Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
File: rVo_mWvNoZuP1pKxr8inCuMzPO0.cer (raw, json)
Hash identifier: H/IhP/+EfVSLcKANCC5GnfI2P3QftRHoY/3FunaSB+M=
Subject key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0299BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:45:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2569 -- 2570
AS: 4648
AS: 4771
AS: 4834
AS: 9325
AS: 17994
AS: 18006
AS: 18348
AS: 38479
AS: 38485
AS: 38560
AS: 55936
AS: 64070
AS: 133124
AS: 133420
AS: 133473
IP: 45.65.4.0/22
IP: 103.232.108.0/22
IP: 110.34.48.0/22
IP: 115.188.0.0/15
IP: 122.56.0.0/13
IP: 125.236.0.0/19
IP: 125.236.34.0/24
IP: 125.236.40.0 -- 125.236.45.255
IP: 125.236.48.0 -- 125.236.79.255
IP: 125.236.96.0 -- 125.239.255.255
IP: 202.27.156.0/22
IP: 202.27.169.0/24
IP: 202.27.176.0 -- 202.27.185.255
IP: 202.27.254.0/23
IP: 202.36.0.0/21
IP: 202.36.40.0/24
IP: 202.36.90.0/24
IP: 202.37.45.0/24
IP: 202.37.236.0/22
IP: 202.37.242.0 -- 202.37.247.255
IP: 202.49.49.0/24
IP: 202.49.160.0/22
IP: 202.49.169.0/24
IP: 202.50.74.0/23
IP: 202.50.80.0/22
IP: 202.50.110.0/24
IP: 202.50.116.0/24
IP: 202.50.119.0/24
IP: 202.50.224.0/20
IP: 202.50.245.0/24
IP: 203.96.0.0/17
IP: 210.54.0.0/15
IP: 210.86.0.0/17
IP: 219.88.0.0/15
IP: 222.152.0.0/14
IP: 2401:4540::/32
IP: 2403:9800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170428 (0x299bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:45:26 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:3d:f8:d0:91:52:ed:95:8f:96:14:d9:bd:
69:d2:e8:62:86:08:10:c6:59:66:d8:1c:48:fd:29:
65:a3:87:da:5f:02:d5:18:d1:a3:bf:52:1a:60:bc:
63:ee:f7:97:10:55:03:bb:a0:55:9d:cc:6a:20:6c:
e0:8c:b2:b1:06:b5:01:f6:df:fb:f5:18:e2:a9:13:
dd:89:cf:d7:69:94:50:7b:99:b5:44:ae:a9:38:50:
a7:04:64:7b:d4:58:f7:53:99:55:76:e5:d4:fb:bf:
d3:6d:da:dd:3a:31:27:f5:69:3b:e3:f5:12:66:78:
64:39:4f:8d:ac:25:cc:8e:fc:ff:af:cd:66:3c:35:
fb:bb:41:ef:6c:91:a5:66:c6:1f:0d:a2:68:79:13:
ae:6e:d3:0c:83:95:f7:9a:91:bb:c4:c9:04:83:b6:
d6:c0:b9:77:f8:f7:b0:ee:65:02:a6:22:61:72:fa:
44:31:87:d0:be:a4:88:72:6c:86:21:4d:bc:26:4c:
66:22:76:03:31:d8:fb:94:aa:40:d8:82:04:77:64:
10:45:d7:73:ed:ed:f1:3f:90:84:dd:aa:a0:64:11:
34:d7:5e:51:89:b3:09:9c:34:e2:68:0b:5d:8a:bd:
22:f8:bc:f3:f1:1d:64:7a:21:a6:b1:6c:d5:a0:69:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2569-2570
4648
4771
4834
9325
17994
18006
18348
38479
38485
38560
55936
64070
133124
133420
133473
sbgp-ipAddrBlock: critical
IPv4:
45.65.4.0/22
103.232.108.0/22
110.34.48.0/22
115.188.0.0/15
122.56.0.0/13
125.236.0.0/19
125.236.34.0/24
125.236.40.0-125.236.45.255
125.236.48.0-125.236.79.255
125.236.96.0-125.239.255.255
202.27.156.0/22
202.27.169.0/24
202.27.176.0-202.27.185.255
202.27.254.0/23
202.36.0.0/21
202.36.40.0/24
202.36.90.0/24
202.37.45.0/24
202.37.236.0/22
202.37.242.0-202.37.247.255
202.49.49.0/24
202.49.160.0/22
202.49.169.0/24
202.50.74.0/23
202.50.80.0/22
202.50.110.0/24
202.50.116.0/24
202.50.119.0/24
202.50.224.0/20
202.50.245.0/24
203.96.0.0/17
210.54.0.0/15
210.86.0.0/17
219.88.0.0/15
222.152.0.0/14
IPv6:
2401:4540::/32
2403:9800::/32
Signature Algorithm: sha256WithRSAEncryption
87:ea:a6:3d:09:16:7a:92:5e:7a:0e:02:a0:2c:98:31:bc:f5:
b6:0a:cf:f3:ce:27:0c:94:f6:e5:80:32:13:05:43:7b:0b:83:
13:b7:0f:95:29:1a:a4:c9:6e:d2:fe:2f:b9:15:f4:36:91:b2:
10:1c:d8:d7:15:cc:93:5f:0c:1b:35:e8:57:f0:b9:45:fb:3b:
df:f0:1f:1b:04:89:b6:c4:db:7c:ae:0c:fe:34:0b:8c:88:b0:
ba:54:d8:4a:f4:a9:e9:86:0b:9c:b8:58:17:32:7a:ab:42:bc:
75:a7:92:66:2b:6b:11:96:72:d9:3b:64:f3:31:8b:84:78:7e:
c8:70:e0:ed:7f:24:1f:36:8a:3d:dd:1e:3f:99:5d:f2:83:fe:
a5:6e:ef:da:73:eb:83:6a:af:ef:8f:20:29:60:45:0d:dc:e7:
bf:39:2c:50:ee:56:72:dc:6a:76:ec:f2:03:60:99:80:42:82:
f5:22:87:00:47:d9:bb:60:30:fd:00:58:5c:3b:f9:84:45:2b:
ef:2d:4c:93:f6:da:16:52:31:a7:92:1b:10:ad:00:5d:5b:55:
b5:3c:75:17:1e:1c:74:fd:00:5c:9b:11:43:2d:f1:5d:6b:ee:
56:52:82:ad:1a:9a:44:67:bc:cb:08:9f:7b:e7:65:d2:df:b5:
83:0c:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:45 2026 by rpki-client