4Wior88BBT/
RvZ1yHGumXYNsLbUlkj9kIqwuN7HxbatwJN9OV+d7A9StZ+kRKJYgTVq16WHfa/q
hsOCtxwuGx2GABZ7wiuvwRf1hfaucEu5JIHwV+jWfxP/aWBKqu7EWWaaJFaJUXZA
5+OhHgieBb+ONcwHZBfvznYCZW8fWfAkZfbGInZjRozkLJyPA3LVMqg/UdRoLsmL
u0m+APVbkzuuxG3lS5phlf7XAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUkAQ8QPoo
f1qqpCX0ZUSFoxEcPVMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQyNzA2LzVDMUY3NTg4MzM1NjExRjE5REUzMzE2REM4ODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0MjcwNi81QzFGNzU4ODMzNTYxMUYxOURFMzMxNkRDODgzMzc3My9rQVE4UVBv
b2YxcXFwQ1gwWlVTRm94RWNQVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBADLFkMwDwQCAAIwCQMHACABDfH8QDANBgkqhkiG9w0BAQsFAAOC
AQEAyhBzL+H8EMzqhqAhXnTPKkpPdMEkgZTEw0JTJ8AH+5ZpOw1Ixryu//aTdQ8p
HnuT0hn7psx7MoCQp1l0NpCeqvhCOMxJ8lBO3EU2DcVv/jJhwO4qkKvAP6gnV+kV
dA9VYZJLT6BWyU1UvKJKCiqeVCtctecrEq5tl2ujmL+6mqkSrlocUaOpbPrVtNlH
PRV87OxZPG1lcv8nI1q+FjYWNCHkrhg3qVLAOggeLkipFibHL6VVhMT13cUdgCXq
EK8mMAMBtAM7jTAnaWKUMeKI5AJSeJTMDtW30W5b+jXcdsOWzemyuNtIjMXjOuEk
XrhQtj74bXdzW+xzHrHp0SdDcg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:02:25 2026 by rpki-client