Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
File: H2wzTrxkYqJkUoZ6u1-E72itwCw.cer (raw, json)
Hash identifier: 99Lom6BofXFMdSMZhx76HLb5ZMfaTtpnvdAVOEzHWOQ=
Subject key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D3A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Sep 2026 12:38:44 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 55707
AS: 56129
IP: 103.1.108.0/22
IP: 103.23.104.0/22
IP: 163.47.252.0/22
IP: 203.31.114.0/23
IP: 223.25.112.0/21
IP: 2406:8a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185252 (0x2d3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 3 12:38:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:d5:e6:6d:f5:3b:df:6d:09:c1:79:a3:0a:
77:50:f0:2d:4c:c8:7c:cf:8f:51:a0:6f:92:72:c0:
bb:c1:7f:32:60:8a:3f:d5:1c:c7:56:d2:eb:52:cc:
24:6a:73:09:aa:b8:98:79:23:be:96:4e:41:7c:de:
71:d9:c3:00:39:b3:ac:af:ca:39:52:dd:12:18:6b:
a0:00:b8:af:a4:b2:e3:8d:73:23:20:11:ce:61:96:
09:fa:88:57:5b:7f:51:87:8e:a0:ba:d6:16:85:36:
a4:38:15:8b:ae:3b:41:75:76:9a:69:6b:05:c8:e5:
69:fe:2d:97:6c:6f:34:b4:b4:8d:bc:08:cd:06:67:
1f:5f:09:1d:40:ce:7e:0b:6f:4d:87:13:8c:0d:c4:
63:e0:3d:f0:21:a5:06:6d:87:0d:13:74:10:d9:23:
40:a8:66:34:3b:5d:74:4a:0c:f2:e7:ac:7c:0f:00:
83:e0:89:ec:1b:a7:57:d7:60:b7:cd:b8:c5:59:0a:
b0:a6:bc:8c:c8:db:d0:f3:87:c3:c4:19:09:1e:c6:
8f:b6:c0:0a:98:b7:0f:28:7a:f0:85:ef:7e:c7:51:
03:3d:bf:b1:04:7c:20:87:b0:7c:7e:14:24:b7:ee:
4b:f9:e2:65:d2:75:7a:3a:2a:84:2e:05:96:d7:c4:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55707
56129
sbgp-ipAddrBlock: critical
IPv4:
103.1.108.0/22
103.23.104.0/22
163.47.252.0/22
203.31.114.0/23
223.25.112.0/21
IPv6:
2406:8a00::/32
Signature Algorithm: sha256WithRSAEncryption
6a:d8:4d:85:48:49:32:31:cf:03:05:85:1c:86:1a:39:ab:87:
f6:f8:f4:3c:fd:57:1a:55:25:0b:12:81:14:f3:d1:a4:f7:22:
30:87:30:0f:db:e1:b0:11:54:86:4e:b2:01:47:2f:aa:b5:50:
95:45:ca:6f:cf:a1:12:39:3d:e4:8c:65:54:4c:ae:08:95:99:
ca:18:00:d4:28:4b:9c:c9:64:54:e6:ee:29:65:16:d6:22:0d:
25:e2:c8:af:8c:ae:99:e6:5a:57:c9:af:5b:b6:99:6a:8c:a2:
8d:31:80:09:ea:53:75:92:c0:1f:e1:22:62:7f:b1:9d:7f:0e:
98:2c:ec:8b:cd:4c:66:5f:45:78:6f:08:91:85:76:c2:74:5f:
4b:36:fb:e6:09:3a:e7:2e:29:e0:b9:e3:11:14:73:5a:7a:0a:
5d:73:d8:bb:a5:47:f1:51:f6:ee:2a:14:ba:c1:60:af:14:48:
2b:c6:fe:a1:ba:1b:3f:75:f1:fa:df:80:54:fc:b1:a4:d8:e3:
47:0b:c6:18:7f:43:71:47:0a:78:66:3f:5a:26:a9:e9:55:12:
03:79:1d:fa:59:4c:48:a7:4f:fc:30:e3:09:89:f9:6b:78:36:
3d:01:e2:c0:87:d3:74:b2:1f:8a:9a:86:03:15:00:fc:33:9f:
3f:6e:73:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIDAtOkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkwMzEyMzg0NFoXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzg0NDcxMTAvBgNVBAUTKDFGNkMzMzRFQkM2NDYyQTI2NDUyODY3
QUJCNUY4NEVGNjhBREMwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5SNXmbfU7320JwXmjCndQ8C1MyHzPj1Ggb5JywLvBfzJgij/VHMdW0utSzCRq
cwmquJh5I76WTkF83nHZwwA5s6yvyjlS3RIYa6AAuK+ksuONcyMgEc5hlgn6iFdb
f1GHjqC61haFNqQ4FYuuO0F1dpppawXI5Wn+LZdsbzS0tI28CM0GZx9fCR1Azn4L
b02HE4wNxGPgPfAhpQZthw0TdBDZI0CoZjQ7XXRKDPLnrHwPAIPgiewbp1fXYLfN
uMVZCrCmvIzI29Dzh8PEGQkexo+2wAqYtw8oevCF737HUQM9v7EEfCCHsHx+FCS3
7kv54mXSdXo6KoQuBZbXxLxnAgMBAAGjggM7MIIDNzAdBgNVHQ4EFgQUH2wzTrxk
YqJkUoZ6u1+E72itwCwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM4NDQ3LzRDRUIzQzNDQjBGRDExRUE4QTA5OTI0MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzODQ0Ny80Q0VCM0MzQ0IwRkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4
a1lxSmtVb1o2dTEtRTcyaXR3Q3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDANmbAgMA20EwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAJnAWwD
BAJnF2gDBAKjL/wDBAHLH3IDBAPfGXAwDQQCAAIwBwMFACQGigAwDQYJKoZIhvcN
AQELBQADggEBAGrYTYVISTIxzwMFhRyGGjmrh/b49Dz9VxpVJQsSgRTz0aT3IjCH
MA/b4bARVIZOsgFHL6q1UJVFym/PoRI5PeSMZVRMrgiVmcoYANQoS5zJZFTm7ill
FtYiDSXiyK+MrpnmWlfJr1u2mWqMoo0xgAnqU3WSwB/hImJ/sZ1/Dpgs7IvNTGZf
RXhvCJGFdsJ0X0s2++YJOucuKeC54xEUc1p6Cl1z2LulR/FR9u4qFLrBYK8USCvG
/qG6Gz918frfgFT8saTY40cLxhh/Q3FHCnhmP1omqelVEgN5HfpZTEinT/ww4wmJ
+Wt4Nj0B4sCH03SyH4qahgMVAPwznz9ucz4=
-----END CERTIFICATE-----
Generated at Sun Oct 4 23:21:02 2026 by rpki-client