Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
File: EvCJbho8vyUBkQAJ2YeQa6U8bME.cer (raw, json)
Hash identifier: r9LouOQtgRCHfF5feMO3aL3mzG71IY1tyCFsVgSaHDo=
Subject key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A374
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Mar 2026 04:10:05 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 152884
IP: 2001:df3:d5c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172916 (0x2a374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 10 04:10:05 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:fe:e9:12:56:3d:c0:dd:56:3c:94:eb:dd:
ea:64:0f:1a:37:8f:58:50:79:4b:eb:6d:7f:fc:d6:
8e:57:59:4d:fa:88:cc:09:22:b8:3a:2a:c0:de:ba:
90:5e:57:b4:19:75:4d:ee:91:73:a6:41:62:1e:fa:
0c:82:04:99:a6:48:d3:74:2b:a9:71:57:b1:00:1e:
db:05:ad:fe:88:3b:ee:bf:96:63:e9:87:9d:f0:18:
0e:88:db:5f:8f:bc:b8:3e:05:c9:6f:a5:87:cd:5f:
3b:8d:48:5f:99:9b:b7:4d:d2:52:c1:1b:46:08:d5:
56:93:df:15:49:cd:8e:75:90:a2:d3:3d:63:4d:22:
f3:c0:a8:b4:46:8c:ea:99:41:b5:f0:7a:6e:f3:a8:
0c:da:b5:28:49:aa:f7:fa:10:ca:f9:73:cd:98:0a:
00:5b:2f:b1:1b:fc:5f:85:fb:3b:c6:e7:37:35:1b:
91:a0:19:49:e2:ba:e0:78:8e:bc:89:6c:72:58:a1:
67:af:50:6a:d7:3e:41:72:a6:f3:7f:d5:91:27:b3:
8a:bf:ef:a9:05:4f:48:57:17:b8:be:32:13:9c:2e:
98:93:21:1e:f9:fd:9d:8f:2f:f4:eb:6b:4d:c0:84:
f7:3f:b1:5f:ac:6f:c7:44:6e:9c:e2:bc:88:ea:fc:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152884
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:d5c0::/48
Signature Algorithm: sha256WithRSAEncryption
34:93:ef:e4:fd:e1:ec:35:61:b4:66:0c:62:8f:69:4b:a5:8c:
81:f9:d7:d2:1b:58:2a:36:02:a4:eb:e6:d7:1b:e1:d3:b9:6a:
f8:93:4a:68:94:5e:19:cc:dc:b5:50:9e:6f:9c:3a:52:89:94:
d6:3e:e9:76:a7:ea:34:89:94:eb:81:8d:4b:40:f9:8e:9f:a9:
36:23:9e:5c:26:59:29:b3:a1:35:ed:82:84:41:e2:3e:92:4d:
cf:76:e6:19:34:84:d8:25:05:42:1c:8d:a2:22:b7:a5:0b:97:
fd:2b:14:cd:3e:a2:41:5c:1f:ae:16:b2:88:8a:d3:15:ad:c3:
fe:43:64:31:89:02:58:d0:42:f9:8a:76:6c:52:24:d8:7b:7c:
f6:e2:16:61:b7:74:93:4a:d5:4a:c1:bc:79:aa:ef:09:33:5c:
12:2d:2b:c1:11:29:7f:2e:30:b1:ee:94:5e:63:83:58:fc:33:
8f:7b:12:ce:bc:8a:bb:57:f0:60:7b:5b:98:ef:d9:e7:25:48:
f7:2c:f0:db:b4:d3:ab:5b:fa:af:70:60:a6:a8:d5:96:9f:8f:
c4:69:23:4d:7d:eb:9d:30:03:23:d0:b5:db:b3:20:c3:5c:dc:
86:77:37:31:c7:b3:cd:f7:c1:c0:7d:e7:33:f9:0f:27:ba:b1:
73:a1:79:e0
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAqN0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMxMDA0MTAwNVoXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTNGOTAxMTAvBgNVBAUTKDEyRjA4OTZFMUEzQ0JGMjUwMTkxMDAw
OUQ5ODc5MDZCQTUzQzZDQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC6v7pElY9wN1WPJTr3epkDxo3j1hQeUvrbX/81o5XWU36iMwJIrg6KsDeupBe
V7QZdU3ukXOmQWIe+gyCBJmmSNN0K6lxV7EAHtsFrf6IO+6/lmPph53wGA6I21+P
vLg+BclvpYfNXzuNSF+Zm7dN0lLBG0YI1VaT3xVJzY51kKLTPWNNIvPAqLRGjOqZ
QbXwem7zqAzatShJqvf6EMr5c82YCgBbL7Eb/F+F+zvG5zc1G5GgGUniuuB4jryJ
bHJYoWevUGrXPkFypvN/1ZEns4q/76kFT0hXF7i+MhOcLpiTIR75/Z2PL/Tra03A
hPc/sV+sb8dEbpzivIjq/PIJAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUEvCJbho8
vyUBkQAJ2YeQa6U8bMEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUzRjkwLzAxRkEwMDcyMUMzNzExRjE4ODQ3QUIyQjM4M0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1M0Y5MC8wMUZBMDA3MjFDMzcxMUYxODg0N0FCMkIzODNEOEM2Ny9FdkNKYmhv
OHZ5VUJrUUFKMlllUWE2VThiTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlU0MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN89XAMA0G
CSqGSIb3DQEBCwUAA4IBAQA0k+/k/eHsNWG0Zgxij2lLpYyB+dfSG1gqNgKk6+bX
G+HTuWr4k0polF4ZzNy1UJ5vnDpSiZTWPul2p+o0iZTrgY1LQPmOn6k2I55cJlkp
s6E17YKEQeI+kk3PduYZNITYJQVCHI2iIrelC5f9KxTNPqJBXB+uFrKIitMVrcP+
Q2QxiQJY0EL5inZsUiTYe3z24hZht3STStVKwbx5qu8JM1wSLSvBESl/LjCx7pRe
Y4NY/DOPexLOvIq7V/Bge1uY79nnJUj3LPDbtNOrW/qvcGCmqNWWn4/EaSNNfeud
MAMj0LXbsyDDXNyGdzcxx7PN98HAfecz+Q8nurFzoXng
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:33 2026 by rpki-client