Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
File: KUHHFh7UouCbuRyrxEPIzLwDLtg.cer (raw, json)
Hash identifier: CNlh6qmQ9M7Wq0cDVRtWRACfAWdrLuwCO4ee1uK0EVk=
Subject key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE9D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 14:48:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 45148
IP: 119.252.192.0/19
IP: 2403:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175773 (0x2ae9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 23 14:48:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:a8:5e:7f:97:3d:a6:ea:5e:72:c4:52:b3:
9c:ad:d0:99:1a:4c:24:77:96:c4:68:bb:2c:52:0c:
0c:b7:1a:77:2c:d4:7d:9e:06:c3:f5:a9:0a:b3:d1:
13:29:28:9f:de:36:9a:bd:0f:f1:70:37:d7:5f:2a:
76:08:ce:fc:67:2d:c6:2e:3d:93:94:0e:90:3f:77:
27:38:c1:d4:2b:58:6d:69:b3:2b:ba:21:eb:59:99:
d2:fa:41:ee:3d:95:70:7f:da:40:d1:5f:f1:37:c3:
bf:21:ee:29:e2:03:86:01:58:68:9a:e2:c6:3f:73:
a9:89:3c:94:4b:91:b7:2f:7d:41:b4:30:fb:56:16:
ba:f9:26:75:17:e1:90:bd:48:f7:54:ce:3c:52:e4:
83:0e:c0:4f:d4:87:35:b1:f5:52:29:9d:59:d0:0f:
3c:83:77:d4:c8:56:74:bf:93:df:a9:47:42:55:32:
a6:37:ab:8d:fd:83:9b:98:08:b2:ce:ce:63:97:1c:
79:29:3c:dc:dd:61:fd:57:85:fd:16:36:db:cb:20:
23:fd:bd:98:63:7e:4d:35:d5:a4:fa:1d:3a:41:bc:
c3:d5:cb:5d:91:67:ce:56:60:0f:b8:f4:b9:30:24:
84:3b:98:08:4b:e8:aa:c7:bf:ae:71:a5:f9:70:ee:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45148
sbgp-ipAddrBlock: critical
IPv4:
119.252.192.0/19
IPv6:
2403:2200::/32
Signature Algorithm: sha256WithRSAEncryption
4e:be:d6:2b:1e:d0:82:d7:18:c5:94:76:69:42:d3:48:43:2f:
61:12:a4:e1:85:4b:74:ae:c1:44:c9:56:61:65:22:bb:b6:3a:
2b:29:d4:c2:3c:18:25:7e:cc:49:ed:29:2a:29:67:a4:22:80:
84:15:2d:2a:fc:e4:0e:1b:c2:6f:75:85:83:8f:b2:3a:78:4f:
ea:bd:26:47:76:7d:ca:a6:99:2b:d6:12:ce:0e:e2:17:22:9d:
f7:36:cb:86:de:fd:9d:04:83:62:86:d8:07:93:48:e6:29:a9:
77:a3:a9:d7:ac:7d:a7:a2:52:66:dc:16:19:66:42:5a:8a:15:
82:4e:d3:4c:dd:32:0e:65:e3:92:c5:d0:0e:35:9b:b4:c2:33:
5b:91:d9:67:23:9b:30:9c:56:81:fc:0d:83:ec:99:43:6e:fd:
16:89:b9:0f:6f:b7:a7:e3:5e:96:2b:33:1a:3f:fd:82:90:8f:
9e:ad:b4:2b:8a:f7:03:2e:79:7d:94:68:28:3b:6e:27:1f:1f:
93:c5:27:3d:45:95:fd:27:57:0e:0c:97:2d:bb:75:5c:78:5f:
7a:9a:6e:c2:a3:a9:c5:4c:c7:95:e3:eb:1b:03:7a:45:21:ed:
05:99:f5:39:3f:06:11:4d:cc:60:98:4c:51:ba:06:3e:82:4a:
cd:bf:e3:bb
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAq6dMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyMzE0NDg1N1oXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNB
QkM0NDNDOENDQkMwMzJFRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+eahef5c9pupecsRSs5yt0JkaTCR3lsRouyxSDAy3Gncs1H2eBsP1qQqz0RMp
KJ/eNpq9D/FwN9dfKnYIzvxnLcYuPZOUDpA/dyc4wdQrWG1psyu6IetZmdL6Qe49
lXB/2kDRX/E3w78h7iniA4YBWGia4sY/c6mJPJRLkbcvfUG0MPtWFrr5JnUX4ZC9
SPdUzjxS5IMOwE/UhzWx9VIpnVnQDzyDd9TIVnS/k9+pR0JVMqY3q439g5uYCLLO
zmOXHHkpPNzdYf1Xhf0WNtvLICP9vZhjfk011aT6HTpBvMPVy12RZ85WYA+49Lkw
JIQ7mAhL6KrHv65xpflw7h87AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUKUHHFh7U
ouCbuRyrxEPIzLwDLtgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZFRUE5L0NFRDBBOUU2MUQ5NzExRTJCRjNFODE4MTA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGRUVBOS9DRUQwQTlFNjFEOTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3
VW91Q2J1UnlyeEVQSXpMd0RMdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALBcMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFd/zAMA0EAgAC
MAcDBQAkAyIAMA0GCSqGSIb3DQEBCwUAA4IBAQBOvtYrHtCC1xjFlHZpQtNIQy9h
EqThhUt0rsFEyVZhZSK7tjorKdTCPBglfsxJ7SkqKWekIoCEFS0q/OQOG8JvdYWD
j7I6eE/qvSZHdn3Kppkr1hLODuIXIp33NsuG3v2dBINihtgHk0jmKal3o6nXrH2n
olJm3BYZZkJaihWCTtNM3TIOZeOSxdAONZu0wjNbkdlnI5swnFaB/A2D7JlDbv0W
ibkPb7en416WKzMaP/2CkI+erbQrivcDLnl9lGgoO24nHx+TxSc9RZX9J1cODJct
u3VceF96mm7Co6nFTMeV4+sbA3pFIe0FmfU5PwYRTcxgmExRugY+gkrNv+O7
-----END CERTIFICATE-----
Generated at Wed May 13 04:45:47 2026 by rpki-client