Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
File: xGfLLMucIacHtd-86roFTBkFI64.cer (raw, json)
Hash identifier: NxJGVT7MSb6Dszuh58qsNG1Fxon7pLijeUCzGagUD4E=
Subject key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029CB5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:58:32 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134970
IP: 103.251.244.0/22
IP: 220.247.128.0/22
IP: 2407:7380::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171189 (0x29cb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:58:32 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:f1:d0:0a:72:14:5d:70:cc:54:70:12:7d:
41:61:43:b3:99:4b:b8:20:32:3a:ae:e9:36:f2:50:
8e:ae:06:92:3f:ff:96:d7:06:71:33:3d:fe:2f:c9:
36:fb:05:ba:5f:81:7c:8f:f4:1f:ea:59:9c:6c:ab:
a5:e2:94:31:62:f7:d2:7e:25:05:fe:33:7c:bb:35:
43:04:d5:4f:e2:9e:4f:ca:49:10:a0:64:6f:1f:85:
fb:b9:d7:ee:58:be:f9:3b:27:9d:7b:31:10:c3:03:
eb:e7:7d:c6:b1:37:a1:9d:06:e7:ff:1c:0f:26:ac:
aa:0e:b8:ca:3b:2f:fa:5c:e9:0a:d3:f7:de:d4:15:
da:b8:f0:a8:a7:fa:5f:f1:34:b3:b4:de:bd:75:ee:
c9:41:2a:b5:6b:3c:bb:32:68:ec:a5:24:dd:8a:85:
be:d0:3a:f9:d4:f0:b2:80:9b:bd:30:3b:de:ee:6a:
bd:91:9e:6b:7a:4a:bb:43:5a:61:98:aa:d8:e0:ad:
55:28:cf:58:23:09:c1:fc:cc:7b:9c:57:7c:8e:1a:
f1:8f:27:e6:6f:68:d0:bb:6a:a2:34:93:1d:cb:3e:
95:c4:dc:78:7f:4b:fe:86:b7:d4:e7:41:f5:b0:a5:
e8:71:29:3c:7e:79:e2:dc:9f:35:66:fc:c5:bf:ae:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134970
sbgp-ipAddrBlock: critical
IPv4:
103.251.244.0/22
220.247.128.0/22
IPv6:
2407:7380::/32
Signature Algorithm: sha256WithRSAEncryption
cf:c8:1a:b3:25:fd:12:bd:11:ac:6d:30:d8:25:83:a5:80:3e:
59:2c:7c:da:eb:16:0d:a8:6f:51:fd:9f:d5:73:a8:7e:1b:d8:
7b:89:93:8c:77:19:9b:a1:e7:27:8e:f4:8e:dc:0a:df:99:26:
67:e0:7c:25:13:07:7c:04:d7:68:65:c8:f5:81:33:36:75:be:
73:e9:f7:6f:81:76:ce:53:32:ef:e8:48:57:f5:51:41:4f:ca:
81:51:a5:43:ab:96:b2:4b:b4:99:4e:25:61:29:8f:bb:44:4f:
50:af:d8:11:96:3e:45:e9:8b:0e:db:98:a3:8d:a2:ba:7e:05:
97:8c:81:ba:5b:eb:62:50:ec:cc:56:91:7b:62:dc:6d:30:01:
41:d8:37:63:0b:06:91:1c:ce:74:52:b3:9e:15:15:2f:31:8b:
aa:a3:50:70:f9:dc:e5:b6:25:1e:f2:e5:f5:bb:ee:8f:b5:9a:
9c:fb:97:f8:97:99:3f:ef:7e:f0:ec:b7:f8:8c:f1:ce:6d:2c:
23:ca:b7:25:7c:b8:89:4c:4a:ce:ec:a1:83:a7:4d:38:68:7d:
a6:24:4e:bf:d2:ea:bf:a2:7c:39:05:14:ab:3a:ac:9e:3e:a9:
5b:23:b1:8e:85:45:21:0a:ab:b1:96:1c:6f:c9:eb:ea:8d:6b:
37:25:77:b1
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDApy1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzNTgzMloXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZC
Q0VBQkEwNTRDMTkwNTIzQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDnCfHQCnIUXXDMVHASfUFhQ7OZS7ggMjqu6TbyUI6uBpI//5bXBnEzPf4vyTb7
BbpfgXyP9B/qWZxsq6XilDFi99J+JQX+M3y7NUME1U/ink/KSRCgZG8fhfu51+5Y
vvk7J517MRDDA+vnfcaxN6GdBuf/HA8mrKoOuMo7L/pc6QrT997UFdq48Kin+l/x
NLO03r117slBKrVrPLsyaOylJN2Khb7QOvnU8LKAm70wO97uar2Rnmt6SrtDWmGY
qtjgrVUoz1gjCcH8zHucV3yOGvGPJ+ZvaNC7aqI0kx3LPpXE3Hh/S/6Gt9TnQfWw
pehxKTx+eeLcnzVm/MW/ropVAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUxGfLLMuc
IacHtd+86roFTBkFI64wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlDM0JFLzk0N0IzNTA2MDkzODExRUE5NUNBMzEyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11
Y0lhY0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg86MDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ/v0AwQC3PeA
MA0EAgACMAcDBQAkB3OAMA0GCSqGSIb3DQEBCwUAA4IBAQDPyBqzJf0SvRGsbTDY
JYOlgD5ZLHza6xYNqG9R/Z/Vc6h+G9h7iZOMdxmboecnjvSO3ArfmSZn4HwlEwd8
BNdoZcj1gTM2db5z6fdvgXbOUzLv6EhX9VFBT8qBUaVDq5ayS7SZTiVhKY+7RE9Q
r9gRlj5F6YsO25ijjaK6fgWXjIG6W+tiUOzMVpF7YtxtMAFB2DdjCwaRHM50UrOe
FRUvMYuqo1Bw+dzltiUe8uX1u+6PtZqc+5f4l5k/737w7Lf4jPHObSwjyrclfLiJ
TErO7KGDp004aH2mJE6/0uq/onw5BRSrOqyePqlbI7GOhUUhCquxlhxvyevqjWs3
JXex
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:55 2026 by rpki-client