Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
File: nPapYQAMl2lHu76x0XPCPpCflUQ.cer (raw, json)
Hash identifier: DJ83z1M+CyU1CdgOpdFKDjOyna/CeDTjRQmVM13HBmM=
Subject key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02939A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:15:56 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 203.10.107.0/24
IP: 203.22.83.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168858 (0x2939a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:15:56 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:5c:6f:32:ef:e7:de:c7:35:c6:3b:b7:65:
e2:f9:da:55:3e:c5:ad:ac:83:c6:b8:3d:5b:6c:4a:
48:e1:33:10:14:3a:e9:79:56:9b:3d:25:f7:7d:f7:
fd:89:72:84:33:78:2e:eb:41:59:5d:8d:b4:8d:d7:
d0:c5:ef:31:16:38:45:c3:76:42:0b:a0:80:7c:54:
6a:6a:e7:93:67:f7:cc:aa:56:6b:75:de:82:a9:cd:
cf:40:c7:c1:4c:8f:18:d6:5b:21:55:20:d4:9b:65:
0a:ac:a5:b8:81:6a:3b:ea:4e:0b:ca:4f:ab:4c:41:
08:af:27:95:d4:b4:2d:77:71:e7:8a:56:de:e2:70:
e4:ab:11:5a:79:51:53:cc:79:ca:ae:ad:90:d7:79:
1f:3a:7d:93:0d:1a:fc:66:8d:3f:60:ce:d5:bb:4a:
b7:a1:3a:9c:e6:e6:a8:d0:ee:bb:33:b9:20:1b:6e:
96:6e:03:26:6d:65:7e:df:94:5b:3f:03:c7:09:68:
f1:8a:cc:f5:d4:3f:e5:ce:c5:91:d5:8a:5d:d0:f9:
76:19:9d:d0:c5:95:47:37:2d:b0:f7:56:61:f0:a0:
03:0e:dc:06:fa:b4:c3:aa:06:1b:3a:3e:c5:17:60:
e5:8f:9d:8d:75:3f:e4:c9:0e:89:23:8d:62:01:9d:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.10.107.0/24
203.22.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b5:bc:03:ee:da:21:27:e2:f0:f1:3e:9c:d5:73:c3:2e:34:
e5:a4:96:94:12:bd:d5:12:5e:24:09:79:e1:d4:28:4a:51:32:
09:a4:59:06:6c:18:bc:26:78:92:75:38:42:8d:6c:51:f0:27:
18:8a:51:cd:3e:81:c2:a3:0d:a4:14:17:a1:7c:40:fd:fd:c7:
be:45:40:50:9e:18:86:eb:12:47:18:95:79:c7:b3:57:5d:66:
21:53:f8:e5:32:38:eb:31:a0:28:ec:95:fb:4b:c8:5a:4c:e5:
ee:ff:32:67:67:97:c0:30:3b:71:a5:ad:37:16:8f:d3:35:54:
4f:d2:56:02:3f:fa:41:34:c9:f4:4c:07:0f:d1:0a:bf:f4:1c:
17:81:41:39:d0:90:88:21:7c:b0:f1:e8:91:89:3b:da:77:49:
7a:e4:ff:1b:a8:80:9e:db:70:41:c2:82:c8:b3:9d:04:55:0c:
64:2d:4d:5d:64:11:11:3f:b9:d2:f0:3b:0c:fe:58:4f:a7:c3:
7b:6c:76:cb:63:f5:e0:e2:b1:f2:f9:08:2e:bf:04:2f:4b:af:
30:68:19:63:b9:9d:fa:49:0f:8b:23:99:0e:fd:bf:c3:ef:a8:
c1:06:d0:cf:a3:93:cf:08:fe:ac:66:98:ab:cc:3e:97:d8:dd:
46:2d:b0:84
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDApOaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMTU1NloXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVC
MUQxNzNDMjNFOTA5Rjk1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMmVxvMu/n3sc1xju3ZeL52lU+xa2sg8a4PVtsSkjhMxAUOul5Vps9Jfd99/2J
coQzeC7rQVldjbSN19DF7zEWOEXDdkILoIB8VGpq55Nn98yqVmt13oKpzc9Ax8FM
jxjWWyFVINSbZQqspbiBajvqTgvKT6tMQQivJ5XUtC13ceeKVt7icOSrEVp5UVPM
ecqurZDXeR86fZMNGvxmjT9gztW7SrehOpzm5qjQ7rszuSAbbpZuAyZtZX7flFs/
A8cJaPGKzPXUP+XOxZHVil3Q+XYZndDFlUc3LbD3VmHwoAMO3Ab6tMOqBhs6PsUX
YOWPnY11P+TJDokjjWIBnZdjAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUnPapYQAM
l2lHu76x0XPCPpCflUQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJGQTY1LzkzNURDRkJFNjYyMzExRUJBQTExRDU2M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyRkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFB
TWwybEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBADLCmsDBADLFlMwDQYJKoZIhvcNAQELBQADggEBALG1vAPu2iEn
4vDxPpzVc8MuNOWklpQSvdUSXiQJeeHUKEpRMgmkWQZsGLwmeJJ1OEKNbFHwJxiK
Uc0+gcKjDaQUF6F8QP39x75FQFCeGIbrEkcYlXnHs1ddZiFT+OUyOOsxoCjslftL
yFpM5e7/Mmdnl8AwO3GlrTcWj9M1VE/SVgI/+kE0yfRMBw/RCr/0HBeBQTnQkIgh
fLDx6JGJO9p3SXrk/xuogJ7bcEHCgsiznQRVDGQtTV1kERE/udLwOwz+WE+nw3ts
dstj9eDisfL5CC6/BC9LrzBoGWO5nfpJD4sjmQ79v8PvqMEG0M+jk88I/qxmmKvM
PpfY3UYtsIQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:42 2026 by rpki-client