Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
File: F_M9uCahQtM3xeuZhL4txPm8ZCk.cer (raw, json)
Hash identifier: UUdkr4pH3nnvRVUKu5BUKm11WjesXWro64EgI9fbGeI=
Subject key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A2B6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Mar 2026 14:17:16 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 132125
AS: 150795
IP: 103.247.72.0/22
IP: 2402:f300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172726 (0x2a2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 5 14:17:16 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:2e:66:db:ca:1a:ae:df:46:34:a8:2a:c3:
91:37:a1:08:38:30:d1:90:81:97:ff:8d:da:d5:a2:
d7:4a:1d:71:e8:b1:e9:2a:aa:20:2d:05:91:cc:0c:
ab:8c:bd:19:4f:a7:3c:0b:a1:75:0e:ca:6e:ee:d4:
73:87:76:6f:85:89:7b:26:5c:6e:11:70:ef:de:dc:
eb:15:b4:8c:89:e4:ec:4b:82:c8:5b:30:1a:a9:9e:
30:9b:8c:a4:15:66:a6:39:4f:ca:c9:ab:20:20:78:
43:ea:96:71:1e:83:b9:04:f3:23:f1:ec:b7:3b:7f:
9e:73:45:86:0e:1d:1f:f5:48:06:7a:02:64:aa:05:
7c:8c:b9:d4:7c:6b:04:68:f8:3a:84:0e:d6:04:2e:
23:06:e2:c0:0c:a3:18:ef:ad:e4:ea:14:f5:cc:34:
cd:46:8f:99:7c:18:53:c3:3f:dd:95:f6:c9:99:4d:
df:7c:73:42:84:06:1b:78:db:7c:9f:f5:29:85:13:
c0:8f:5a:f9:83:c2:16:ce:52:6f:57:6a:9d:bb:c8:
e7:56:b6:f7:36:09:60:de:7f:9e:6d:18:05:92:99:
9b:c0:75:10:b0:89:b5:c8:25:b9:24:a5:96:b9:a1:
5d:5d:d1:dd:9a:0b:b7:d9:59:a4:4d:f7:ea:05:6f:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132125
150795
sbgp-ipAddrBlock: critical
IPv4:
103.247.72.0/22
IPv6:
2402:f300::/32
Signature Algorithm: sha256WithRSAEncryption
cc:6f:d7:54:d0:e2:0f:b1:d5:c5:bf:02:cc:94:51:ea:3e:2c:
71:0e:eb:3a:63:d3:53:c4:1a:97:f9:fa:a8:d3:5e:00:00:56:
10:59:ec:ad:69:fe:18:da:09:d9:0b:9f:5b:35:34:4f:12:38:
9b:eb:8e:b8:58:04:56:4e:c4:48:dc:19:dc:80:65:e1:85:a2:
2a:f9:7c:27:35:cc:b8:a7:b1:82:e0:9b:19:4f:9e:2a:2d:ac:
88:d2:7a:a0:4e:bd:3c:86:32:fc:04:18:38:f6:bd:e0:26:2c:
c8:dc:c6:36:86:49:63:4f:8c:1e:04:70:b9:e3:0f:72:d7:63:
7a:b2:58:68:c8:3b:f2:65:69:bd:bf:93:5f:d1:21:c6:28:d7:
58:9a:9c:63:2e:9f:e8:04:b5:ed:d0:a9:19:d0:42:9c:94:8b:
fb:16:f6:fb:cd:0d:ce:75:ae:66:7e:ee:c2:aa:7f:7e:4b:b1:
25:46:ab:13:dc:f3:02:67:e3:d4:9a:41:eb:04:b6:83:00:53:
0e:60:19:1f:36:1d:41:ee:b0:b5:b2:fb:af:e3:c2:3d:13:85:
f4:41:09:05:33:69:e7:34:6b:50:a1:85:41:ac:ac:1a:82:82:
52:95:cb:8c:0c:cf:42:88:d9:f5:77:d8:42:33:55:28:8f:39:
2a:ea:f2:c5
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIDAqK2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwNTE0MTcxNloXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5
OTg0QkUyREM0RjlCQzY0MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDooy5m28oart9GNKgqw5E3oQg4MNGQgZf/jdrVotdKHXHosekqqiAtBZHMDKuM
vRlPpzwLoXUOym7u1HOHdm+FiXsmXG4RcO/e3OsVtIyJ5OxLgshbMBqpnjCbjKQV
ZqY5T8rJqyAgeEPqlnEeg7kE8yPx7Lc7f55zRYYOHR/1SAZ6AmSqBXyMudR8awRo
+DqEDtYELiMG4sAMoxjvreTqFPXMNM1Gj5l8GFPDP92V9smZTd98c0KEBht423yf
9SmFE8CPWvmDwhbOUm9Xap27yOdWtvc2CWDef55tGAWSmZvAdRCwibXIJbkkpZa5
oV1d0d2aC7fZWaRN9+oFbwurAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQUF/M9uCah
QtM3xeuZhL4txPm8ZCkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJGQTI5LzBGMUE0RTY0MURBQTExRTI4RTcyN0RBNTA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCRkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNh
aFF0TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAgQdAgMCTQswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJn90gw
DQQCAAIwBwMFACQC8wAwDQYJKoZIhvcNAQELBQADggEBAMxv11TQ4g+x1cW/AsyU
Ueo+LHEO6zpj01PEGpf5+qjTXgAAVhBZ7K1p/hjaCdkLn1s1NE8SOJvrjrhYBFZO
xEjcGdyAZeGFoir5fCc1zLinsYLgmxlPniotrIjSeqBOvTyGMvwEGDj2veAmLMjc
xjaGSWNPjB4EcLnjD3LXY3qyWGjIO/Jlab2/k1/RIcYo11ianGMun+gEte3QqRnQ
QpyUi/sW9vvNDc51rmZ+7sKqf35LsSVGqxPc8wJn49SaQesEtoMAUw5gGR82HUHu
sLWy+6/jwj0ThfRBCQUzaec0a1ChhUGsrBqCglKVy4wMz0KI2fV32EIzVSiPOSrq
8sU=
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:37:05 2026 by rpki-client