Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
File: ZVgfndzt1kYkkalmT_KWJlal-FQ.cer (raw, json)
Hash identifier: gmxxtHahSdEly9+cUEgxS5zZLPEQkhSBdLvO061dtoE=
Subject key identifier: 65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B308
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 May 2026 07:00:11 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 10031
AS: 17927
IP: 202.68.176.0/20
IP: 203.166.128.0/20
IP: 203.166.158.0/23
IP: 2402:e600::/32
IP: 2404:aa00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176904 (0x2b308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 7 07:00:11 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A913EECE, serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:ed:2b:31:dd:b8:63:78:ef:d0:3b:46:0f:
67:6c:e6:6d:96:ca:b9:bd:25:5d:f5:3e:f9:0f:c8:
e1:46:57:55:8d:f0:ea:54:1f:5a:25:6b:ca:6b:13:
70:4f:b4:a5:16:e2:1a:52:1f:24:61:94:63:dd:a4:
77:10:59:e5:e5:1e:e9:c6:b8:ab:14:45:bc:8a:fe:
89:90:40:6a:84:df:55:4e:89:15:9a:31:7a:96:64:
c7:4e:cc:b5:c2:63:b2:1d:73:51:e0:0f:c4:78:f7:
dc:f6:cc:ae:e6:4e:79:2c:ed:a0:93:a1:ef:2f:28:
ce:cc:f3:19:71:b5:ad:c9:d4:c9:44:9a:66:b0:be:
74:34:b2:8b:6a:cb:3e:f0:e1:b2:ec:10:dc:a1:de:
2a:fd:f2:17:2e:5a:8b:78:a9:ba:5e:d8:03:54:b4:
ac:dd:a4:b4:fe:cd:1b:51:9d:64:e4:dd:28:b7:1f:
04:0e:46:60:5b:8d:1b:36:7e:a6:70:87:74:54:5d:
af:f5:1d:95:b5:c5:ab:d0:38:20:e7:24:44:83:6e:
a9:b0:ce:ed:57:7b:db:fa:be:e4:93:ff:d2:49:b8:
5e:cb:af:cb:47:e8:ff:6f:3c:ec:48:93:0b:57:ab:
8f:71:70:6d:51:da:5e:c6:e9:f2:f0:49:d8:af:4a:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10031
17927
sbgp-ipAddrBlock: critical
IPv4:
202.68.176.0/20
203.166.128.0/20
203.166.158.0/23
IPv6:
2402:e600::/32
2404:aa00::/32
Signature Algorithm: sha256WithRSAEncryption
6b:9e:94:30:d5:db:bc:fe:91:e8:75:55:d8:4e:16:ea:e9:ea:
13:10:54:ae:dc:8e:73:9a:69:57:23:01:37:b2:c2:ec:36:f1:
b2:f1:15:c1:d8:04:15:85:43:6a:ff:01:27:d3:d1:da:ab:fa:
5b:7b:1b:be:d9:47:4a:2f:71:9d:c4:66:2e:d3:da:f9:59:2e:
92:bc:1b:00:60:c5:22:bc:f5:f0:eb:c0:50:49:8a:c2:bb:83:
a4:10:97:28:09:79:d2:1b:ef:1b:d7:1c:2b:06:fa:2c:d4:88:
91:06:39:65:de:83:80:e3:00:ee:c5:75:9d:fd:7d:d8:49:b4:
90:f3:3d:cc:a2:d6:c6:74:1b:24:75:0d:ca:45:eb:b5:d0:df:
77:fe:5b:d7:85:e8:7c:ba:78:93:45:b9:fc:63:22:e2:06:7f:
92:04:85:06:43:e4:c9:25:dc:27:c3:0d:05:27:20:57:24:5d:
94:c2:db:7b:a2:07:af:14:8a:86:7f:3d:19:ab:9c:66:95:04:
26:9e:dd:08:b1:87:c2:65:2b:27:51:fd:17:bc:06:17:f8:30:
ea:2e:b1:e1:f0:3e:ad:08:09:47:b2:92:61:38:88:ba:99:1d:
f4:33:02:62:b4:fd:85:2e:71:21:9a:9b:3d:fe:eb:b9:08:c9:
45:d1:54:43
-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgIDArMIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwNzA3MDAxMVoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0VFQ0UxMTAvBgNVBAUTKDY1NTgxRjlERENFREQ2NDYyNDkxQTk2
NjRGRjI5NjI2NTZBNUY4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu2O0rMd24Y3jv0DtGD2ds5m2Wyrm9JV31PvkPyOFGV1WN8OpUH1ola8prE3BP
tKUW4hpSHyRhlGPdpHcQWeXlHunGuKsURbyK/omQQGqE31VOiRWaMXqWZMdOzLXC
Y7Idc1HgD8R499z2zK7mTnks7aCToe8vKM7M8xlxta3J1MlEmmawvnQ0sotqyz7w
4bLsENyh3ir98hcuWot4qbpe2ANUtKzdpLT+zRtRnWTk3Si3HwQORmBbjRs2fqZw
h3RUXa/1HZW1xavQOCDnJESDbqmwzu1Xe9v6vuST/9JJuF7Lr8tH6P9vPOxIkwtX
q49xcG1R2l7G6fLwSdivShtpAgMBAAGjggM0MIIDMDAdBgNVHQ4EFgQUZVgfndzt
1kYkkalmT/KWJlal+FQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNFRUNFLzYxMkUzRkIyNDlFMjExRjFCQjgwQzc4RkIwODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRUVDRS82MTJFM0ZCMjQ5RTIxMUYxQkI4MEM3OEZCMDgzMzc3My9aVmdmbmR6
dDFrWWtrYWxtVF9LV0psYWwtRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHQYIKwYBBQUHAQgBAf8EDjAM
oAowCAICJy8CAkYHMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQEykSwAwQE
y6aAAwQBy6aeMBQEAgACMA4DBQAkAuYAAwUAJASqADANBgkqhkiG9w0BAQsFAAOC
AQEAa56UMNXbvP6R6HVV2E4W6unqExBUrtyOc5ppVyMBN7LC7DbxsvEVwdgEFYVD
av8BJ9PR2qv6W3sbvtlHSi9xncRmLtPa+VkukrwbAGDFIrz18OvAUEmKwruDpBCX
KAl50hvvG9ccKwb6LNSIkQY5Zd6DgOMA7sV1nf192Em0kPM9zKLWxnQbJHUNykXr
tdDfd/5b14XofLp4k0W5/GMi4gZ/kgSFBkPkySXcJ8MNBScgVyRdlMLbe6IHrxSK
hn89GaucZpUEJp7dCLGHwmUrJ1H9F7wGF/gw6i6x4fA+rQgJR7KSYTiIupkd9DMC
YrT9hS5xIZqbPf7ruQjJRdFUQw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:31 2026 by rpki-client