Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
File: PPkWCCJoGcPp2oTRGVtTJvkkn70.cer (raw, json)
Hash identifier: ls+cBiELoxQ0IBlPzAUqbHtcE+iL7X0A6aeGbVkilU4=
Subject key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A42A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Mar 2026 13:06:18 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 9716
AS: 24017
AS: 133414
IP: 202.10.128.0/17
IP: 202.80.64.0/19
IP: 203.17.26.0/23
IP: 203.18.236.0/22
IP: 203.21.224.0 -- 203.22.17.255
IP: 203.201.0.0/19
IP: 2001:df0:24e::/48
IP: 2405:7f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173098 (0x2a42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 13 13:06:18 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:37:94:89:af:ee:5f:87:e3:fa:44:d8:7d:
1e:41:35:a2:e5:dc:5f:30:d7:91:6c:73:d0:7c:12:
ff:30:33:42:02:3e:dc:20:78:85:5b:8a:1d:3c:1d:
ee:f1:75:da:0d:82:eb:39:86:31:9d:31:01:a7:5e:
5a:c1:53:33:85:8b:b3:8b:ee:4c:fa:a7:fc:8b:7c:
08:11:ac:e5:00:25:76:8d:26:51:25:76:1a:30:71:
49:ad:0b:df:8b:47:3a:5d:7e:0e:97:3e:f7:35:29:
72:ae:92:ef:7c:30:f6:8d:01:2e:c6:a8:23:29:b7:
b6:e8:ef:f2:25:a1:dd:40:0c:31:cb:cc:47:7e:c5:
f4:b6:33:38:b1:d8:d5:4b:46:1f:23:1a:e0:0d:a3:
79:aa:5a:27:49:13:d8:f4:71:1b:cd:08:9d:03:55:
fd:af:55:78:bd:bd:b4:71:f1:2b:9a:7a:50:38:b2:
ed:66:0f:bf:68:c4:44:56:69:21:d5:09:da:f2:d4:
d6:7c:b3:99:9e:dc:ae:24:42:b2:b5:af:6a:6a:85:
cc:f2:ab:d6:37:71:85:38:07:50:45:9b:14:1e:0c:
e9:a4:88:25:7a:86:96:af:fb:85:5b:52:7e:85:df:
1f:14:52:6b:8f:fb:25:8f:7d:73:bc:6b:c9:32:b3:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9716
24017
133414
sbgp-ipAddrBlock: critical
IPv4:
202.10.128.0/17
202.80.64.0/19
203.17.26.0/23
203.18.236.0/22
203.21.224.0-203.22.17.255
203.201.0.0/19
IPv6:
2001:df0:24e::/48
2405:7f00::/32
Signature Algorithm: sha256WithRSAEncryption
67:9a:c3:c6:9e:84:7d:5e:b9:1f:15:08:d8:f2:52:c6:d8:7c:
1e:d9:83:ad:7d:55:25:7d:ba:58:79:f7:66:0a:bc:a0:d9:d5:
c0:ec:94:60:78:35:19:9c:71:8d:55:6c:92:37:9a:03:70:19:
f1:a0:a8:93:a9:37:17:f5:32:10:e9:bf:4b:97:7d:33:b7:6b:
6c:25:c6:33:e8:67:1f:6c:c6:ac:15:e2:4a:21:57:58:06:47:
52:2d:8e:f4:3f:e6:79:83:04:a0:3f:e8:32:40:4c:da:1b:84:
35:14:f8:ba:4b:5f:6c:4e:4c:18:db:c5:bc:f6:80:52:55:03:
02:c2:00:da:6c:76:6d:72:63:bd:26:88:9d:b8:7e:08:24:6b:
82:4b:43:87:b1:58:74:63:c7:53:81:31:0d:a5:a5:81:79:7d:
2c:1c:3c:b8:61:ad:52:2c:23:2a:12:af:43:ab:13:f4:e8:72:
c1:e4:70:a1:9d:8b:23:d1:bc:85:7d:52:b8:21:16:1c:04:0c:
dd:c3:46:8d:4f:71:c4:ea:4d:97:46:6c:3f:c9:14:d9:94:03:
a2:2e:07:e6:cf:f2:be:7d:00:92:bf:3e:70:64:22:90:3c:78:
9e:69:de:41:7b:0d:28:71:81:e0:2f:a2:a9:26:4c:bd:2f:14:
2d:7f:c6:aa
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIDAqQqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMxMzEzMDYxOFoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODRE
MTE5NUI1MzI2RjkyNDlGQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDL4jeUia/uX4fj+kTYfR5BNaLl3F8w15Fsc9B8Ev8wM0ICPtwgeIVbih08He7x
ddoNgus5hjGdMQGnXlrBUzOFi7OL7kz6p/yLfAgRrOUAJXaNJlEldhowcUmtC9+L
Rzpdfg6XPvc1KXKuku98MPaNAS7GqCMpt7bo7/Ilod1ADDHLzEd+xfS2Mzix2NVL
Rh8jGuANo3mqWidJE9j0cRvNCJ0DVf2vVXi9vbRx8SuaelA4su1mD79oxERWaSHV
Cdry1NZ8s5me3K4kQrK1r2pqhczyq9Y3cYU4B1BFmxQeDOmkiCV6hpav+4VbUn6F
3x8UUmuP+yWPfXO8a8kys6hxAgMBAAGjggNVMIIDUTAdBgNVHQ4EFgQUPPkWCCJo
GcPp2oTRGVtTJvkkn70wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU1QUU0L0U1RDZEMEFDMDY1MzExRUQ4MjdCRUY1NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NK
b0djUHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQgBAf8EEzAR
oA8wDQICJfQCAl3RAgMCCSYwXQYIKwYBBQUHAQcBAf8ETjBMMDIEAgABMCwDBAfK
CoADBAXKUEADBAHLERoDBALLEuwwDAMEBcsV4AMEAcsWEAMEBcvJADAWBAIAAjAQ
AwcAIAEN8AJOAwUAJAV/ADANBgkqhkiG9w0BAQsFAAOCAQEAZ5rDxp6EfV65HxUI
2PJSxth8HtmDrX1VJX26WHn3Zgq8oNnVwOyUYHg1GZxxjVVskjeaA3AZ8aCok6k3
F/UyEOm/S5d9M7drbCXGM+hnH2zGrBXiSiFXWAZHUi2O9D/meYMEoD/oMkBM2huE
NRT4uktfbE5MGNvFvPaAUlUDAsIA2mx2bXJjvSaInbh+CCRrgktDh7FYdGPHU4Ex
DaWlgXl9LBw8uGGtUiwjKhKvQ6sT9OhyweRwoZ2LI9G8hX1SuCEWHAQM3cNGjU9x
xOpNl0ZsP8kU2ZQDoi4H5s/yvn0Akr8+cGQikDx4nmneQXsNKHGB4C+iqSZMvS8U
LX/Gqg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:19 2026 by rpki-client