Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer
File: ReDCzhRgM0N0_BWzcEXXajTd7l0.cer (raw, json)
Hash identifier: KIwFHs7FQVhKji/aPZZ0ZjcZzAY5yn7oh1hmOL1Fx/k=
Subject key identifier: 45:E0:C2:CE:14:60:33:43:74:FC:15:B3:70:45:D7:6A:34:DD:EE:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B41F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 May 2026 12:23:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 163.223.88.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177183 (0x2b41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 12 12:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911465D, serialNumber=45E0C2CE1460334374FC15B37045D76A34DDEE5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:a9:6a:c4:99:92:eb:15:2d:f7:fe:63:6b:
32:c2:a2:89:99:85:0f:c7:54:9c:21:ad:7b:f3:cd:
d8:0b:98:ac:ff:45:f4:e7:d1:af:3c:6f:1e:7d:67:
ea:6a:96:38:f9:0a:a4:01:d8:98:4a:12:82:de:ed:
ff:0d:f6:8d:d3:14:00:e5:e0:16:e3:b9:d5:2b:89:
0a:d6:05:9e:e7:ea:d2:0c:f7:fa:61:49:0e:9d:1b:
d0:30:fa:81:26:df:74:eb:aa:69:8f:43:77:d9:74:
16:17:8f:ad:aa:0c:b2:df:89:d8:6d:14:d0:51:b1:
77:6e:58:c8:91:27:35:c6:29:44:b3:7e:8e:86:0c:
88:35:76:ec:b3:d4:cc:f2:01:d1:4e:2f:0c:27:66:
17:65:22:e8:20:90:8a:a9:5d:23:5d:55:8d:af:a3:
09:76:a8:82:f9:3c:e5:19:ff:34:f7:72:61:fa:d6:
c1:7a:48:79:df:f6:3d:ec:35:1d:f8:f8:13:21:21:
df:77:35:8e:b2:2d:2b:a2:37:c2:e2:15:a9:0e:0e:
fb:c1:7f:c8:76:02:b5:f0:d1:cd:4d:41:94:3b:36:
ee:c0:1c:8c:41:b5:c9:fd:84:e2:47:c2:d2:df:e9:
e1:8b:37:fc:f4:ab:16:97:a1:a8:96:74:6d:a1:18:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:C2:CE:14:60:33:43:74:FC:15:B3:70:45:D7:6A:34:DD:EE:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.88.0/23
Signature Algorithm: sha256WithRSAEncryption
28:7a:78:13:55:8b:f7:f6:45:1f:6f:63:09:a9:c1:f2:fe:04:
23:ab:37:3d:76:85:39:e3:d7:4e:81:ab:df:a6:3d:7b:70:1e:
e4:5a:bb:87:10:0e:84:8b:6a:57:75:97:bf:a2:f5:43:df:d5:
57:5b:05:a3:8a:1b:33:fc:e3:b5:37:6f:3c:40:9a:68:65:70:
b0:0c:76:00:68:e9:e7:22:97:9e:b3:70:9b:b5:4b:cf:ea:b8:
9c:b7:c1:a2:08:d0:5e:bb:60:13:4f:fa:17:38:e9:ea:56:22:
e7:a1:9a:f1:cc:68:88:9e:f5:6c:3f:a3:b7:6b:5f:42:87:6f:
7e:a9:d1:73:9f:46:96:59:82:4f:83:e7:5f:f2:06:58:12:ff:
40:b4:5d:bd:52:e9:d3:48:a5:ec:3f:21:3b:bb:4e:6d:01:1b:
32:88:f6:b1:ea:06:b6:bb:69:16:5a:60:4b:e4:30:9f:bb:6f:
46:c7:17:f1:90:44:6d:29:2d:48:05:76:3c:a9:f1:82:be:05:
d3:7d:20:17:eb:88:02:fd:88:c1:6b:e0:b0:f2:82:1d:e3:0f:
4c:f2:2d:de:86:2f:b6:45:da:78:d1:4f:cc:db:2d:ce:9f:4a:
28:73:2b:13:8d:ee:3e:43:36:eb:84:8b:b8:cb:51:ed:50:6e:
f4:12:34:e0
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDArQfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUxMjEyMjMyMFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTQ2NUQxMTAvBgNVBAUTKDQ1RTBDMkNFMTQ2MDMzNDM3NEZDMTVC
MzcwNDVENzZBMzREREVFNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCroalqxJmS6xUt9/5jazLCoomZhQ/HVJwhrXvzzdgLmKz/RfTn0a88bx59Z+pq
ljj5CqQB2JhKEoLe7f8N9o3TFADl4BbjudUriQrWBZ7n6tIM9/phSQ6dG9Aw+oEm
33TrqmmPQ3fZdBYXj62qDLLfidhtFNBRsXduWMiRJzXGKUSzfo6GDIg1duyz1Mzy
AdFOLwwnZhdlIuggkIqpXSNdVY2vowl2qIL5POUZ/zT3cmH61sF6SHnf9j3sNR34
+BMhId93NY6yLSuiN8LiFakODvvBf8h2ArXw0c1NQZQ7Nu7AHIxBtcn9hOJHwtLf
6eGLN/z0qxaXoaiWdG2hGGcPAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUReDCzhRg
M0N0/BWzcEXXajTd7l0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE0NjVEL0Q0MTlEQzRBMjAxQTExRjBBNDAyRjYzQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNDY1RC9ENDE5REM0QTIwMUExMUYwQTQwMkY2M0JDNEY5QUUwMi9SZURDemhS
Z00wTjBfQld6Y0VYWGFqVGQ3bDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGj31gwDQYJKoZIhvcNAQELBQADggEBACh6eBNVi/f2RR9vYwmp
wfL+BCOrNz12hTnj106Bq9+mPXtwHuRau4cQDoSLald1l7+i9UPf1VdbBaOKGzP8
47U3bzxAmmhlcLAMdgBo6ecil56zcJu1S8/quJy3waII0F67YBNP+hc46epWIueh
mvHMaIie9Ww/o7drX0KHb36p0XOfRpZZgk+D51/yBlgS/0C0Xb1S6dNIpew/ITu7
Tm0BGzKI9rHqBra7aRZaYEvkMJ+7b0bHF/GQRG0pLUgFdjyp8YK+BdN9IBfriAL9
iMFr4LDygh3jD0zyLd6GL7ZF2njRT8zbLc6fSihzKxON7j5DNuuEi7jLUe1QbvQS
NOA=
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:56 2026 by rpki-client