Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
File: IcjytuAdCoLRPDUYjDyT5vUUupQ.cer (raw, json)
Hash identifier: r//52EQMkRIa43TUQCe5D7BuRo8wi62qNvcTGtudjIo=
Subject key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AD99
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Apr 2026 14:01:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 139828
IP: 202.27.48.0 -- 202.27.59.255
IP: 2404:9f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175513 (0x2ad99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 20 14:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:27:56:e6:30:23:2b:1b:18:50:7a:63:77:
0a:d1:1f:0d:c4:54:09:01:b2:5d:d9:02:df:97:4a:
fd:9e:d6:0b:88:83:65:df:87:46:ca:88:ab:28:e6:
3e:db:a4:7b:e0:16:3e:65:79:6c:a8:5c:87:e4:9a:
cb:7b:68:3d:e4:cb:c4:78:8f:95:91:b2:38:f4:39:
58:a3:2c:a7:cf:64:c3:87:1c:60:8c:d6:4e:b0:dd:
90:84:3d:ed:13:cd:06:ba:59:0b:dc:5e:4b:6c:48:
6c:43:8a:98:ea:91:be:cd:30:f7:6c:a3:e4:52:be:
e3:46:87:5b:04:77:c4:1d:7a:6c:70:87:d3:48:14:
21:37:f2:3b:7d:42:03:5d:ea:39:ee:38:dc:43:78:
da:73:16:f1:ef:9d:0a:b7:1a:26:d0:60:33:15:90:
32:d3:8a:96:af:6d:32:82:f1:eb:9e:2d:8f:e6:31:
a7:e9:17:d0:10:e3:19:bd:b1:e4:6d:c9:2e:92:93:
ce:53:37:d9:56:f1:ea:44:7a:1f:3c:c2:50:f1:e8:
a9:68:54:64:aa:37:79:6c:76:8f:76:23:78:77:40:
5d:a3:fa:12:ad:7c:f0:20:ac:98:0d:1d:5c:63:66:
27:99:76:8c:86:dc:85:37:5b:81:e3:98:4d:73:35:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139828
sbgp-ipAddrBlock: critical
IPv4:
202.27.48.0-202.27.59.255
IPv6:
2404:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
2d:b6:bc:b8:f8:4e:5b:2f:a5:9e:80:d1:0c:b7:55:ee:6c:81:
34:8f:9b:a0:52:f6:93:f8:6f:58:01:e2:21:f7:bd:83:6b:c6:
de:36:13:22:18:62:d5:2d:11:b5:5c:19:f7:59:70:d7:98:52:
00:ed:8c:8f:88:65:16:1d:ac:9a:90:70:14:85:8c:5f:ee:3b:
cf:ec:9d:50:8a:d1:c3:3a:f5:1c:66:75:69:01:16:e8:41:8c:
00:24:a7:0f:72:8c:76:4f:71:e4:2d:4b:4d:8e:b4:c3:9b:29:
46:14:bc:38:3a:94:97:e5:4e:c9:36:1a:6c:2c:af:bb:e9:72:
27:1b:63:84:5e:c2:1d:3b:eb:12:4b:9c:40:4d:69:3a:67:94:
30:2c:c8:f1:de:19:6e:45:47:5a:78:db:78:6d:17:60:6f:80:
be:30:ad:21:37:df:3a:cd:6a:99:07:7c:dc:e1:89:a4:7e:06:
42:39:df:c3:b9:24:11:9f:99:08:98:12:32:67:12:b5:71:cd:
5c:6e:37:aa:ea:98:56:e2:c2:9c:4d:82:b0:4e:c1:00:92:22:
fc:6e:02:d8:44:bb:bb:35:e1:31:04:ce:cf:24:f9:f9:4f:25:
d6:ba:82:6c:76:a5:89:f0:88:90:2e:e5:a2:da:28:85:c5:53:
ee:90:87:c8
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAq2ZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyMDE0MDEzOVoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTlDNjIxMTAvBgNVBAUTKDIxQzhGMkI2RTAxRDBBODJEMTNDMzUx
ODhDM0M5M0U2RjUxNEJBOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLtSdW5jAjKxsYUHpjdwrRHw3EVAkBsl3ZAt+XSv2e1guIg2Xfh0bKiKso5j7b
pHvgFj5leWyoXIfkmst7aD3ky8R4j5WRsjj0OVijLKfPZMOHHGCM1k6w3ZCEPe0T
zQa6WQvcXktsSGxDipjqkb7NMPdso+RSvuNGh1sEd8Qdemxwh9NIFCE38jt9QgNd
6jnuONxDeNpzFvHvnQq3GibQYDMVkDLTipavbTKC8eueLY/mMafpF9AQ4xm9seRt
yS6Sk85TN9lW8epEeh88wlDx6KloVGSqN3lsdo92I3h3QF2j+hKtfPAgrJgNHVxj
ZieZdoyG3IU3W4HjmE1zNRUJAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUIcjytuAd
CoLRPDUYjDyT5vUUupQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE5QzYyLzBBRUFBQ0Q2NkI2NjExRjBCN0Y4RUI0MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBOUM2Mi8wQUVBQUNENjZCNjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVB
ZENvTFJQRFVZakR5VDV2VVV1cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiI0MDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBATKGzADBALK
GzgwDQQCAAIwBwMFACQEnwAwDQYJKoZIhvcNAQELBQADggEBAC22vLj4TlsvpZ6A
0Qy3Ve5sgTSPm6BS9pP4b1gB4iH3vYNrxt42EyIYYtUtEbVcGfdZcNeYUgDtjI+I
ZRYdrJqQcBSFjF/uO8/snVCK0cM69RxmdWkBFuhBjAAkpw9yjHZPceQtS02OtMOb
KUYUvDg6lJflTsk2Gmwsr7vpcicbY4Rewh076xJLnEBNaTpnlDAsyPHeGW5FR1p4
23htF2BvgL4wrSE33zrNapkHfNzhiaR+BkI538O5JBGfmQiYEjJnErVxzVxuN6rq
mFbiwpxNgrBOwQCSIvxuAthEu7s14TEEzs8k+flPJda6gmx2pYnwiJAu5aLaKIXF
U+6Qh8g=
-----END CERTIFICATE-----
Generated at Wed May 13 04:04:33 2026 by rpki-client