Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer
File: Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer (raw, json)
Hash identifier: 3/BsTK2FQQA67mt3CeTJJjXmeNP+dwOPnWOW1zuo344=
Subject key identifier: 11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C4E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Jul 2026 05:32:48 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 43.249.172.0/22
IP: 103.41.4.0/22
IP: 2401:c480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181472 (0x2c4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 14 05:32:48 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9142C40, serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:27:b4:20:8e:3f:9c:2d:8c:78:16:94:29:
07:61:95:47:81:8b:83:c3:db:d7:91:98:d9:f2:4e:
eb:a6:2c:46:8a:87:e4:79:9e:70:27:35:23:b6:78:
cd:3a:b7:6e:85:ce:bc:d4:a0:30:39:a8:af:43:92:
51:04:ed:31:2b:5e:7c:07:b8:3a:87:89:68:d8:68:
82:28:cd:e7:b1:b0:cf:04:0a:6c:50:22:f1:35:de:
12:46:a5:7f:49:12:55:c1:62:fe:bd:16:85:6a:79:
2a:83:2d:31:3e:9e:ec:fc:db:a7:21:38:2e:34:2f:
da:3b:5e:9c:dd:1a:f6:4e:99:83:b7:4f:c0:dc:03:
70:79:d3:75:db:e9:89:68:a1:d1:31:b6:d8:e5:5c:
b4:54:6a:64:3b:61:b5:0d:9c:4b:eb:90:a6:27:51:
ff:a3:06:04:1a:0b:ad:d0:3e:85:89:ac:40:98:49:
1b:d5:2d:7c:74:c8:e0:e0:c0:8a:9f:32:bd:ff:fc:
14:42:c7:f0:fd:30:dc:6a:bc:f5:60:86:f4:fe:6f:
5e:a8:d4:5b:03:d3:82:1f:a9:e1:b3:09:0a:b1:69:
a0:29:3e:0a:a7:54:41:d8:03:0c:e3:72:10:17:f6:
f3:57:52:b4:1d:1e:bf:bb:64:ca:37:e4:de:74:0b:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.172.0/22
103.41.4.0/22
IPv6:
2401:c480::/32
Signature Algorithm: sha256WithRSAEncryption
1d:51:3f:e3:9c:70:e7:5d:d8:0c:31:df:ec:9b:c6:2a:86:f2:
64:42:97:17:3f:12:77:9f:45:35:55:59:a6:16:1b:bc:a2:30:
69:93:af:6a:a2:20:50:75:5d:31:4d:1c:f7:18:0d:03:47:7d:
00:7c:34:ec:44:69:c7:78:1e:fd:06:ca:8c:5b:d3:64:c4:0b:
a9:d6:95:b6:41:24:8d:0a:0e:98:0f:ee:3e:9c:c8:fb:c0:48:
bb:0d:4b:c5:31:d3:7a:b8:21:4b:70:15:10:46:2d:91:12:2a:
be:78:9d:83:66:c6:0a:f7:93:9c:d9:1d:bd:2d:b8:60:c6:21:
69:72:11:26:9a:fc:dd:1d:75:3d:e2:3c:f3:60:25:b5:17:c8:
22:a3:64:16:31:33:b0:c3:1a:55:ae:79:b0:c5:e0:76:03:c3:
52:9b:95:2e:d3:a5:32:0c:43:6f:fe:2a:51:0f:4c:54:f8:06:
66:47:af:4f:b9:1f:cb:35:34:46:08:e4:62:6c:e8:c1:63:08:
43:e8:88:2c:9c:3f:02:e5:97:e8:cc:f1:e1:1f:37:b2:47:14:
12:14:c2:d3:77:69:ab:a7:86:77:3e:d2:c4:e5:20:6f:06:4e:
02:84:88:40:e7:4d:60:7f:72:96:63:9e:ee:96:b2:1b:5f:25:
3a:58:6e:15
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgIDAsTgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcxNDA1MzI0OFoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDJDNDAxMTAvBgNVBAUTKDExQ0U0RTVBMkMwOEE3N0M0Mjc5RTAx
Q0NCNUJBRThDOEEwOUMyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCWJye0II4/nC2MeBaUKQdhlUeBi4PD29eRmNnyTuumLEaKh+R5nnAnNSO2eM06
t26FzrzUoDA5qK9DklEE7TErXnwHuDqHiWjYaIIozeexsM8ECmxQIvE13hJGpX9J
ElXBYv69FoVqeSqDLTE+nuz826chOC40L9o7XpzdGvZOmYO3T8DcA3B503Xb6Ylo
odExttjlXLRUamQ7YbUNnEvrkKYnUf+jBgQaC63QPoWJrECYSRvVLXx0yODgwIqf
Mr3//BRCx/D9MNxqvPVghvT+b16o1FsD04IfqeGzCQqxaaApPgqnVEHYAwzjchAX
9vNXUrQdHr+7ZMo35N50C3DfAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUEc5OWiwI
p3xCeeAcy1uujIoJwpMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQyQzQwLzcwMUNFOEZBN0Y0NTExRjFCQThBQTcwQzk1QTMwRkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0MkM0MC83MDFDRThGQTdGNDUxMUYxQkE4QUE3MEM5NUEzMEZCQy9FYzVPV2l3
SXAzeENlZUFjeTF1dWpJb0p3cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj
MBIEAgABMAwDBAIr+awDBAJnKQQwDQQCAAIwBwMFACQBxIAwDQYJKoZIhvcNAQEL
BQADggEBAB1RP+OccOdd2Awx3+ybxiqG8mRClxc/EnefRTVVWaYWG7yiMGmTr2qi
IFB1XTFNHPcYDQNHfQB8NOxEacd4Hv0Gyoxb02TEC6nWlbZBJI0KDpgP7j6cyPvA
SLsNS8Ux03q4IUtwFRBGLZESKr54nYNmxgr3k5zZHb0tuGDGIWlyESaa/N0ddT3i
PPNgJbUXyCKjZBYxM7DDGlWuebDF4HYDw1KblS7TpTIMQ2/+KlEPTFT4BmZHr0+5
H8s1NEYI5GJs6MFjCEPoiCycPwLll+jM8eEfN7JHFBIUwtN3aaunhnc+0sTlIG8G
TgKEiEDnTWB/cpZjnu6WshtfJTpYbhU=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:29 2026 by rpki-client