Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer
File: TIqaNuqRWzx9UgH9An2-bMHe9H0.cer (raw, json)
Hash identifier: UP9jCZG7+nodyf+yDkFWf0uWNm4XbjUPgC0wcLLuMr0=
Subject key identifier: 4C:8A:9A:36:EA:91:5B:3C:7D:52:01:FD:02:7D:BE:6C:C1:DE:F4:7D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A2D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Mar 2026 08:13:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 147041
IP: 163.128.22.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172757 (0x2a2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 6 08:13:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A919B8FD, serialNumber=4C8A9A36EA915B3C7D5201FD027DBE6CC1DEF47D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:29:b4:55:30:08:f1:2c:e2:33:f4:d4:48:
a1:2a:75:b5:dc:eb:5b:f7:1d:d9:b4:b4:33:32:02:
fd:5c:ac:ca:e0:f5:8b:c0:04:c7:2f:c3:dd:d1:76:
ac:61:54:8d:9e:04:6b:46:b8:5b:9c:32:a4:ff:1a:
34:c8:e0:06:27:c0:0b:8c:f9:ca:e1:0e:61:b7:b4:
fb:73:4d:87:58:43:a6:c0:48:6a:ad:02:0c:99:a5:
9d:67:f5:65:7c:66:84:d9:b6:8f:70:6f:2e:50:22:
c6:66:34:01:bb:13:66:35:a6:e1:9c:77:db:96:62:
4c:d9:4e:4c:76:0c:ae:5c:f9:65:1c:dd:4c:17:47:
45:ac:ce:ce:5d:7c:4d:ea:6a:83:08:18:ea:98:65:
ea:7e:9c:25:f3:2a:77:de:fd:ab:4e:19:7d:0a:3f:
42:44:95:3e:6c:49:a5:be:ac:e0:35:90:55:51:6d:
18:bd:37:b9:b0:fd:cb:37:01:c2:85:ea:b2:ce:54:
1f:41:57:20:81:e0:52:89:99:83:b7:fc:f9:44:a8:
d3:98:f6:df:01:20:9d:19:b4:c3:26:35:4c:ab:95:
db:ef:18:cf:9c:69:cf:da:9d:fd:e5:85:7f:08:9a:
09:68:99:c9:79:16:91:60:f8:fc:97:a7:a6:3f:3f:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:9A:36:EA:91:5B:3C:7D:52:01:FD:02:7D:BE:6C:C1:DE:F4:7D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147041
sbgp-ipAddrBlock: critical
IPv4:
163.128.22.0/23
Signature Algorithm: sha256WithRSAEncryption
85:8a:47:e3:df:8e:bb:e5:01:ac:27:4e:9d:5d:e1:55:40:9c:
23:90:da:f5:93:f6:da:f2:00:96:f4:ae:c2:db:25:2f:0d:aa:
a4:01:d7:a1:05:19:dc:9c:09:8a:83:cd:95:ac:3a:43:f7:fb:
9b:21:21:af:dc:d1:a9:f3:06:88:6e:28:b2:21:7e:25:07:61:
f2:ef:c1:01:11:d4:67:1a:f7:41:32:39:60:ba:d2:ef:a4:18:
5c:fd:2b:ed:79:29:14:f3:be:8d:8f:ac:9a:4a:8a:7b:d1:24:
59:a0:2d:ec:4c:c3:ad:a6:31:a3:d9:2d:4a:51:c9:84:ea:de:
30:7a:9b:31:14:2d:4c:d9:f7:11:82:72:38:b0:9f:22:d9:b7:
de:05:85:e5:2d:be:63:e3:57:95:97:a0:fb:9f:dc:4a:bd:55:
9e:7a:05:64:8a:80:08:0c:2a:81:f9:a0:ab:fc:52:d7:3e:70:
65:95:f3:64:f0:61:87:dd:1f:12:50:e2:b5:87:b7:b3:1b:40:
3f:f7:3c:d1:43:d8:c9:d0:93:3d:18:bd:2a:e4:60:e0:d1:94:
ca:ed:4b:d0:57:d0:47:bd:bc:fb:c9:45:ff:29:7f:ef:63:eb:
c0:97:14:12:3c:fd:c1:bf:2a:41:a5:2d:74:10:96:10:d7:c4:
6c:a8:ec:96
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAqLVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwNjA4MTMwM1oXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUI4RkQxMTAvBgNVBAUTKDRDOEE5QTM2RUE5MTVCM0M3RDUyMDFG
RDAyN0RCRTZDQzFERUY0N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0pSm0VTAI8SziM/TUSKEqdbXc61v3Hdm0tDMyAv1crMrg9YvABMcvw93Rdqxh
VI2eBGtGuFucMqT/GjTI4AYnwAuM+crhDmG3tPtzTYdYQ6bASGqtAgyZpZ1n9WV8
ZoTZto9wby5QIsZmNAG7E2Y1puGcd9uWYkzZTkx2DK5c+WUc3UwXR0Wszs5dfE3q
aoMIGOqYZep+nCXzKnfe/atOGX0KP0JElT5sSaW+rOA1kFVRbRi9N7mw/cs3AcKF
6rLOVB9BVyCB4FKJmYO3/PlEqNOY9t8BIJ0ZtMMmNUyrldvvGM+cac/anf3lhX8I
mglomcl5FpFg+PyXp6Y/P157AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUTIqaNuqR
Wzx9UgH9An2+bMHe9H0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlCOEZELzQ5NTkxNEY0MTkzNDExRjE5M0NGREM5NDMzM0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5QjhGRC80OTU5MTRGNDE5MzQxMUYxOTNDRkRDOTQzMzNEOEM2Ny9USXFhTnVx
Uld6eDlVZ0g5QW4yLWJNSGU5SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj5hMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo4AWMA0GCSqG
SIb3DQEBCwUAA4IBAQCFikfj34675QGsJ06dXeFVQJwjkNr1k/ba8gCW9K7C2yUv
DaqkAdehBRncnAmKg82VrDpD9/ubISGv3NGp8waIbiiyIX4lB2Hy78EBEdRnGvdB
MjlgutLvpBhc/SvteSkU876Nj6yaSop70SRZoC3sTMOtpjGj2S1KUcmE6t4wepsx
FC1M2fcRgnI4sJ8i2bfeBYXlLb5j41eVl6D7n9xKvVWeegVkioAIDCqB+aCr/FLX
PnBllfNk8GGH3R8SUOK1h7ezG0A/9zzRQ9jJ0JM9GL0q5GDg0ZTK7UvQV9BHvbz7
yUX/KX/vY+vAlxQSPP3BvypBpS10EJYQ18RsqOyW
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:56 2026 by rpki-client