Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.cer (raw, json)
Hash identifier: P3OVA/hk3JxDLtVck4pFvqpykz0uWLHX8QgdH1eloqM=
Subject key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B230
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 May 2026 14:19:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.114.116.0/22
IP: 103.53.196.0/22
IP: 2402:2f80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176688 (0x2b230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 4 14:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:ae:2a:3a:d9:b4:ae:84:1f:a0:94:fd:f1:
ec:21:f6:4c:18:bf:4d:65:98:5d:08:8e:06:3c:22:
ec:31:50:39:f8:15:29:6c:46:4e:6b:38:18:e0:c7:
0e:2f:50:22:70:c0:3d:fb:73:60:f4:85:17:aa:79:
2f:0f:23:39:2f:c2:a4:c1:17:37:7c:0d:96:dc:5d:
65:9b:7a:c1:03:aa:c8:f2:2e:64:61:d5:9f:9c:26:
bf:4a:18:79:a4:29:50:cb:dc:59:85:f7:e6:10:54:
72:d8:26:d5:90:d7:eb:7d:04:9c:22:91:19:c0:20:
6c:1b:59:f7:89:1c:3d:28:8d:4e:86:0c:e5:e3:8c:
24:07:a6:fd:bd:44:8e:46:fb:cc:bf:56:26:9c:61:
e1:86:11:42:8a:ae:23:dc:b4:4a:34:39:ab:34:60:
15:13:f9:bf:f2:86:b9:48:6d:c7:ea:a7:4a:24:ff:
b4:69:16:36:68:9a:7f:5d:f5:45:22:7e:7a:df:49:
ad:3e:12:6c:7e:58:d9:8b:00:a8:dc:70:5f:25:7e:
b7:15:d7:9f:6e:5b:04:35:92:86:79:d7:ec:ae:48:
37:9f:77:bf:b8:f7:50:b0:7e:a7:4f:e3:31:29:be:
f2:4e:06:87:0b:80:ce:c7:a4:4e:3d:20:01:d6:09:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.116.0/22
103.53.196.0/22
IPv6:
2402:2f80::/32
Signature Algorithm: sha256WithRSAEncryption
cc:cf:3b:cb:7c:df:48:6a:a9:0c:a7:1c:15:98:70:4c:b6:12:
6a:ee:df:42:ab:36:3c:d3:5b:23:17:2c:e9:38:e9:ce:1a:8f:
51:7c:dc:30:37:9e:ce:e9:d7:94:64:91:e0:f6:82:df:39:bc:
6e:d3:3c:d0:e5:f2:b2:80:5b:b2:34:76:9e:48:ad:e6:74:92:
51:85:a5:6b:00:40:50:5e:2b:09:ff:0c:a8:6d:e6:56:ac:e8:
31:ff:90:20:67:b3:87:91:87:e2:d6:e3:9e:40:7c:6b:cc:d7:
28:de:c8:3d:94:bb:87:2b:2c:4b:0b:97:e2:fd:5e:49:22:23:
c4:31:ff:5c:07:7e:8e:dd:d7:9c:40:e2:00:0c:ce:10:19:bb:
17:c3:38:54:6c:27:a7:83:6b:44:ad:36:87:a6:4b:9f:cf:98:
6c:f3:0c:b2:e3:83:ee:da:3a:27:d5:c8:5b:52:9a:86:c1:0a:
02:28:66:4c:7b:cb:69:71:82:6c:28:cc:e8:59:04:a6:fa:da:
49:b5:21:7b:6b:12:58:55:17:ba:f2:00:ee:15:52:d9:08:12:
89:f1:b9:a0:32:34:7c:5d:f8:ee:2c:14:71:bd:12:fc:8b:d0:
8c:2d:45:db:56:29:a2:3b:f2:76:e2:d0:48:6a:2a:5b:4e:c7:
e1:e4:97:0a
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgIDArIwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwNDE0MTk1M1oXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3
MkREMDg4NTA1QUY5QkI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiEa4qOtm0roQfoJT98ewh9kwYv01lmF0IjgY8IuwxUDn4FSlsRk5rOBjgxw4v
UCJwwD37c2D0hReqeS8PIzkvwqTBFzd8DZbcXWWbesEDqsjyLmRh1Z+cJr9KGHmk
KVDL3FmF9+YQVHLYJtWQ1+t9BJwikRnAIGwbWfeJHD0ojU6GDOXjjCQHpv29RI5G
+8y/ViacYeGGEUKKriPctEo0Oas0YBUT+b/yhrlIbcfqp0ok/7RpFjZomn9d9UUi
fnrfSa0+Emx+WNmLAKjccF8lfrcV159uWwQ1koZ51+yuSDefd7+491CwfqdP4zEp
vvJOBocLgM7HpE49IAHWCZ3bAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQULMM/vLhk
CEAgiUpy3QiFBa+btm0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJBQTQ0LzlDQzAwQTlDQzdGRjExRUM5QkRCRkU0QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxo
a0NFQWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj
MBIEAgABMAwDBAItcnQDBAJnNcQwDQQCAAIwBwMFACQCL4AwDQYJKoZIhvcNAQEL
BQADggEBAMzPO8t830hqqQynHBWYcEy2Emru30KrNjzTWyMXLOk46c4aj1F83DA3
ns7p15RkkeD2gt85vG7TPNDl8rKAW7I0dp5IreZ0klGFpWsAQFBeKwn/DKht5las
6DH/kCBns4eRh+LW455AfGvM1yjeyD2Uu4crLEsLl+L9XkkiI8Qx/1wHfo7d15xA
4gAMzhAZuxfDOFRsJ6eDa0StNoemS5/PmGzzDLLjg+7aOifVyFtSmobBCgIoZkx7
y2lxgmwozOhZBKb62km1IXtrElhVF7ryAO4VUtkIEonxuaAyNHxd+O4sFHG9EvyL
0IwtRdtWKaI78nbi0EhqKltOx+Hklwo=
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:09 2026 by rpki-client