Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.cer (raw, json)
Hash identifier: StMo2AOuuAoRlehXjWSJWbHcfPoFL/mt/wBz2z/us98=
Subject key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D7C3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Sep 2026 14:11:42 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154184
IP: 202.6.206.0/23
IP: 2402:2660::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186307 (0x2d7c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 22 14:11:42 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:5b:1e:aa:44:34:09:17:be:09:b9:73:55:
8a:a6:bb:7a:4b:59:26:0f:5e:ec:46:e9:16:e3:10:
ab:5b:19:fa:4a:16:0c:1d:36:e6:b7:fb:03:82:4e:
f8:c1:aa:a7:13:68:36:b3:65:a2:1d:19:ac:d3:31:
1a:18:33:3c:6e:65:b8:9d:6c:54:a9:12:e0:1a:80:
c7:a6:eb:17:6e:77:db:6e:8d:65:aa:b1:8d:71:a8:
be:95:d8:69:6e:8e:9d:3e:8a:46:a8:85:d5:59:df:
fa:88:a5:41:1e:79:5b:42:1a:4c:b7:0a:27:86:8f:
74:3f:df:75:c0:b0:22:73:ec:b0:1c:c3:5f:81:85:
7f:07:8a:cd:6a:89:bd:25:20:ef:7c:ad:cf:af:c7:
e3:07:c9:be:68:92:74:0e:7b:3f:04:d0:3b:cb:31:
51:48:70:98:15:29:0a:e2:88:0e:f4:9d:b6:f1:58:
6c:ef:3a:ae:f4:95:8f:e5:d9:d6:46:06:32:35:d3:
96:87:35:2a:2f:aa:fe:bf:1b:0f:34:1a:f9:0f:0d:
17:7b:a0:67:b1:64:96:db:eb:8b:65:24:fe:3b:26:
d1:94:5e:0c:6f:c9:6c:c9:bc:e3:32:cd:30:ae:57:
d6:e0:0f:e8:42:e2:33:54:90:b9:a1:a9:1e:56:bb:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154184
sbgp-ipAddrBlock: critical
IPv4:
202.6.206.0/23
IPv6:
2402:2660::/32
Signature Algorithm: sha256WithRSAEncryption
d1:ef:ac:00:d7:0e:d9:de:12:5f:fb:4a:f5:59:5c:38:c8:d9:
77:76:c7:6b:ac:b0:b4:34:b2:d2:78:d3:91:6a:7c:57:ee:d2:
84:86:17:94:9e:f0:c7:93:97:78:68:b8:fb:fd:8b:5b:6b:73:
fd:6b:27:9f:a4:9a:5f:30:5f:c5:b3:e4:ca:29:8d:93:a3:9e:
f0:4e:33:71:fa:da:e7:11:4b:9c:44:62:c8:2a:19:4b:32:18:
44:f7:36:27:be:91:5b:6d:7d:04:d0:52:14:c7:b2:4d:99:be:
0e:70:82:a3:37:55:e8:35:85:15:30:4a:8f:99:2a:f6:5d:b8:
39:fd:61:8a:93:cf:e6:47:8d:ae:10:d6:d4:72:02:49:83:c2:
e2:ff:f5:7e:52:52:8a:b1:e8:6a:f3:ea:47:0a:bf:b6:15:18:
bf:f6:63:7e:91:9a:52:96:f8:18:9c:04:95:40:2d:8a:cd:39:
21:1b:28:68:2a:c6:9b:a7:74:41:d1:c4:36:3d:e6:3b:9e:70:
b6:72:a5:91:7b:bb:1b:44:31:73:a7:f9:54:26:e2:6d:da:33:
3c:06:73:3d:5f:ff:df:5d:bb:2b:95:57:78:a8:82:53:af:46:
24:a8:5f:b3:35:02:71:04:b3:9c:4b:ef:4a:10:67:6c:c4:2f:
53:db:88:62
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAtfDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkyMjE0MTE0MloXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTFENTExMTAvBgNVBAUTKERGOTFCNzcwQkMzMUI1MkZDODk0QkRE
ODRBNjc1ODI3NUFBRTUzMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTh1seqkQ0CRe+CblzVYqmu3pLWSYPXuxG6RbjEKtbGfpKFgwdNua3+wOCTvjB
qqcTaDazZaIdGazTMRoYMzxuZbidbFSpEuAagMem6xdud9tujWWqsY1xqL6V2Glu
jp0+ikaohdVZ3/qIpUEeeVtCGky3CieGj3Q/33XAsCJz7LAcw1+BhX8His1qib0l
IO98rc+vx+MHyb5oknQOez8E0DvLMVFIcJgVKQriiA70nbbxWGzvOq70lY/l2dZG
BjI105aHNSovqv6/Gw80GvkPDRd7oGexZJbb64tlJP47JtGUXgxvyWzJvOMyzTCu
V9bgD+hC4jNUkLmhqR5Wuyk7AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU35G3cLwx
tS/IlL3YSmdYJ1quUx0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUxRDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMUQ1MS9BNjgyRTFDNDhGQzcxMUYwOEE5MzU2M0FDNEY5QUUwMi8zNUczY0x3
eHRTX0lsTDNZU21kWUoxcXVVeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlpIMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBygbOMA0EAgAC
MAcDBQAkAiZgMA0GCSqGSIb3DQEBCwUAA4IBAQDR76wA1w7Z3hJf+0r1WVw4yNl3
dsdrrLC0NLLSeNORanxX7tKEhheUnvDHk5d4aLj7/Ytba3P9ayefpJpfMF/Fs+TK
KY2To57wTjNx+trnEUucRGLIKhlLMhhE9zYnvpFbbX0E0FIUx7JNmb4OcIKjN1Xo
NYUVMEqPmSr2Xbg5/WGKk8/mR42uENbUcgJJg8Li//V+UlKKsehq8+pHCr+2FRi/
9mN+kZpSlvgYnASVQC2KzTkhGyhoKsabp3RB0cQ2PeY7nnC2cqWRe7sbRDFzp/lU
JuJt2jM8BnM9X//fXbsrlVd4qIJTr0YkqF+zNQJxBLOcS+9KEGdsxC9T24hi
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:15:42 2026 by rpki-client