Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer
File: hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer (raw, json)
Hash identifier: YmRta5DKDynSbkvAfam2CnoQJxR1olZ+WAbSJyhr79c=
Subject key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B0FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 02:31:02 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 43.251.28.0/22
IP: 103.252.228.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176381 (0x2b0fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 02:31:02 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:92:a2:05:d3:c3:8b:e6:9e:6a:36:e8:d4:
16:82:b6:ad:c9:a7:34:3b:69:7a:a3:ca:42:aa:73:
1a:74:ba:2a:3a:08:17:f8:21:ba:d2:ed:26:0c:9e:
14:52:66:4b:ff:9b:b3:08:93:76:40:60:41:7d:0a:
ef:b0:ba:20:a4:35:dc:2b:81:11:be:da:44:3f:cc:
27:25:4f:ff:66:a6:1a:55:54:c3:55:7e:b0:43:65:
76:ed:46:4c:6a:25:c7:66:e3:4b:d9:cc:70:49:0d:
d1:9d:7b:e2:ee:3b:bb:05:a5:2f:f2:9d:02:3f:cb:
ac:75:56:c2:29:64:b0:e3:12:89:cc:90:21:d0:2a:
8a:fe:b2:3f:09:cc:4c:f7:f9:7f:a5:b7:80:1f:2e:
dc:cf:fb:31:4d:8c:9b:25:70:08:56:99:6c:80:d4:
eb:0a:51:46:0e:b3:7c:1a:21:fa:50:b9:9e:dd:92:
ae:f9:d3:3b:ab:37:d3:c7:2c:ce:d7:11:c4:7c:16:
bf:47:7a:b6:73:a3:a9:bc:a6:77:b7:3a:e6:a0:1d:
10:e4:87:32:30:44:67:5a:55:41:15:70:61:79:75:
54:36:4e:68:52:65:38:f9:d1:60:b0:b9:de:20:6f:
5f:c2:40:12:5b:7b:2b:c8:4c:23:2b:52:85:06:a4:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.28.0/22
103.252.228.0/22
Signature Algorithm: sha256WithRSAEncryption
35:bc:b5:26:f8:76:95:cd:fb:d1:9c:14:e0:03:08:2b:1e:b2:
9e:c0:ab:4d:35:69:a9:0d:dc:54:97:bb:e8:e3:54:84:1b:41:
48:a0:57:f4:30:9a:ff:07:02:59:6e:5c:da:84:1b:7a:97:2d:
0f:ff:af:c1:0f:04:d7:3c:19:16:21:a0:c6:d0:b9:0f:46:12:
00:bf:e7:ad:9c:e2:9f:7a:85:ce:d7:2e:77:ec:fe:77:88:98:
4f:ec:e9:e5:09:73:9d:5f:5d:78:c3:30:6c:61:af:32:dd:b8:
cc:e8:b7:1d:9a:9c:90:46:e6:fc:8f:0b:9c:ea:26:03:3d:e8:
a3:19:f2:4e:13:ff:fd:0f:3b:b8:14:26:43:10:f0:3f:58:ef:
ed:ed:7b:f5:16:6a:10:3b:00:1e:83:66:cc:47:b1:28:09:a5:
cc:cf:41:62:51:8d:8a:2e:d3:a5:ce:26:be:1c:82:82:42:4e:
93:a5:6d:8f:eb:db:5c:37:d2:ed:e9:e4:ed:cb:eb:35:1a:a6:
9f:73:41:fb:fe:b4:87:61:40:b9:95:1d:a2:f0:c2:10:a1:f3:
f1:42:db:0a:eb:3d:c4:a9:c1:d5:b6:c2:26:df:bf:78:12:75:
0d:3a:00:bc:92:f0:f7:18:02:da:98:47:6f:83:1c:cc:85:d6:
40:6e:d1:e6
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDArD9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwMTAyMzEwMloXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTZBQjcxMTAvBgNVBAUTKDg0OUIwRDk5MDIwQkYxRDlENkY4RDNG
MDI4Qzk0RjBBQTAxMUY2QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZ8pKiBdPDi+aeajbo1BaCtq3JpzQ7aXqjykKqcxp0uio6CBf4IbrS7SYMnhRS
Zkv/m7MIk3ZAYEF9Cu+wuiCkNdwrgRG+2kQ/zCclT/9mphpVVMNVfrBDZXbtRkxq
Jcdm40vZzHBJDdGde+LuO7sFpS/ynQI/y6x1VsIpZLDjEonMkCHQKor+sj8JzEz3
+X+lt4AfLtzP+zFNjJslcAhWmWyA1OsKUUYOs3waIfpQuZ7dkq750zurN9PHLM7X
EcR8Fr9HerZzo6m8pne3OuagHRDkhzIwRGdaVUEVcGF5dVQ2TmhSZTj50WCwud4g
b1/CQBJbeyvITCMrUoUGpJGNAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUhJsNmQIL
8dnW+NPwKMlPCqAR9qYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE2QUI3L0M2REMxRDVDNDUwNTExRjE4MzBENjJGNDkwODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNkFCNy9DNkRDMUQ1QzQ1MDUxMUYxODMwRDYyRjQ5MDgzMzc3My9oSnNObVFJ
TDhkblctTlB3S01sUENxQVI5cVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBAIr+xwDBAJn/OQwDQYJKoZIhvcNAQELBQADggEBADW8tSb4dpXN
+9GcFOADCCsesp7Aq001aakN3FSXu+jjVIQbQUigV/Qwmv8HAlluXNqEG3qXLQ//
r8EPBNc8GRYhoMbQuQ9GEgC/562c4p96hc7XLnfs/neImE/s6eUJc51fXXjDMGxh
rzLduMzotx2anJBG5vyPC5zqJgM96KMZ8k4T//0PO7gUJkMQ8D9Y7+3te/UWahA7
AB6DZsxHsSgJpczPQWJRjYou06XOJr4cgoJCTpOlbY/r21w30u3p5O3L6zUapp9z
Qfv+tIdhQLmVHaLwwhCh8/FC2wrrPcSpwdW2wibfv3gSdQ06ALyS8PcYAtqYR2+D
HMyF1kBu0eY=
-----END CERTIFICATE-----
Generated at Tue May 12 22:03:29 2026 by rpki-client