Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer
File: kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer (raw, json)
Hash identifier: Y2MUhVqq4/uaPFkxJKWy/xI4vw8awqDNXXxN8OXpqQQ=
Subject key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029322
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:13:40 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 150705
IP: 103.62.148.0/23
IP: 2401:dee0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168738 (0x29322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:13:40 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91BB6E3, serialNumber=919FA819B2FFF145521AF664035278E7E7914A49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:af:d8:34:60:ac:cc:ca:1d:ee:55:4d:4a:
e3:ee:23:94:39:9e:f2:d5:69:70:86:71:1d:cb:2d:
00:62:d8:84:e7:41:f0:5e:12:c6:12:80:22:59:6b:
b3:f5:c1:66:c3:59:c5:3d:2f:54:9b:1a:22:04:51:
d9:b4:a4:47:5b:07:b5:a2:c2:63:6b:55:8e:3c:61:
c7:b5:69:2f:d8:8a:28:ec:21:34:83:42:05:06:a9:
de:47:d6:76:a5:af:30:43:81:16:c5:62:ff:10:f9:
98:b1:b8:00:be:67:e5:62:84:35:b7:c5:2c:ef:bc:
b7:32:f1:07:9c:c5:0b:54:fb:f2:ad:d0:c9:f0:cd:
48:8c:79:d8:5f:ad:9e:ad:30:0e:d7:87:8a:86:ae:
a7:0b:66:80:17:59:b5:6b:e7:36:26:85:6c:3a:93:
67:4f:f4:b0:47:03:e9:38:cc:8c:40:42:e1:06:35:
74:2b:ad:ad:4f:9a:68:c6:b7:df:05:3d:45:1c:75:
ee:95:46:7f:78:9f:e9:ae:95:2f:0f:8c:09:a7:a3:
38:da:b1:17:4f:ff:aa:a7:c6:59:10:18:86:67:4f:
b9:09:02:ed:18:25:69:7b:61:6a:b7:2f:0f:95:c0:
c6:36:e5:8c:94:84:e3:5b:a1:25:d1:d2:a7:65:25:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150705
sbgp-ipAddrBlock: critical
IPv4:
103.62.148.0/23
IPv6:
2401:dee0::/32
Signature Algorithm: sha256WithRSAEncryption
01:4b:92:fc:45:dc:29:4f:48:44:48:80:7a:8d:d3:4e:ef:e1:
10:9c:f7:08:ef:b5:5a:12:1f:61:ea:57:a7:d4:3f:5e:de:f4:
f9:71:b5:66:6f:5d:a9:fd:46:73:01:2a:39:b3:65:33:a8:ce:
78:b2:e6:36:6b:eb:59:23:78:7f:14:b4:43:11:24:58:ee:d4:
6e:c4:f9:b8:3a:f7:78:40:44:41:aa:d5:25:67:87:6e:9f:12:
98:90:48:e1:3e:52:b4:15:e8:c4:fd:16:d4:98:6d:7c:84:1c:
35:e6:e5:8b:95:c9:b6:04:a0:f8:c2:b9:24:26:3b:6d:c3:d8:
b8:6a:13:f3:54:ae:4e:61:d0:76:6c:35:a8:4e:b9:3a:5a:14:
ce:ef:eb:77:ce:4e:f6:75:d1:a0:5b:74:24:f7:88:92:55:8c:
5f:6b:c0:b5:44:dc:88:fb:41:c4:27:58:26:0b:a4:bd:91:9f:
83:17:25:81:da:4a:84:78:28:f1:5c:87:94:b7:c1:6f:2a:20:
70:94:c9:ba:df:81:76:46:d4:df:35:f3:03:91:8f:73:24:22:
f1:cc:45:0d:11:4e:4b:a8:4f:2a:6a:28:d4:29:b2:c4:54:d3:
d0:36:e7:f0:d3:4e:89:48:2c:a0:10:d9:93:37:2a:21:8c:f7:
c4:bd:54:0d
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDApMiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMTM0MFoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkI2RTMxMTAvBgNVBAUTKDkxOUZBODE5QjJGRkYxNDU1MjFBRjY2
NDAzNTI3OEU3RTc5MTRBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9xq/YNGCszMod7lVNSuPuI5Q5nvLVaXCGcR3LLQBi2ITnQfBeEsYSgCJZa7P1
wWbDWcU9L1SbGiIEUdm0pEdbB7WiwmNrVY48Yce1aS/YiijsITSDQgUGqd5H1nal
rzBDgRbFYv8Q+ZixuAC+Z+VihDW3xSzvvLcy8QecxQtU+/Kt0MnwzUiMedhfrZ6t
MA7Xh4qGrqcLZoAXWbVr5zYmhWw6k2dP9LBHA+k4zIxAQuEGNXQrra1PmmjGt98F
PUUcde6VRn94n+mulS8PjAmnozjasRdP/6qnxlkQGIZnT7kJAu0YJWl7YWq3Lw+V
wMY25YyUhONboSXR0qdlJZ7/AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUkZ+oGbL/
8UVSGvZkA1J45+eRSkkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJCNkUzL0EyMkM4MTRDQzI3NTExRURCM0I0RDcyOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQjZFMy9BMjJDODE0Q0MyNzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JM
XzhVVlNHdlprQTFKNDUtZVJTa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkyxMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZz6UMA0EAgAC
MAcDBQAkAd7gMA0GCSqGSIb3DQEBCwUAA4IBAQABS5L8RdwpT0hESIB6jdNO7+EQ
nPcI77VaEh9h6len1D9e3vT5cbVmb12p/UZzASo5s2UzqM54suY2a+tZI3h/FLRD
ESRY7tRuxPm4Ovd4QERBqtUlZ4dunxKYkEjhPlK0FejE/RbUmG18hBw15uWLlcm2
BKD4wrkkJjttw9i4ahPzVK5OYdB2bDWoTrk6WhTO7+t3zk72ddGgW3Qk94iSVYxf
a8C1RNyI+0HEJ1gmC6S9kZ+DFyWB2kqEeCjxXIeUt8FvKiBwlMm634F2RtTfNfMD
kY9zJCLxzEUNEU5LqE8qaijUKbLEVNPQNufw006JSCygENmTNyohjPfEvVQN
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:19 2026 by rpki-client