Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer (raw, json)
Hash identifier: fqCiaRLdvi+py0V2QazveHN9kMcy3+N81l2IeT7fP74=
Subject key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029EC6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:08:07 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 9498
AS: 10239
AS: 23870
AS: 24560
AS: 45514
AS: 45609
IP: 27.123.64.0/18
IP: 58.84.56.0/23
IP: 59.144.0.0/15
IP: 61.95.128.0/17
IP: 61.246.0.0/16
IP: 61.247.224.0/19
IP: 101.2.0.0/17
IP: 103.7.108.0/22
IP: 103.16.104.0/22
IP: 103.56.85.0/24
IP: 103.110.38.0/24
IP: 103.116.28.0/22
IP: 103.210.40.0/22
IP: 103.239.233.0/24
IP: 103.251.28.0/22
IP: 122.160.0.0 -- 122.187.255.255
IP: 125.16.0.0/13
IP: 150.129.140.0/22
IP: 171.48.0.0/12
IP: 171.76.0.0/14
IP: 180.178.0.0/19
IP: 180.211.80.0/22
IP: 182.64.0.0/12
IP: 182.95.0.0/16
IP: 202.56.192.0/18
IP: 202.71.16.0/21
IP: 203.101.0.0/17
IP: 203.132.128.0/19
IP: 203.145.128.0/18
IP: 2404:a800::/32
IP: 2407:b900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171718 (0x29ec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:08:07 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:21:47:ac:2c:95:e8:a1:d2:f2:5a:6e:86:
80:f2:28:c7:d5:3b:16:f5:1e:d5:97:0e:0a:cb:ee:
0a:1d:c3:4a:b0:37:7f:ed:7f:a6:5b:b8:22:26:fe:
d5:5e:de:93:11:46:d0:4e:b9:c2:51:4d:e2:4e:62:
08:85:78:ef:77:b6:70:dc:a6:7d:77:21:7e:52:db:
3f:4f:45:83:4a:c6:43:12:2e:e6:3d:92:1e:eb:89:
49:d4:ad:07:62:e4:44:f3:81:63:57:53:46:68:5c:
70:c9:fe:1d:77:30:41:aa:5e:a5:e4:02:99:07:7f:
3b:d0:ab:63:ea:b2:1b:4d:be:8f:a9:04:49:88:49:
fc:76:e8:4d:bf:73:9d:57:82:a8:79:2c:b5:70:4f:
49:7a:ff:4f:f9:e1:a3:ed:29:0e:59:88:c1:86:ad:
3f:d2:0d:43:29:f2:f5:55:05:74:dd:57:94:41:68:
44:0d:08:db:00:6e:46:4b:21:3c:9d:eb:6c:73:0e:
57:a4:da:e6:bc:bd:3f:57:3d:99:da:c6:03:ff:6b:
41:0d:f6:06:69:39:f2:cc:21:bc:2e:2c:c6:5f:f5:
d1:f8:f4:22:b2:25:17:ad:e7:76:a1:ea:10:21:59:
7a:42:9b:bd:ed:91:bc:63:fd:a4:a4:14:d1:31:89:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9498
10239
23870
24560
45514
45609
sbgp-ipAddrBlock: critical
IPv4:
27.123.64.0/18
58.84.56.0/23
59.144.0.0/15
61.95.128.0/17
61.246.0.0/16
61.247.224.0/19
101.2.0.0/17
103.7.108.0/22
103.16.104.0/22
103.56.85.0/24
103.110.38.0/24
103.116.28.0/22
103.210.40.0/22
103.239.233.0/24
103.251.28.0/22
122.160.0.0-122.187.255.255
125.16.0.0/13
150.129.140.0/22
171.48.0.0/12
171.76.0.0/14
180.178.0.0/19
180.211.80.0/22
182.64.0.0/12
182.95.0.0/16
202.56.192.0/18
202.71.16.0/21
203.101.0.0/17
203.132.128.0/19
203.145.128.0/18
IPv6:
2404:a800::/32
2407:b900::/32
Signature Algorithm: sha256WithRSAEncryption
96:e2:8d:66:64:c8:cc:31:26:57:dd:cb:e1:7e:34:f4:53:9e:
b3:26:f8:9d:81:22:ec:63:05:07:dd:2b:d4:d6:4b:16:c7:3f:
a5:87:4a:8a:34:cb:d1:51:3c:3d:95:22:e5:89:0f:9a:48:24:
8d:cd:8b:db:f1:da:46:be:92:5b:7b:74:b9:a3:af:91:a9:ef:
ea:a6:fd:5e:bd:f0:2e:98:8d:d4:0e:d3:05:2f:61:e1:ee:c6:
1b:5d:37:6d:b8:22:21:11:21:3d:22:4e:e6:28:07:31:0b:23:
3b:42:0f:c0:08:c2:ce:33:58:ab:2b:e5:44:ed:f6:91:a0:38:
09:a6:54:4e:4e:8f:40:31:e5:23:9b:25:85:d4:e4:60:12:9d:
5b:49:08:c8:44:52:40:8a:6a:a6:2c:73:d6:ab:1d:07:7e:db:
1c:a5:a5:49:60:d1:ec:08:18:b2:7e:12:1e:2f:66:aa:c3:af:
cd:36:d6:a7:41:11:19:34:3f:da:2e:c2:07:c8:f0:d0:8b:b6:
e4:1e:08:3d:2c:a8:bc:05:78:83:dd:d8:11:47:45:8f:4b:78:
83:0e:87:fa:77:1c:50:2b:47:c4:e4:61:90:37:22:f6:fd:86:
d1:1b:2d:8f:db:a3:02:1c:ef:b9:34:9b:82:fc:aa:09:dd:c9:
ff:37:80:4b
-----BEGIN CERTIFICATE-----
MIIG8TCCBdmgAwIBAgIDAp7GMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzA0MDgwN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUz
Qzg4QUQxNERBODlBMTg2MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDc0iFHrCyV6KHS8lpuhoDyKMfVOxb1HtWXDgrL7godw0qwN3/tf6ZbuCIm/tVe
3pMRRtBOucJRTeJOYgiFeO93tnDcpn13IX5S2z9PRYNKxkMSLuY9kh7riUnUrQdi
5ETzgWNXU0ZoXHDJ/h13MEGqXqXkApkHfzvQq2PqshtNvo+pBEmISfx26E2/c51X
gqh5LLVwT0l6/0/54aPtKQ5ZiMGGrT/SDUMp8vVVBXTdV5RBaEQNCNsAbkZLITyd
62xzDlek2ua8vT9XPZnaxgP/a0EN9gZpOfLMIbwuLMZf9dH49CKyJRet53ah6hAh
WXpCm73tkbxj/aSkFNExiQNTAgMBAAGjggPmMIID4jAdBgNVHQ4EFgQUs5hmqZ0c
2fTn6PU8iK0U2omhhiUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk2NEIzL0U2NTg1MTEyMUQ4NDExRTJBMUJBMzBEQjA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVow
YzJmVG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQgBAf8EIDAe
oBwwGgICJRoCAif/AgJdPgICX/ACAwCxygIDALIpMIHgBggrBgEFBQcBBwEB/wSB
0DCBzTCBtAQCAAEwga0DBAYbe0ADBAE6VDgDAwE7kAMEBz1fgAMDAD32AwQFPffg
AwQHZQIAAwQCZwdsAwQCZxBoAwQAZzhVAwQAZ24mAwQCZ3QcAwQCZ9IoAwQAZ+/p
AwQCZ/scMAoDAwV6oAMDAnq4AwMDfRADBAKWgYwDAwSrMAMDAqtMAwQFtLIAAwQC
tNNQAwMEtkADAwC2XwMEBso4wAMEA8pHEAMEB8tlAAMEBcuEgAMEBsuRgDAUBAIA
AjAOAwUAJASoAAMFACQHuQAwDQYJKoZIhvcNAQELBQADggEBAJbijWZkyMwxJlfd
y+F+NPRTnrMm+J2BIuxjBQfdK9TWSxbHP6WHSoo0y9FRPD2VIuWJD5pIJI3Ni9vx
2ka+klt7dLmjr5Gp7+qm/V698C6YjdQO0wUvYeHuxhtdN224IiERIT0iTuYoBzEL
IztCD8AIws4zWKsr5UTt9pGgOAmmVE5Oj0Ax5SObJYXU5GASnVtJCMhEUkCKaqYs
c9arHQd+2xylpUlg0ewIGLJ+Eh4vZqrDr8021qdBERk0P9ouwgfI8NCLtuQeCD0s
qLwFeIPd2BFHRY9LeIMOh/p3HFArR8TkYZA3Ivb9htEbLY/bowIc77k0m4L8qgnd
yf83gEs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:52 2026 by rpki-client