Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
File: zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer (raw, json)
Hash identifier: gqB0Oxhq2lMjM2U9Lv7itLzRtqVUDVH2cBdFemT4AwA=
Subject key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029A5E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:48:14 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 154321
IP: 2001:df6:40c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170590 (0x29a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:48:14 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:1a:ee:b5:c5:a2:3e:66:f8:b6:e8:9c:b9:
89:a8:4a:2e:dd:f2:3a:d9:82:dc:62:50:ed:24:9a:
76:64:24:b4:f7:fc:48:2c:eb:ed:ec:64:3b:23:1a:
7b:b2:e8:32:7f:92:be:c4:75:74:0f:6f:fb:a6:01:
76:00:a6:b9:b7:3d:22:f6:02:4d:eb:41:39:33:81:
8f:79:7f:6c:ce:46:4a:54:5d:b9:6c:b8:96:44:47:
2b:37:db:f2:34:8d:97:64:da:14:e1:c0:6e:52:52:
2b:96:2b:74:96:91:34:91:7e:85:22:17:d7:5a:8e:
fb:0d:60:e7:d9:c4:4b:b8:a6:06:a5:fc:82:5d:ea:
8f:ce:f1:8c:6c:e1:fe:07:29:20:03:c8:91:75:4e:
11:ff:15:0b:cf:04:fb:23:e1:d8:91:fc:cb:b3:1a:
06:a3:3e:39:3c:f5:3e:e5:4e:35:7d:13:10:74:49:
d5:20:ad:0a:df:30:89:c4:39:f7:8e:76:f0:a6:2d:
48:fa:1a:de:b2:32:10:7d:38:32:66:95:c9:2d:2b:
4b:3f:bf:2d:32:8d:c3:6e:d5:41:af:f5:23:02:ef:
45:a5:0d:32:1e:62:fb:67:49:37:b7:f6:06:fa:f1:
b0:ed:5b:f8:de:6f:82:df:bd:7a:57:a1:b2:a3:09:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154321
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:20:24:52:a4:ac:b9:5f:b7:49:60:5a:2c:a6:96:c6:14:af:
58:24:50:06:ca:e6:f5:60:08:ca:0f:8c:75:6d:61:cc:83:e9:
76:73:53:a8:fb:fc:26:35:bd:2c:3d:d9:70:8a:a5:f7:d1:01:
4c:fb:66:07:24:a3:4a:df:23:01:20:0e:64:f1:68:f3:6c:4b:
b8:c3:7d:84:b1:03:1f:1a:72:7f:77:11:45:cc:db:5b:1a:ce:
d4:a9:d1:6d:8f:51:54:78:ed:1c:6b:2c:76:d7:7b:74:86:18:
be:2b:fe:55:48:a4:d9:88:3a:05:fc:d8:60:07:7d:45:87:50:
c4:6c:2e:9e:34:9a:ca:38:b1:ef:ee:ed:33:a3:c1:09:c5:ed:
60:c8:fb:f6:60:80:db:fe:fb:17:a7:a6:df:1a:bd:b7:5e:c2:
83:56:ff:38:92:db:79:26:96:cc:4a:f8:73:e7:ed:50:93:2f:
74:5a:f5:2b:02:40:d5:a6:02:30:17:f6:03:85:b4:c7:29:32:
76:22:7f:72:10:7e:a4:3c:d5:06:b9:a4:ca:45:86:a0:ba:a0:
67:0f:c7:e7:57:4c:c8:92:68:b4:23:69:b5:8e:13:ce:77:68:
2d:f3:8a:53:a1:a6:b0:76:93:03:8c:e0:6e:84:4e:b0:8a:71:
ea:52:3c:2f
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAppeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzNDgxNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRThGRkYxMTAvBgNVBAUTKENDOUYyRkJCRkFFREM0NEM3NjMyQjE4
QzJCRDNCQzU4RUNFRDdCRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTDhrutcWiPmb4tuicuYmoSi7d8jrZgtxiUO0kmnZkJLT3/Egs6+3sZDsjGnuy
6DJ/kr7EdXQPb/umAXYAprm3PSL2Ak3rQTkzgY95f2zORkpUXblsuJZERys32/I0
jZdk2hThwG5SUiuWK3SWkTSRfoUiF9dajvsNYOfZxEu4pgal/IJd6o/O8Yxs4f4H
KSADyJF1ThH/FQvPBPsj4diR/MuzGgajPjk89T7lTjV9ExB0SdUgrQrfMInEOfeO
dvCmLUj6Gt6yMhB9ODJmlcktK0s/vy0yjcNu1UGv9SMC70WlDTIeYvtnSTe39gb6
8bDtW/jeb4LfvXpXobKjCdiRAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUzJ8vu/rt
xEx2MrGMK9O8WOzte/UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4RkZGLzU5MTNFMjYyRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOEZGRi81OTEzRTI2MkVFRDExMUYwQjBBQ0QyNzY3MzZGNTZCQy96Sjh2dV9y
dHhFeDJNckdNSzlPOFdPenRlX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlrRMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9kDAMA0G
CSqGSIb3DQEBCwUAA4IBAQChICRSpKy5X7dJYFosppbGFK9YJFAGyub1YAjKD4x1
bWHMg+l2c1Oo+/wmNb0sPdlwiqX30QFM+2YHJKNK3yMBIA5k8WjzbEu4w32EsQMf
GnJ/dxFFzNtbGs7UqdFtj1FUeO0cayx213t0hhi+K/5VSKTZiDoF/NhgB31Fh1DE
bC6eNJrKOLHv7u0zo8EJxe1gyPv2YIDb/vsXp6bfGr23XsKDVv84ktt5JpbMSvhz
5+1Qky90WvUrAkDVpgIwF/YDhbTHKTJ2In9yEH6kPNUGuaTKRYaguqBnD8fnV0zI
kmi0I2m1jhPOd2gt84pToaawdpMDjOBuhE6winHqUjwv
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:14 2026 by rpki-client