Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer (raw, json)
Hash identifier: 2nddJ1iAaQ9OnLP297eYZAKxhK4Wuym0feOGwgJABe0=
Subject key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C509
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Jul 2026 14:41:35 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 133113
IP: 2001:df5:aa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181513 (0x2c509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 14 14:41:35 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:de:53:14:81:2b:e0:da:35:a1:54:be:6c:53:
a6:90:50:f6:33:99:3c:bc:5d:9f:c3:50:f6:ec:51:
27:be:dd:f2:51:7f:23:a5:ee:3a:c9:ee:d9:bf:6c:
0b:e0:86:40:3b:bb:af:04:06:87:98:4a:de:56:ce:
2b:82:04:4c:45:af:23:f0:97:99:c5:e3:ce:e4:2d:
41:b5:d9:0a:83:b9:d7:e5:0e:87:21:1e:af:78:2a:
3c:28:c9:ec:9e:77:90:de:8b:44:14:96:d7:3d:d8:
c6:fa:f0:0c:cf:d3:de:e0:d4:c7:70:00:92:6e:a1:
e4:65:eb:67:2d:4f:69:c1:36:b0:30:aa:e1:2e:ee:
a4:81:12:2c:69:b1:3c:9c:97:42:e0:b0:75:6a:75:
09:b0:f2:31:6e:67:14:25:cb:ac:f2:84:cd:ef:ee:
c4:ed:2e:9a:cd:39:df:cf:51:53:e0:4f:48:ca:4e:
cb:d0:90:c3:ad:b5:16:e4:19:70:77:16:dd:a7:a7:
73:71:5b:e4:cc:2c:37:5a:35:a5:4c:1f:fc:9b:7b:
f3:41:76:8d:c8:6d:cb:35:77:dc:4d:02:58:dd:44:
14:30:0f:9c:45:47:a0:02:ad:8f:56:f9:be:5e:b8:
30:3f:b2:91:d2:d4:2d:33:72:e5:37:5e:a7:14:f8:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133113
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:aa40::/48
Signature Algorithm: sha256WithRSAEncryption
a5:da:59:fb:b5:f0:e0:51:b3:7f:49:1f:4a:f3:e2:c1:31:61:
e3:1e:49:5c:b7:4e:c9:8f:64:85:5a:f9:ca:52:26:71:56:15:
a2:99:e4:64:06:0c:3f:c7:5d:d8:95:c4:d8:ad:ac:b8:40:b6:
07:e3:bc:55:25:c4:62:6e:9a:3c:1f:44:c8:03:76:0d:3d:7d:
cc:85:d1:0f:a3:5b:c3:1d:f5:91:c9:ee:eb:af:83:9d:67:55:
48:5e:10:10:1e:55:9e:11:a7:1a:ed:9b:65:f8:a1:e4:47:07:
bf:5c:6f:b7:fe:25:ae:13:95:0a:b2:02:8f:36:00:a8:90:12:
44:5c:9f:65:53:f1:81:b5:e6:19:a7:69:db:5a:46:b2:cc:38:
55:95:e8:4c:0f:9f:88:10:5e:22:02:b6:ba:b2:d9:16:94:9a:
9a:eb:f3:7a:b5:d0:90:55:51:03:48:0e:43:3c:9d:f3:cd:71:
9f:dd:bb:4c:d2:01:ab:8c:de:02:65:7a:3d:00:b3:4b:67:4f:
98:d2:f3:d3:ba:39:09:50:09:73:b3:a8:65:73:78:ca:49:97:
e6:92:c6:6c:37:cf:4d:1d:dc:8d:7d:0c:4e:3f:11:c6:62:0f:
bf:d3:30:81:5f:56:44:9a:bc:37:d0:4e:e0:e5:1f:b2:02:4f:
48:1c:32:ec
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAsUJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcxNDE0NDEzNVoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjhBODYxMTAvBgNVBAUTKDI0NUZGNDVDMjg2NTJCRjcxNTY1ODVB
M0ZEOUE3OTc0RTUzNzVEMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDv3lMUgSvg2jWhVL5sU6aQUPYzmTy8XZ/DUPbsUSe+3fJRfyOl7jrJ7tm/bAvg
hkA7u68EBoeYSt5WziuCBExFryPwl5nF487kLUG12QqDudflDochHq94Kjwoyeye
d5Dei0QUltc92Mb68AzP097g1MdwAJJuoeRl62ctT2nBNrAwquEu7qSBEixpsTyc
l0LgsHVqdQmw8jFuZxQly6zyhM3v7sTtLprNOd/PUVPgT0jKTsvQkMOttRbkGXB3
Ft2np3NxW+TMLDdaNaVMH/ybe/NBdo3Ibcs1d9xNAljdRBQwD5xFR6ACrY9W+b5e
uDA/spHS1C0zcuU3XqcU+K6tAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUJF/0XChl
K/cVZYWj/Zp5dOU3XQMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI4QTg2L0I2M0YzMUFFNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCOEE4Ni9CNjNGMzFBRTRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi9KRl8wWENo
bEtfY1ZaWVdqX1pwNWRPVTNYUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgf5MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9apAMA0G
CSqGSIb3DQEBCwUAA4IBAQCl2ln7tfDgUbN/SR9K8+LBMWHjHklct07Jj2SFWvnK
UiZxVhWimeRkBgw/x13YlcTYray4QLYH47xVJcRibpo8H0TIA3YNPX3MhdEPo1vD
HfWRye7rr4OdZ1VIXhAQHlWeEaca7Ztl+KHkRwe/XG+3/iWuE5UKsgKPNgCokBJE
XJ9lU/GBteYZp2nbWkayzDhVlehMD5+IEF4iAra6stkWlJqa6/N6tdCQVVEDSA5D
PJ3zzXGf3btM0gGrjN4CZXo9ALNLZ0+Y0vPTujkJUAlzs6hlc3jKSZfmksZsN89N
HdyNfQxOPxHGYg+/0zCBX1ZEmrw30E7g5R+yAk9IHDLs
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:43 2026 by rpki-client