Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer (raw, json)
Hash identifier: aCIMu2ui71Tv6cvgHvvXF+cUVVb2M/A0u4bZWdOwX44=
Subject key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A63D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Mar 2026 06:26:16 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 17497
AS: 153671
IP: 45.253.244.0/23
IP: 103.211.228.0/23
IP: 163.227.196.0/23
IP: 2402:620::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173629 (0x2a63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 25 06:26:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:8b:4e:e8:c2:15:8c:a2:5d:0e:85:d1:79:
d1:06:97:6e:95:c7:03:dc:b4:1a:09:fe:88:ad:b3:
66:88:67:de:a7:12:ee:27:fd:33:a2:db:62:bc:c4:
c4:95:79:b2:c0:e2:2c:c9:51:4a:e0:ae:0a:8e:b6:
fd:76:65:c7:fa:fe:5f:14:4b:83:bf:60:d5:8e:43:
b3:4a:82:68:c2:c6:ef:17:72:de:aa:e8:25:09:d4:
2f:56:76:15:18:d1:ae:8c:12:3c:63:bc:f1:e3:ed:
33:46:a4:d4:fd:32:0c:f1:20:3c:f0:54:2e:ce:24:
03:b9:bd:92:d9:cf:f2:a4:f7:53:a8:7d:b3:e3:40:
07:0e:82:1c:cc:42:01:d3:47:13:46:ec:63:ac:fb:
22:a9:9e:16:13:65:fa:74:13:09:80:c5:3c:6b:04:
2e:6a:46:58:7f:ba:96:99:2c:39:0b:2d:33:84:22:
37:29:3f:08:75:fb:42:56:94:fc:ab:3d:01:f6:10:
9a:72:b6:f4:8c:2f:4f:fa:c0:0d:cb:3b:30:53:eb:
3a:7f:23:3b:ed:fc:b2:17:77:56:41:27:2c:81:07:
f7:f6:e1:70:4c:20:2f:1b:06:d9:02:db:b8:73:74:
32:3b:21:52:94:c9:4e:56:52:83:4f:f3:39:e4:56:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17497
153671
sbgp-ipAddrBlock: critical
IPv4:
45.253.244.0/23
103.211.228.0/23
163.227.196.0/23
IPv6:
2402:620::/32
Signature Algorithm: sha256WithRSAEncryption
22:30:b3:6d:f7:94:d3:ec:60:90:2c:e0:a7:e0:d3:93:2d:6f:
5e:35:f6:d9:87:fc:ef:73:d2:cb:fc:be:6c:d6:86:98:d0:42:
de:b0:55:a2:4d:6c:7c:45:9f:78:b5:b6:08:fd:5e:82:54:57:
e2:63:b1:e7:e7:a2:56:db:83:b8:17:d4:3a:fe:de:db:3b:8c:
84:96:3f:83:f3:28:8f:59:0b:9d:7f:f4:e8:a0:ef:ed:37:03:
e2:b5:f8:f7:ce:3d:e3:d8:74:fe:31:c7:e5:8c:08:70:9e:6c:
47:32:c0:cb:c6:ca:bf:ee:da:b9:12:1d:d4:fa:ea:cc:2b:61:
e8:5a:f2:6f:31:ce:30:7b:22:cd:57:c8:75:04:66:c3:db:42:
c0:e8:8a:ee:67:5a:c1:96:9b:72:db:79:c7:71:0e:a4:cc:73:
99:01:9b:0e:a9:45:7b:dc:87:eb:71:71:ce:da:66:bc:6c:16:
80:50:64:42:cc:4e:87:db:3e:47:18:94:09:22:69:b5:ce:47:
cf:ce:d1:57:56:a8:1d:80:93:50:39:a3:11:dd:b2:69:1b:2f:
d3:2c:7e:55:51:6d:94:ac:8b:17:61:80:d1:45:b1:78:00:97:
48:94:f7:00:99:2e:4a:c8:f7:c2:03:e8:ff:38:6d:66:71:1e:
0b:f4:bf:0d
-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgIDAqY9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMyNTA2MjYxNloXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkRFMTMxMTAvBgNVBAUTKDQ5RkQzM0Q2RjUxQUQ2QTQ5ODg0NDY5
RkEzOUZFRjA0MzIzMzZGODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiQItO6MIVjKJdDoXRedEGl26VxwPctBoJ/oits2aIZ96nEu4n/TOi22K8xMSV
ebLA4izJUUrgrgqOtv12Zcf6/l8US4O/YNWOQ7NKgmjCxu8Xct6q6CUJ1C9WdhUY
0a6MEjxjvPHj7TNGpNT9MgzxIDzwVC7OJAO5vZLZz/Kk91OofbPjQAcOghzMQgHT
RxNG7GOs+yKpnhYTZfp0EwmAxTxrBC5qRlh/upaZLDkLLTOEIjcpPwh1+0JWlPyr
PQH2EJpytvSML0/6wA3LOzBT6zp/Izvt/LIXd1ZBJyyBB/f24XBMIC8bBtkC27hz
dDI7IVKUyU5WUoNP8znkVim7AgMBAAGjggMuMIIDKjAdBgNVHQ4EFgQUSf0z1vUa
1qSYhEafo5/vBDIzb4EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZERTEzLzE1MUZFNDdFMkE1NjExRjBCODRGNTIyMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGREUxMy8xNTFGRTQ3RTJBNTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZV
YTFxU1loRWFmbzVfdkJESXpiNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICRFkCAwJYRzA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAS399AME
AWfT5AMEAaPjxDANBAIAAjAHAwUAJAIGIDANBgkqhkiG9w0BAQsFAAOCAQEAIjCz
bfeU0+xgkCzgp+DTky1vXjX22Yf873PSy/y+bNaGmNBC3rBVok1sfEWfeLW2CP1e
glRX4mOx5+eiVtuDuBfUOv7e2zuMhJY/g/Moj1kLnX/06KDv7TcD4rX4984949h0
/jHH5YwIcJ5sRzLAy8bKv+7auRId1PrqzCth6FrybzHOMHsizVfIdQRmw9tCwOiK
7mdawZabctt5x3EOpMxzmQGbDqlFe9yH63FxztpmvGwWgFBkQsxOh9s+RxiUCSJp
tc5Hz87RV1aoHYCTUDmjEd2yaRsv0yx+VVFtlKyLF2GA0UWxeACXSJT3AJkuSsj3
wgPo/zhtZnEeC/S/DQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:53 2026 by rpki-client