Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
File: F4xrtHazfF8V5ulTq-TLzwhhCCs.cer (raw, json)
Hash identifier: YGZGm5MIsKHV7WTHFAJp3QMol1JQ9CzvxStrJMdMkJY=
Subject key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A14C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:38:13 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 153527
IP: 2001:df4:ecc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 04:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172364 (0x2a14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 13:38:13 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:5e:41:f9:00:6d:2d:d9:be:d6:66:62:aa:
20:fb:e0:3a:b7:9f:a8:6f:b7:37:19:a2:6a:4c:5a:
19:50:2f:11:d4:30:15:8b:cf:c7:09:14:24:b8:61:
10:6c:47:5f:52:ba:f9:34:06:a9:3e:9f:8c:50:06:
b5:be:09:0f:73:d3:10:3f:45:b6:d7:28:e8:84:17:
77:3c:c8:6d:8f:62:8c:e3:16:2f:0f:52:9e:6e:9d:
7c:2c:b6:91:19:23:e7:c3:00:30:33:1f:a2:9a:d2:
26:a1:00:90:92:ea:fd:ef:ab:95:35:f3:36:77:6d:
27:5d:f2:c4:17:0f:71:e6:43:3b:00:15:12:9e:85:
a1:28:d1:35:ce:5e:29:9b:82:11:1e:9d:d7:36:83:
ce:d6:29:f1:27:b0:9b:f7:48:f4:3e:32:cc:d6:68:
a2:ea:81:b7:18:be:e6:30:d5:8e:ae:3d:c7:cb:55:
b4:3f:6e:46:f5:c0:9f:e8:35:fb:73:5b:8a:a0:09:
ab:c8:c8:8c:0f:90:dd:08:83:1d:39:2a:12:43:02:
be:ba:c2:be:e7:63:e6:cf:78:af:57:1f:84:f2:a2:
5e:8c:2d:b0:5a:7c:21:4b:ef:22:f3:c7:9c:e1:aa:
1f:8d:d6:43:15:02:06:8b:a8:17:73:b3:d5:ce:b0:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153527
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:ecc0::/48
Signature Algorithm: sha256WithRSAEncryption
08:2a:89:c1:92:f2:d1:b5:9c:a4:69:7d:97:2c:aa:21:30:a5:
a5:89:7d:f9:ca:58:3c:f8:10:59:f1:94:62:4d:15:89:2e:bf:
31:c6:47:f0:26:b1:eb:b4:c3:4e:96:3d:34:ff:ef:b5:23:0d:
36:71:c0:cc:c2:9d:c7:fd:9a:c4:67:be:05:22:f1:ae:c7:48:
27:51:3b:02:16:56:b1:d2:a6:74:b2:c1:e1:0d:6d:a0:d8:b9:
71:b0:cc:02:a3:c6:49:df:82:b4:33:67:99:35:3d:9c:7b:eb:
d9:9c:4d:e4:52:27:42:fe:49:f3:66:64:1e:15:25:e7:53:49:
e1:67:fc:d4:00:38:92:b1:54:77:65:0e:1e:f9:7a:b7:3c:39:
1f:f0:35:27:80:cb:0a:13:81:73:6a:70:80:69:95:65:0f:9f:
9d:44:88:01:34:f8:02:c5:d7:8f:51:29:8b:6f:24:9d:52:49:
53:45:61:a9:bf:38:53:c3:5d:fa:45:5a:53:3c:6c:10:9a:e1:
db:31:5e:13:b2:5f:41:eb:c5:88:bf:e4:fd:69:7b:e4:5d:a3:
c3:3f:6b:9c:b9:f5:f0:a8:71:e0:07:07:da:69:89:66:fe:56:
80:42:6a:01:81:37:f8:71:ac:d6:ea:36:35:37:bd:3e:95:96:
0b:ea:4c:61
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAqFMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwMjEzMzgxM1oXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzA5RjUxMTAvBgNVBAUTKDE3OEM2QkI0NzZCMzdDNUYxNUU2RTk1
M0FCRTRDQkNGMDg2MTA4MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2B15B+QBtLdm+1mZiqiD74Dq3n6hvtzcZompMWhlQLxHUMBWLz8cJFCS4YRBs
R19Suvk0Bqk+n4xQBrW+CQ9z0xA/RbbXKOiEF3c8yG2PYozjFi8PUp5unXwstpEZ
I+fDADAzH6Ka0iahAJCS6v3vq5U18zZ3bSdd8sQXD3HmQzsAFRKehaEo0TXOXimb
ghEendc2g87WKfEnsJv3SPQ+MszWaKLqgbcYvuYw1Y6uPcfLVbQ/bkb1wJ/oNftz
W4qgCavIyIwPkN0Igx05KhJDAr66wr7nY+bPeK9XH4Tyol6MLbBafCFL7yLzx5zh
qh+N1kMVAgaLqBdzs9XOsM/dAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUF4xrtHaz
fF8V5ulTq+TLzwhhCCswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcwOUY1LzNBODI5MEU4REZEQTExRUY4QjQ3ODYyNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MDlGNS8zQTgyOTBFOERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhh
emZGOFY1dWxUcS1UTHp3aGhDQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAle3MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9OzAMA0G
CSqGSIb3DQEBCwUAA4IBAQAIKonBkvLRtZykaX2XLKohMKWliX35ylg8+BBZ8ZRi
TRWJLr8xxkfwJrHrtMNOlj00/++1Iw02ccDMwp3H/ZrEZ74FIvGux0gnUTsCFlax
0qZ0ssHhDW2g2LlxsMwCo8ZJ34K0M2eZNT2ce+vZnE3kUidC/knzZmQeFSXnU0nh
Z/zUADiSsVR3ZQ4e+Xq3PDkf8DUngMsKE4FzanCAaZVlD5+dRIgBNPgCxdePUSmL
bySdUklTRWGpvzhTw136RVpTPGwQmuHbMV4Tsl9B68WIv+T9aXvkXaPDP2ucufXw
qHHgBwfaaYlm/laAQmoBgTf4cazW6jY1N70+lZYL6kxh
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:29 2026 by rpki-client