Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer (raw, json)
Hash identifier: AvPkyIVZQIgmkaNg06OVaeizrQPw0UXGmdTBQNIHVbg=
Subject key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029D22
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:00:53 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 153390
IP: 2401:d360::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171298 (0x29d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:00:53 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:95:a8:53:a0:47:42:df:2a:b3:44:c4:d5:
04:73:2f:7d:99:00:ff:cb:19:7e:a9:98:f9:42:85:
0a:3f:b2:d8:ce:ca:60:87:d9:df:c0:00:83:7b:18:
d1:42:5f:fd:2a:ba:d9:cd:9a:a7:a5:f7:a5:39:7b:
23:98:f8:fd:26:62:28:39:c2:66:7a:4e:9e:2f:cd:
ed:25:bc:fb:3b:01:36:b5:db:d7:ea:19:6e:8f:fa:
8e:16:e0:f9:63:35:72:3d:23:71:ec:fd:a2:06:b2:
e1:69:b3:9b:46:84:fa:c7:6b:3e:ad:5e:40:69:e7:
3a:1d:fb:7d:e8:06:3f:c7:f6:8b:b3:83:98:a0:f9:
e0:24:47:63:58:48:84:8d:90:e8:11:d0:48:b9:3f:
e2:0f:6e:50:45:fb:a8:e5:ff:79:8a:20:cd:69:d0:
b0:be:a5:4c:f0:e8:07:31:c6:9e:cc:e5:e5:56:b3:
98:e3:7d:0f:71:b3:a5:9b:1b:e1:cd:64:ea:f6:72:
c5:8d:bb:fb:02:13:3c:0d:b2:1d:93:d0:0c:30:c2:
40:e7:88:74:85:29:7f:78:3b:8a:48:b6:a5:44:7a:
2e:18:68:83:fc:9a:de:7e:27:4f:80:90:12:2c:2a:
8d:34:45:31:7e:2b:2b:a6:d9:e8:17:30:9d:15:51:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153390
sbgp-ipAddrBlock: critical
IPv6:
2401:d360::/32
Signature Algorithm: sha256WithRSAEncryption
a2:c8:e1:23:d8:30:3d:c1:03:d1:bb:bb:07:18:18:0c:84:7e:
55:b1:5f:8e:8c:97:1d:6a:1b:b6:e0:c7:9a:14:8c:e1:8b:d4:
43:4d:d4:1e:b5:16:28:ac:71:42:04:26:9f:c2:c6:80:40:eb:
31:9a:d0:0f:fc:64:2c:d8:68:42:1b:2f:1b:12:7f:d1:16:c2:
11:f4:5a:ab:1b:76:8e:ce:8c:6d:0c:ae:28:9f:1f:44:66:de:
0f:78:c7:6e:08:d6:72:7e:f1:ec:86:75:57:bf:f5:3d:ae:35:
75:dd:41:ac:84:d6:8f:eb:c7:7e:97:71:86:9d:13:4e:20:15:
59:d4:48:8f:23:0f:11:16:d5:43:40:f4:37:fa:65:aa:bf:6a:
c6:e2:44:e5:c7:16:e1:cf:83:ec:b3:8a:69:0d:d5:fd:f3:1f:
fa:d8:5e:b1:fa:90:94:1b:c0:b0:9b:97:9c:31:fd:56:36:9c:
a5:8e:43:34:d0:77:fc:41:75:fd:14:be:94:d9:8a:2b:ac:fa:
74:dc:25:de:2c:89:67:69:18:7e:3e:74:e9:3d:4a:50:b5:96:
2b:7c:44:64:52:3b:f0:60:0f:c1:55:dd:b0:6c:56:e7:c2:a7:
91:77:f7:eb:63:48:dc:67:3d:8c:3d:a2:05:5a:ed:5f:2f:af:
03:ef:58:9e
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAp0iMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzA0MDA1M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0VGOUMxMTAvBgNVBAUTKEM0NDM5REMwMUUyMEQxNkNDNUEwRUY5
ODE3RDQxQkY2Mjg5NzY1MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkVZWoU6BHQt8qs0TE1QRzL32ZAP/LGX6pmPlChQo/stjOymCH2d/AAIN7GNFC
X/0qutnNmqel96U5eyOY+P0mYig5wmZ6Tp4vze0lvPs7ATa129fqGW6P+o4W4Plj
NXI9I3Hs/aIGsuFps5tGhPrHaz6tXkBp5zod+33oBj/H9ouzg5ig+eAkR2NYSISN
kOgR0Ei5P+IPblBF+6jl/3mKIM1p0LC+pUzw6Acxxp7M5eVWs5jjfQ9xs6WbG+HN
ZOr2csWNu/sCEzwNsh2T0AwwwkDniHSFKX94O4pItqVEei4YaIP8mt5+J0+AkBIs
Ko00RTF+Kyum2egXMJ0VUQpzAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUxEOdwB4g
0WzFoO+YF9Qb9iiXZSQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNFRjlDL0NEMkNBOEY4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRUY5Qy9DRDJDQThGOEQzRUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0
ZzBXekZvTy1ZRjlRYjlpaVhaU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlcuMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHTYDANBgkq
hkiG9w0BAQsFAAOCAQEAosjhI9gwPcED0bu7BxgYDIR+VbFfjoyXHWobtuDHmhSM
4YvUQ03UHrUWKKxxQgQmn8LGgEDrMZrQD/xkLNhoQhsvGxJ/0RbCEfRaqxt2js6M
bQyuKJ8fRGbeD3jHbgjWcn7x7IZ1V7/1Pa41dd1BrITWj+vHfpdxhp0TTiAVWdRI
jyMPERbVQ0D0N/plqr9qxuJE5ccW4c+D7LOKaQ3V/fMf+thesfqQlBvAsJuXnDH9
VjacpY5DNNB3/EF1/RS+lNmKK6z6dNwl3iyJZ2kYfj506T1KULWWK3xEZFI78GAP
wVXdsGxW58KnkXf362NI3Gc9jD2iBVrtXy+vA+9Yng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:48 2026 by rpki-client