Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
File: qrDiti9jQ4lXMMBUiOf8TibFGmw.cer (raw, json)
Hash identifier: l8xFErzVa8xzZUkWHbWoLc56lqzYtMAE+xi2riTPnhs=
Subject key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029DEC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:04:24 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 37971
AS: 38235
AS: 139797
IP: 103.90.148.0/22
IP: 103.120.132.0/22
IP: 103.141.164.0/23
IP: 103.206.76.0/22
IP: 116.212.128.0/19
IP: 150.107.4.0/22
IP: 160.202.32.0/22
IP: 202.37.179.0/24
IP: 202.57.208.0/22
IP: 203.147.128.0/20
IP: 203.171.252.0/22
IP: 203.176.128.0/20
IP: 210.247.192.0/20
IP: 2001:deb:4000::/48
IP: 2001:df2:a980::/48
IP: 2405:da00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171500 (0x29dec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:04:24 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:8d:ff:8d:13:e3:50:e2:de:96:6e:df:b8:
d4:4e:06:18:eb:93:9b:0e:8f:f8:e2:b8:fa:78:a1:
c5:21:41:d2:48:c4:f0:5d:01:30:65:83:86:2e:e5:
ce:2a:f8:88:03:6d:09:9d:45:67:28:f2:6b:45:e7:
75:ca:af:ae:34:54:c4:5c:72:ae:53:31:e9:f1:91:
49:24:cb:ad:58:2e:43:5f:de:c6:c2:9e:2d:71:c2:
e6:21:57:a8:cd:c6:77:8a:7e:b3:40:63:e6:89:5b:
ce:e8:18:da:c5:35:98:24:52:38:23:e9:c8:f6:23:
b2:74:8f:7b:ad:99:07:83:f7:d4:3b:d6:77:f5:71:
11:51:37:e0:90:a1:90:ff:15:a2:b4:8f:ec:7a:67:
ee:fa:62:a5:74:28:b6:65:db:92:69:6b:7d:44:05:
d9:5e:3d:dc:2d:41:1d:d8:ab:92:2c:ba:2b:eb:bc:
d9:13:b2:26:30:24:3b:c8:2e:5b:11:54:3c:d2:71:
a8:50:72:0b:43:58:29:0e:7f:85:c6:d9:ab:55:4c:
36:d3:7b:dc:c4:6a:88:28:91:37:18:4b:53:25:b6:
5c:47:a4:47:55:6e:3a:03:de:3e:d5:10:5e:a4:d4:
4e:2a:29:35:96:a7:ad:af:95:9e:c9:00:43:51:b9:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37971
38235
139797
sbgp-ipAddrBlock: critical
IPv4:
103.90.148.0/22
103.120.132.0/22
103.141.164.0/23
103.206.76.0/22
116.212.128.0/19
150.107.4.0/22
160.202.32.0/22
202.37.179.0/24
202.57.208.0/22
203.147.128.0/20
203.171.252.0/22
203.176.128.0/20
210.247.192.0/20
IPv6:
2001:deb:4000::/48
2001:df2:a980::/48
2405:da00::/32
Signature Algorithm: sha256WithRSAEncryption
33:c1:50:2c:b8:7d:69:6e:28:96:94:9c:de:3a:24:51:cf:e0:
c7:86:84:13:09:28:a0:9e:71:b4:09:0e:90:fc:27:02:8f:13:
4f:a0:1b:ff:54:8b:60:34:1a:2a:41:1d:0a:54:ea:93:68:5d:
89:66:98:a5:f8:ad:66:06:34:b1:85:62:db:3c:c1:53:4f:a4:
05:42:3c:b7:4a:8e:58:e6:df:d2:d8:46:1e:82:08:12:70:c7:
2f:d0:dc:33:06:71:5d:03:68:ba:cc:5a:b1:83:d7:d2:68:f4:
ce:62:5d:45:f2:9e:e9:23:a3:74:e1:11:44:4c:2f:0b:83:e9:
06:1c:29:99:7b:b9:40:a0:f3:20:5a:30:5a:d9:5d:67:f2:e3:
60:50:61:11:ab:d4:5e:23:0e:ab:a7:51:92:b9:7f:33:f7:a1:
fd:07:42:b1:93:02:d7:ef:a2:7b:db:fd:e7:5b:90:67:97:39:
4a:3b:a7:01:1f:0b:7f:b5:6e:54:b0:8f:a4:b4:f4:8a:b0:cc:
a4:58:9a:19:7b:c1:9d:1c:63:1b:0f:cc:88:b8:9c:0c:94:16:
95:66:53:f4:b4:d0:74:7b:9e:0e:e0:fd:6c:d5:c9:3a:f7:d1:
0e:9c:18:b6:65:0d:77:de:a6:ee:8b:1a:cd:03:70:17:ab:24:
dc:82:90:7f
-----BEGIN CERTIFICATE-----
MIIGjjCCBXagAwIBAgIDAp3sMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzA0MDQyNFoXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1
NDg4RTdGQzRFMjZDNTFBNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+io3/jRPjUOLelm7fuNROBhjrk5sOj/jiuPp4ocUhQdJIxPBdATBlg4Yu5c4q
+IgDbQmdRWco8mtF53XKr640VMRccq5TMenxkUkky61YLkNf3sbCni1xwuYhV6jN
xneKfrNAY+aJW87oGNrFNZgkUjgj6cj2I7J0j3utmQeD99Q71nf1cRFRN+CQoZD/
FaK0j+x6Z+76YqV0KLZl25Jpa31EBdlePdwtQR3Yq5IsuivrvNkTsiYwJDvILlsR
VDzScahQcgtDWCkOf4XG2atVTDbTe9zEaogokTcYS1MltlxHpEdVbjoD3j7VEF6k
1E4qKTWWp62vlZ7JAENRuRbHAgMBAAGjggODMIIDfzAdBgNVHQ4EFgQUqrDiti9j
Q4lXMMBUiOf8TibFGmwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURDQUU4LzhCNkFERTE0MUQ5MzExRTI5MkNCMjNGNzA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEQ0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5
alE0bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT
oBEwDwIDAJRTAgMAlVsCAwIiFTCBiAYIKwYBBQUHAQcBAf8EeTB3MFQEAgABME4D
BAJnWpQDBAJneIQDBAFnjaQDBAJnzkwDBAV01IADBAKWawQDBAKgyiADBADKJbMD
BALKOdADBATLk4ADBALLq/wDBATLsIADBATS98AwHwQCAAIwGQMHACABDetAAAMH
ACABDfKpgAMFACQF2gAwDQYJKoZIhvcNAQELBQADggEBADPBUCy4fWluKJaUnN46
JFHP4MeGhBMJKKCecbQJDpD8JwKPE0+gG/9Ui2A0GipBHQpU6pNoXYlmmKX4rWYG
NLGFYts8wVNPpAVCPLdKjljm39LYRh6CCBJwxy/Q3DMGcV0DaLrMWrGD19Jo9M5i
XUXynukjo3ThEURMLwuD6QYcKZl7uUCg8yBaMFrZXWfy42BQYRGr1F4jDqunUZK5
fzP3of0HQrGTAtfvonvb/edbkGeXOUo7pwEfC3+1blSwj6S09IqwzKRYmhl7wZ0c
YxsPzIi4nAyUFpVmU/S00HR7ng7g/WzVyTr30Q6cGLZlDXfepu6LGs0DcBerJNyC
kH8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:36 2026 by rpki-client