
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
File: M23U8UX716kQau8fBtkXB9JQt3o.cer (raw, json)
Hash identifier: t2E3bH79lP0fCGGp2mpBhE882+fa7m7p0XdSEYRmkGc=
Subject key identifier: 33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C35A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Jul 2026 02:27:20 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 154689
IP: 2402:5f60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181082 (0x2c35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 7 02:27:20 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91A9E90, serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:72:e6:05:27:91:e3:f3:8b:f9:12:43:67:
45:fa:3b:38:2f:9b:18:c4:bd:7e:9c:96:46:55:a7:
a5:99:35:ba:f2:36:35:81:b1:e9:c9:d1:82:da:d2:
3f:64:84:3c:be:80:04:84:13:68:be:b1:b6:ae:dc:
11:b2:39:0a:70:20:07:d1:c3:6d:37:5f:3f:6b:c5:
9b:e9:26:16:20:fd:2a:9a:7c:c6:79:6a:e4:81:3b:
1e:45:88:e4:86:62:82:43:bf:45:e3:aa:58:f3:a4:
7a:34:09:d0:9c:66:2a:42:a4:3c:12:41:db:47:27:
9e:4f:15:0b:a3:29:d6:0b:bc:b6:4f:10:ae:36:29:
cc:a1:2c:ac:2f:8b:10:07:4f:52:8f:00:d2:56:d7:
ce:d9:51:dc:e9:68:9b:1e:f3:0d:d3:86:c8:ca:64:
f5:1b:1e:48:3c:ce:e0:ef:44:a2:01:cb:13:75:05:
c6:17:72:a4:0e:3e:54:8c:4f:84:db:4f:f4:b6:8f:
8a:3b:af:70:a0:0b:07:c4:fc:ec:31:3e:84:94:35:
ab:a6:20:9b:94:92:5b:41:4f:e3:1b:9d:e9:85:ae:
19:88:cb:0a:7d:85:d0:4a:04:c7:7c:ad:40:dc:db:
ad:6d:81:5c:d6:2e:73:90:92:75:80:79:b7:e8:d9:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154689
sbgp-ipAddrBlock: critical
IPv6:
2402:5f60::/32
Signature Algorithm: sha256WithRSAEncryption
3b:5d:da:a6:a8:5a:43:5d:52:e6:71:b1:99:b1:c8:c6:5d:7f:
92:56:30:20:f1:f1:28:96:d0:c8:54:13:87:d0:73:8e:78:b7:
c2:b5:f9:3b:b4:f6:d1:30:da:0e:fb:1f:65:0f:a1:65:59:15:
bb:92:11:95:a0:da:9f:37:69:8f:fe:72:d3:a1:0f:80:be:01:
d0:1b:0e:04:8a:34:23:fe:bc:b7:ee:e3:9d:54:e7:a7:98:95:
37:d4:b8:5a:7d:24:e4:b0:50:78:43:29:36:b6:0d:ca:6b:43:
ed:4a:c8:78:d4:63:fc:7e:14:4a:6e:a9:69:30:b5:40:75:e2:
e3:25:46:6b:d5:29:a7:73:d9:ac:4b:ef:e3:ea:1a:33:9b:f9:
ab:79:11:6f:de:3f:13:d6:4f:dc:5f:13:f9:9c:b0:ca:65:41:
03:f7:1d:80:88:21:e2:a2:f8:d7:c3:a5:cb:11:7e:be:eb:d4:
87:6d:6e:a3:41:19:ff:25:6f:65:e8:b7:70:a2:3c:8e:d1:b6:
ed:62:3a:ad:f2:0e:30:7b:c1:72:6e:36:4c:26:e5:a2:5b:7b:
51:a9:6c:dc:14:aa:b8:8c:0f:db:ba:e3:54:f1:76:f0:1c:f0:
4d:4e:21:4d:a4:ca:ba:ac:24:b0:b5:e6:a7:be:0f:38:10:15:
42:40:0a:89
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAsNaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcwNzAyMjcyMFoXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTlFOTAxMTAvBgNVBAUTKDMzNkRENEYxNDVGQkQ3QTkxMDZBRUYx
RjA2RDkxNzA3RDI1MEI3N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzv3LmBSeR4/OL+RJDZ0X6OzgvmxjEvX6clkZVp6WZNbryNjWBsenJ0YLa0j9k
hDy+gASEE2i+sbau3BGyOQpwIAfRw203Xz9rxZvpJhYg/SqafMZ5auSBOx5FiOSG
YoJDv0XjqljzpHo0CdCcZipCpDwSQdtHJ55PFQujKdYLvLZPEK42KcyhLKwvixAH
T1KPANJW187ZUdzpaJse8w3ThsjKZPUbHkg8zuDvRKIByxN1BcYXcqQOPlSMT4Tb
T/S2j4o7r3CgCwfE/OwxPoSUNaumIJuUkltBT+MbnemFrhmIywp9hdBKBMd8rUDc
261tgVzWLnOQknWAebfo2axPAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUM23U8UX7
16kQau8fBtkXB9JQt3owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE5RTkwLzVFRTYzMDdDNzlBQjExRjE4MTQzQURCMjk0QTMwRkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBOUU5MC81RUU2MzA3Qzc5QUIxMUYxODE0M0FEQjI5NEEzMEZCQy9NMjNVOFVY
NzE2a1FhdThmQnRrWEI5SlF0M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlxBMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJfYDANBgkq
hkiG9w0BAQsFAAOCAQEAO13apqhaQ11S5nGxmbHIxl1/klYwIPHxKJbQyFQTh9Bz
jni3wrX5O7T20TDaDvsfZQ+hZVkVu5IRlaDanzdpj/5y06EPgL4B0BsOBIo0I/68
t+7jnVTnp5iVN9S4Wn0k5LBQeEMpNrYNymtD7UrIeNRj/H4USm6paTC1QHXi4yVG
a9Upp3PZrEvv4+oaM5v5q3kRb94/E9ZP3F8T+ZywymVBA/cdgIgh4qL418OlyxF+
vuvUh21uo0EZ/yVvZei3cKI8jtG27WI6rfIOMHvBcm42TCblolt7Uals3BSquIwP
27rjVPF28BzwTU4hTaTKuqwksLXmp74POBAVQkAKiQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:20 2026 by rpki-client