Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
File: Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer (raw, json)
Hash identifier: kpgZJMujtr1nXzHBtlagc0r5PQRxqo3/lN3Emi/IpNQ=
Subject key identifier: 5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE4C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Apr 2026 22:00:32 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 154540
IP: 163.128.39.0/24
IP: 2001:df6:d040::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175692 (0x2ae4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 22:00:32 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91D1E2D, serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:28:29:28:f6:9c:0d:43:b7:35:ac:23:78:
d1:6e:d8:a4:8f:29:de:46:87:bb:9b:03:69:26:56:
81:b2:7c:1e:cb:85:a9:f9:10:c2:36:88:58:fa:be:
98:0b:df:2e:fc:7e:29:92:90:28:87:ab:34:0b:4f:
60:8b:7d:47:12:b2:61:f4:dc:8f:50:a3:e3:91:d4:
ac:24:10:f8:09:81:62:84:04:35:af:f0:95:40:52:
43:e3:5f:97:5a:7b:c8:d1:da:38:ff:87:da:d0:18:
a0:97:93:e8:64:ac:6c:bb:11:c0:6c:e6:4d:6e:31:
50:62:d1:6d:11:46:bd:db:3b:b0:fb:72:f8:ea:5a:
06:49:c6:a6:40:1d:6d:3f:f3:db:90:f1:91:83:de:
62:9b:70:15:c2:6e:4f:14:2f:ae:20:13:ef:94:a3:
88:60:fa:19:07:4b:bc:3d:63:44:82:0e:6d:18:f0:
f2:ba:15:0d:31:09:38:6b:83:92:02:39:51:fc:8d:
36:d8:e6:b8:b1:71:64:3d:92:3b:ec:16:13:54:7f:
1e:f4:d1:44:97:3f:b2:21:04:1d:db:c3:d2:97:4f:
58:6b:09:c2:74:ac:30:5e:e4:e9:b7:92:6a:f0:20:
ee:07:c7:19:5d:13:56:0a:3b:57:7c:2d:6a:21:38:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154540
sbgp-ipAddrBlock: critical
IPv4:
163.128.39.0/24
IPv6:
2001:df6:d040::/48
Signature Algorithm: sha256WithRSAEncryption
0e:27:64:b8:40:10:3d:82:1c:bb:95:b4:9c:e2:14:c0:af:a6:
24:ae:fc:94:86:5e:b4:2a:f0:b5:35:ec:15:04:aa:9e:3f:31:
33:0e:41:1b:aa:52:9c:0f:a7:66:a8:4f:b9:c5:69:b0:78:19:
11:f0:c4:33:95:e0:1c:25:86:78:30:4f:b4:22:de:1e:a8:ab:
b6:9b:dc:f3:dd:09:af:f5:d7:eb:45:9b:17:d8:20:76:74:11:
d2:d8:4c:27:73:be:c3:de:3e:a8:a8:79:8f:05:17:2e:14:06:
21:39:80:38:1d:0b:2b:cc:ba:c2:20:d0:86:22:f6:88:c0:57:
7a:31:18:15:bd:73:8f:3b:49:51:8b:a3:59:98:59:34:e9:7c:
85:ed:61:d3:3d:d0:3c:e9:16:41:4b:e4:cb:dd:f9:db:02:44:
0d:6f:28:82:5b:f6:91:7c:a7:60:cd:d2:9d:db:7f:54:4d:1b:
b5:f7:3c:b8:72:77:06:53:ae:f3:ad:af:ad:bb:cc:08:12:72:
3a:54:aa:43:8c:cd:60:ce:e7:3c:15:27:be:94:98:b2:cd:2b:
db:b2:37:19:1c:65:62:80:42:29:de:f2:ef:a3:ea:5a:a5:ac:
dd:ab:59:60:f5:bb:39:f3:ee:c8:4e:82:ce:bc:63:c1:0a:39:
8c:a7:56:7f
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAq5MMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyMjIyMDAzMloXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDFFMkQxMTAvBgNVBAUTKDVFRkU3MUI5NjEyNkNGNkRCRURGRkIw
RTdCNDZFNjExODY4NDhDMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbASgpKPacDUO3NawjeNFu2KSPKd5Gh7ubA2kmVoGyfB7Lhan5EMI2iFj6vpgL
3y78fimSkCiHqzQLT2CLfUcSsmH03I9Qo+OR1KwkEPgJgWKEBDWv8JVAUkPjX5da
e8jR2jj/h9rQGKCXk+hkrGy7EcBs5k1uMVBi0W0RRr3bO7D7cvjqWgZJxqZAHW0/
89uQ8ZGD3mKbcBXCbk8UL64gE++Uo4hg+hkHS7w9Y0SCDm0Y8PK6FQ0xCThrg5IC
OVH8jTbY5rixcWQ9kjvsFhNUfx700USXP7IhBB3bw9KXT1hrCcJ0rDBe5Om3kmrw
IO4HxxldE1YKO1d8LWohOCChAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUXv5xuWEm
z22+3/sOe0bmEYaEjDAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQxRTJEL0FCREY0MDlFM0U5NjExRjFBOENGNDVCNTlDODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMUUyRC9BQkRGNDA5RTNFOTYxMUYxQThDRjQ1QjU5QzgzMzc3My9YdjV4dVdF
bXoyMi0zX3NPZTBibUVZYUVqREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlusMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAo4AnMA8EAgAC
MAkDBwAgAQ320EAwDQYJKoZIhvcNAQELBQADggEBAA4nZLhAED2CHLuVtJziFMCv
piSu/JSGXrQq8LU17BUEqp4/MTMOQRuqUpwPp2aoT7nFabB4GRHwxDOV4Bwlhngw
T7Qi3h6oq7ab3PPdCa/11+tFmxfYIHZ0EdLYTCdzvsPePqioeY8FFy4UBiE5gDgd
CyvMusIg0IYi9ojAV3oxGBW9c487SVGLo1mYWTTpfIXtYdM90DzpFkFL5Mvd+dsC
RA1vKIJb9pF8p2DN0p3bf1RNG7X3PLhydwZTrvOtr627zAgScjpUqkOMzWDO5zwV
J76UmLLNK9uyNxkcZWKAQine8u+j6lqlrN2rWWD1uznz7shOgs68Y8EKOYynVn8=
-----END CERTIFICATE-----
Generated at Wed May 13 05:24:54 2026 by rpki-client