Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.cer (raw, json)
Hash identifier: jvLRRI4+W3XVSZSF+CzA83aYfVfeDYBpuQ0jp1rtfWQ=
Subject key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C6A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 14:43:10 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 135426
AS: 138416
IP: 2401:bd60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 05:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181925 (0x2c6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 14:43:10 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:d2:5a:46:68:ac:7a:f2:f7:b9:f4:1b:d7:
36:4e:0f:4a:ca:a1:73:f5:36:ac:1d:25:67:83:d0:
23:1d:2e:6f:40:2d:77:02:68:2d:42:73:6e:80:b0:
20:61:78:95:6c:41:0d:0b:91:89:c8:f0:50:c9:ca:
a5:ef:ab:34:57:87:6d:e9:85:f8:a7:c0:31:56:9a:
f8:60:c0:c0:c7:bc:23:c5:ab:31:b5:4c:32:fb:a4:
46:c5:fc:3a:19:ff:ed:61:51:d0:36:b6:c2:3f:15:
85:d7:b9:1c:67:fb:4d:93:01:62:5a:0a:53:f8:34:
aa:b5:2d:ec:95:c7:2f:73:00:b3:a8:1b:e6:f3:74:
3e:7a:57:54:16:13:33:fd:14:7e:1f:7a:d4:8e:25:
02:6a:0d:cd:bd:36:e7:71:e3:0e:58:b2:0c:49:e5:
2f:d8:af:54:c9:c3:3b:63:87:4c:4e:d0:45:32:aa:
15:55:3c:0a:17:41:5c:b6:db:42:1a:9b:b0:85:8d:
56:89:f8:b1:ec:25:58:dd:a2:ca:ab:97:bf:02:33:
53:4a:23:95:d9:24:07:2c:74:3d:9a:52:aa:74:a5:
83:47:76:1f:1c:f0:45:57:4d:f2:da:32:77:62:eb:
0a:7f:02:93:d5:bb:ad:8c:b3:13:a8:05:5b:f0:e8:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135426
138416
sbgp-ipAddrBlock: critical
IPv6:
2401:bd60::/32
Signature Algorithm: sha256WithRSAEncryption
15:0a:90:3c:e9:6d:5a:2a:21:ce:a5:55:c0:92:3e:bd:38:54:
19:47:47:a2:39:31:66:ec:f0:06:d2:c7:0d:44:9c:bb:66:2d:
6e:2b:09:d9:d1:1e:58:a6:52:bd:87:bd:fa:11:e2:bc:33:fe:
0b:48:c1:78:aa:19:5a:55:ae:de:9a:0c:6e:0c:5b:b8:b1:8e:
2f:84:30:d7:b4:bd:aa:a8:4a:f5:bc:01:01:53:76:6e:c2:e4:
4a:90:06:71:7d:b6:cb:d3:bd:c9:78:79:b5:8f:c1:5b:c1:67:
c7:72:f8:26:10:c4:e1:c3:00:5d:1f:ae:fd:69:8a:ff:f3:bc:
62:fc:dc:5e:e2:44:86:17:56:ea:82:d8:98:1e:13:ef:b4:32:
ee:23:e4:75:92:7a:c8:36:28:78:ce:76:a1:b6:96:63:6e:3e:
f4:d6:89:37:71:76:95:3a:84:4e:28:b6:13:50:5c:d3:af:85:
73:d4:a8:26:43:37:27:dd:84:70:da:b4:98:67:11:42:3d:64:
f3:1c:f7:96:00:31:b5:0f:3e:b0:71:f3:e3:42:3c:4c:5c:a3:
dc:5b:7a:35:9a:da:09:3a:4a:d0:8b:03:86:ea:af:ef:c3:9e:
7d:a8:09:67:23:f9:15:35:77:aa:0a:73:20:3b:8e:e3:bc:8e:
55:63:dd:8e
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAsalMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcyMjE0NDMxMFoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgx
MDRCOTRERTBGQTQ3NTIxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkKNJaRmisevL3ufQb1zZOD0rKoXP1NqwdJWeD0CMdLm9ALXcCaC1Cc26AsCBh
eJVsQQ0LkYnI8FDJyqXvqzRXh23phfinwDFWmvhgwMDHvCPFqzG1TDL7pEbF/DoZ
/+1hUdA2tsI/FYXXuRxn+02TAWJaClP4NKq1LeyVxy9zALOoG+bzdD56V1QWEzP9
FH4fetSOJQJqDc29Nudx4w5YsgxJ5S/Yr1TJwztjh0xO0EUyqhVVPAoXQVy220Ia
m7CFjVaJ+LHsJVjdosqrl78CM1NKI5XZJAcsdD2aUqp0pYNHdh8c8EVXTfLaMndi
6wp/ApPVu62MsxOoBVvw6HN7AgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUcxfXd72q
YzPNlqgQS5TeD6R1IRMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJBOTQxLzlCM0QyNTQ4QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcy
cVl6UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAhECAgMCHLAwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAb1g
MA0GCSqGSIb3DQEBCwUAA4IBAQAVCpA86W1aKiHOpVXAkj69OFQZR0eiOTFm7PAG
0scNRJy7Zi1uKwnZ0R5YplK9h736EeK8M/4LSMF4qhlaVa7emgxuDFu4sY4vhDDX
tL2qqEr1vAEBU3ZuwuRKkAZxfbbL073JeHm1j8FbwWfHcvgmEMThwwBdH679aYr/
87xi/Nxe4kSGF1bqgtiYHhPvtDLuI+R1knrINih4znahtpZjbj701ok3cXaVOoRO
KLYTUFzTr4Vz1KgmQzcn3YRw2rSYZxFCPWTzHPeWADG1Dz6wcfPjQjxMXKPcW3o1
mtoJOkrQiwOG6q/vw559qAlnI/kVNXeqCnMgO47jvI5VY92O
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:24 2026 by rpki-client