Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
File: RXfmNryC40djCTad9uzHkOsrkUU.cer (raw, json)
Hash identifier: PLoTdqiCNSVfP3/XQoElQcnYJev3h5Rt9yiNIB9rTHM=
Subject key identifier: 45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CD8C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Aug 2026 12:59:53 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 24394
AS: 136213
IP: 203.62.235.0 -- 203.62.239.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183692 (0x2cd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 16 12:59:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91614E3, serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:2c:54:8a:20:04:b6:27:ba:fe:63:09:8c:
ef:fe:4f:8e:84:14:db:b4:8d:1d:e0:ad:82:d4:a7:
3f:0d:81:c0:d0:af:83:ea:2a:84:09:99:a5:54:6e:
43:0c:46:df:c7:73:95:6d:1a:65:e6:49:19:bf:9b:
81:05:93:d9:b2:8f:e6:09:90:8a:c9:54:10:4d:42:
d3:1d:cc:5a:93:ae:36:3b:69:49:76:0a:46:d8:eb:
c9:2f:22:c5:f6:8c:91:35:f4:f6:24:d1:50:93:fb:
87:19:16:9a:c6:de:7c:28:35:da:37:7d:a8:7b:e7:
d0:fd:cd:f9:55:c3:77:97:92:37:3c:7b:a1:71:6c:
ea:e9:c1:99:03:a5:cf:b1:91:c8:3c:a1:da:67:f4:
0d:ff:00:db:d9:34:bd:b3:99:7a:65:7d:85:f8:0e:
cf:15:4f:1f:55:02:de:71:98:35:48:7e:29:cb:ac:
e3:75:61:c4:09:67:b5:fb:18:67:f4:cc:e3:c0:92:
cd:23:87:b1:4c:3a:2d:f9:d1:b0:41:ae:89:b5:bd:
e2:93:6f:57:e0:7a:21:47:02:53:7a:b5:a6:a6:3e:
20:54:9e:eb:33:78:40:d9:02:d0:f8:73:c1:c9:b9:
e4:c5:19:35:ef:43:cf:a6:e3:16:0a:e6:5c:dc:27:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24394
136213
sbgp-ipAddrBlock: critical
IPv4:
203.62.235.0-203.62.239.255
Signature Algorithm: sha256WithRSAEncryption
1a:a6:f2:28:12:09:ae:ef:40:bc:d0:3e:89:91:de:c8:c5:55:
3e:af:ed:99:de:76:a4:6d:b9:01:d2:d8:38:d7:d1:58:17:df:
40:66:12:c3:4d:07:97:36:7a:61:42:6c:0f:ee:ef:56:41:3e:
b9:82:8f:8c:1b:2a:c9:e3:c0:ac:e5:f4:27:92:66:b4:2b:4a:
70:ef:48:d4:54:7a:e7:b3:30:49:d9:0a:8c:c9:b1:17:3f:2d:
c1:b2:d7:f0:2e:f5:67:9b:b6:2b:b3:80:0d:3b:fa:c9:d4:45:
d7:8a:33:48:9f:bb:dd:c0:1d:b9:7c:86:d5:69:0c:c6:8d:d4:
a6:d5:a5:fa:14:fd:81:c6:ec:61:b9:ca:39:a7:aa:29:28:8c:
19:77:37:13:e1:85:2e:a9:22:03:1e:f0:60:b3:24:df:ff:f8:
04:d8:fa:ce:5e:05:a4:94:24:44:de:fc:87:7a:5f:ce:61:b8:
fb:43:06:96:5d:4c:37:fa:05:8e:47:87:1d:ec:60:bc:26:bf:
fa:af:53:c0:cb:8d:d8:67:b1:a6:09:ed:a2:2e:39:17:17:4d:
e8:22:24:60:09:b9:42:8e:4b:6e:63:be:7e:bb:6e:64:01:ba:
ee:09:3b:b0:c3:ba:ba:17:2a:e7:50:4b:e9:93:34:eb:73:8a:
20:2f:9e:97
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgIDAs2MMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgxNjEyNTk1M1oXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjE0RTMxMTAvBgNVBAUTKDQ1NzdFNjM2QkM4MkUzNDc2MzA5MzY5
REY2RUNDNzkwRUIyQjkxNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClKSxUiiAEtie6/mMJjO/+T46EFNu0jR3grYLUpz8NgcDQr4PqKoQJmaVUbkMM
Rt/Hc5VtGmXmSRm/m4EFk9myj+YJkIrJVBBNQtMdzFqTrjY7aUl2CkbY68kvIsX2
jJE19PYk0VCT+4cZFprG3nwoNdo3fah759D9zflVw3eXkjc8e6FxbOrpwZkDpc+x
kcg8odpn9A3/ANvZNL2zmXplfYX4Ds8VTx9VAt5xmDVIfinLrON1YcQJZ7X7GGf0
zOPAks0jh7FMOi350bBBrom1veKTb1fgeiFHAlN6taamPiBUnuszeEDZAtD4c8HJ
ueTFGTXvQ8+m4xYK5lzcJx25AgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQURXfmNryC
40djCTad9uzHkOsrkUUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYxNEUzL0ZBRkY5OTg2M0VEMTExRjFBM0JDMTE0OUIwODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MTRFMy9GQUZGOTk4NjNFRDExMUYxQTNCQzExNDlCMDgzMzc3My9SWGZtTnJ5
QzQwZGpDVGFkOXV6SGtPc3JrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICX0oCAwIUFTAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAyz7r
AwQEyz7gMA0GCSqGSIb3DQEBCwUAA4IBAQAapvIoEgmu70C80D6Jkd7IxVU+r+2Z
3nakbbkB0tg419FYF99AZhLDTQeXNnphQmwP7u9WQT65go+MGyrJ48Cs5fQnkma0
K0pw70jUVHrnszBJ2QqMybEXPy3BstfwLvVnm7Yrs4ANO/rJ1EXXijNIn7vdwB25
fIbVaQzGjdSm1aX6FP2Bxuxhuco5p6opKIwZdzcT4YUuqSIDHvBgsyTf//gE2PrO
XgWklCRE3vyHel/OYbj7QwaWXUw3+gWOR4cd7GC8Jr/6r1PAy43YZ7GmCe2iLjkX
F03oIiRgCblCjktuY75+u25kAbruCTuww7q6FyrnUEvpkzTrc4ogL56X
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:31:46 2026 by rpki-client