Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer (raw, json)
Hash identifier: QH6S5P+zfdHuQg521fidWxVQM+imT0ROdc7EZJUuP+I=
Subject key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B2DE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 May 2026 14:05:37 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.90.172.0/24
IP: 103.97.175.0/24
IP: 103.97.200.0/23
IP: 123.253.224.0/22
IP: 2001:df0:e100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176862 (0x2b2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 14:05:37 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:3c:e9:87:8e:b3:5c:dd:e8:bc:4e:76:d4:
10:07:c4:e2:99:4f:73:35:d6:0b:2f:06:38:ac:2b:
88:89:e7:a4:bb:82:43:60:19:44:6f:a1:8c:78:df:
3a:53:36:32:e0:da:09:16:c4:fe:1a:37:f3:d8:76:
d9:e5:50:c4:5c:84:f1:58:63:aa:32:ad:22:ef:da:
5b:94:79:ce:a8:ef:9d:fa:ee:cb:d6:4a:d1:2b:d0:
c7:de:43:09:34:a8:7f:8c:c6:20:7c:04:c3:08:4e:
c7:ef:54:3b:fb:e9:76:99:3d:8a:2b:2c:7f:e1:3e:
66:76:70:a2:fb:cd:9e:66:b8:a4:6b:66:9d:09:14:
74:db:bd:ad:59:ff:04:10:b2:bd:54:dc:e7:da:c7:
9f:87:0e:00:54:c6:77:4a:cd:2e:ec:ea:7a:5f:c5:
2f:9d:2e:07:69:74:77:5a:00:74:5e:57:6e:ca:6a:
47:8c:8c:29:a8:84:88:57:80:04:0c:0f:8a:3b:14:
c3:9b:81:f9:08:72:b6:68:58:05:38:10:60:fa:3a:
12:90:1f:5b:9b:e6:5a:84:71:a9:28:ab:c5:4f:8d:
78:4d:58:7c:54:a3:4f:79:14:40:be:45:63:b6:7b:
6d:10:0e:df:78:bf:2e:19:14:37:82:c2:e0:07:32:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.172.0/24
103.97.175.0/24
103.97.200.0/23
123.253.224.0/22
IPv6:
2001:df0:e100::/48
Signature Algorithm: sha256WithRSAEncryption
4a:0c:b5:8d:d1:ea:c7:d4:45:83:ed:60:a6:a9:86:2e:70:0b:
c1:37:2d:d0:68:73:cb:4b:0f:df:33:98:8f:ca:8c:d2:ce:da:
19:a7:ca:ae:39:58:04:3e:50:4a:3b:b8:49:8e:e9:75:c9:32:
04:48:5c:6c:e3:ff:22:19:77:81:02:a8:ee:11:52:2b:70:e8:
a7:8e:24:a3:e5:3d:c8:88:01:2e:db:b5:c7:9e:2c:5c:ca:99:
be:8e:8b:b8:f5:49:db:8f:17:fd:f8:70:aa:c9:c6:89:24:58:
f6:53:25:02:20:a8:d1:db:fc:d5:c0:79:fa:c7:ab:0d:27:0a:
12:ac:89:c8:57:4d:4c:89:c1:fd:81:dc:98:84:f0:26:31:7f:
80:7b:3d:f5:d5:fb:7f:f3:6d:fb:ce:cb:54:07:2b:e6:30:56:
22:83:33:29:dd:98:0a:3c:73:b8:5e:49:47:db:29:07:94:0a:
18:03:a8:45:91:af:45:f3:e5:63:ac:f2:c3:85:6c:4f:c8:69:
1a:f1:ac:b2:78:8a:f9:94:cb:a8:7b:75:b5:38:22:a0:81:13:
7f:14:69:59:8b:67:0f:4c:4a:60:38:d2:00:c6:ce:8e:34:86:
1f:ad:21:f0:f5:da:d1:6c:2d:cc:9d:f8:10:3b:23:59:a3:15:
30:94:b2:7f
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIDArLeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwNjE0MDUzN1oXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1
NzYyMTE5MDRGMDVCQUYyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvOTzph46zXN3ovE521BAHxOKZT3M11gsvBjisK4iJ56S7gkNgGURvoYx43zpT
NjLg2gkWxP4aN/PYdtnlUMRchPFYY6oyrSLv2luUec6o75367svWStEr0MfeQwk0
qH+MxiB8BMMITsfvVDv76XaZPYorLH/hPmZ2cKL7zZ5muKRrZp0JFHTbva1Z/wQQ
sr1U3Ofax5+HDgBUxndKzS7s6npfxS+dLgdpdHdaAHReV27KakeMjCmohIhXgAQM
D4o7FMObgfkIcrZoWAU4EGD6OhKQH1ub5lqEcakoq8VPjXhNWHxUo095FEC+RWO2
e20QDt94vy4ZFDeCwuAHMn//AgMBAAGjggMWMIIDEjAdBgNVHQ4EFgQUUdXMLV5C
j8lVFJ9XYhGQTwW68hEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE3NzYxLzBFNEI5MTY4QkQzNDExRUI5MEU1NTQyOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1
Q2o4bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8EMzAx
MB4EAgABMBgDBABnWqwDBABnYa8DBAFnYcgDBAJ7/eAwDwQCAAIwCQMHACABDfDh
ADANBgkqhkiG9w0BAQsFAAOCAQEASgy1jdHqx9RFg+1gpqmGLnALwTct0Ghzy0sP
3zOYj8qM0s7aGafKrjlYBD5QSju4SY7pdckyBEhcbOP/Ihl3gQKo7hFSK3Dop44k
o+U9yIgBLtu1x54sXMqZvo6LuPVJ248X/fhwqsnGiSRY9lMlAiCo0dv81cB5+ser
DScKEqyJyFdNTInB/YHcmITwJjF/gHs99dX7f/Nt+87LVAcr5jBWIoMzKd2YCjxz
uF5JR9spB5QKGAOoRZGvRfPlY6zyw4VsT8hpGvGssniK+ZTLqHt1tTgioIETfxRp
WYtnD0xKYDjSAMbOjjSGH60h8PXa0WwtzJ34EDsjWaMVMJSyfw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:56:34 2026 by rpki-client