Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
File: jTeJSwlB7P1NawXh4UyrhWmHsF0.cer (raw, json)
Hash identifier: gX5Owf4viaG6Z1HkHgg0Uye2pOjSUUGLlLop+ONwIM4=
Subject key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE7D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 13:11:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.55.212.0/24
IP: 2001:df3:c400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175741 (0x2ae7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 23 13:11:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:48:12:05:91:ef:6e:18:bc:f3:52:1e:e9:
02:7a:92:fc:5b:e1:9c:53:73:be:32:1e:24:76:4b:
05:06:2f:4c:ac:2e:27:5d:be:0c:fd:af:9e:ae:e8:
b0:41:89:0a:76:b4:64:d4:66:09:7a:7a:6b:92:88:
22:42:66:a7:ce:cb:2f:fe:33:06:4e:11:dd:89:bf:
81:22:dc:50:f3:ca:aa:0b:99:ff:c9:55:bb:16:64:
69:12:92:e0:b6:e1:22:c3:c7:90:ad:62:6d:83:7a:
31:d4:a7:e9:80:3c:20:6c:26:0c:e6:41:48:88:bb:
d1:5a:fd:40:a2:ae:36:27:19:9a:a1:dc:36:cd:5c:
3b:d2:0f:d5:9d:50:a2:fe:5e:e5:6e:7a:b9:be:05:
94:47:44:3c:c8:04:7c:41:e8:70:40:c8:ad:04:1e:
6f:53:30:6d:6a:ec:4c:16:cd:2f:4a:8c:38:97:fa:
bb:5f:71:a9:d3:90:29:6e:bb:12:19:e2:dc:e5:68:
57:5c:9f:42:4b:9c:a2:74:f0:54:06:7c:3c:f4:ea:
58:e3:38:c3:26:95:45:0b:66:d8:5e:e8:73:11:05:
ef:f8:28:17:ed:27:6b:a5:f7:b2:53:c0:cf:fe:19:
e4:29:8a:2b:27:ae:8e:d0:22:0e:06:f3:d2:9e:8f:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.212.0/24
IPv6:
2001:df3:c400::/48
Signature Algorithm: sha256WithRSAEncryption
24:da:74:00:e1:5e:64:e9:7c:33:c0:b7:a5:10:ad:80:8e:11:
bb:18:80:9c:f6:1d:59:6d:bc:9c:a5:fe:55:a3:24:71:ed:2a:
22:40:de:8c:cd:1b:8e:43:5c:fc:f1:ab:aa:09:84:67:3e:ca:
0b:ee:47:b0:63:aa:f0:6b:be:54:6d:54:fb:9d:6e:ab:a0:82:
2e:96:4b:2c:d0:ca:cd:2a:ec:a7:6a:ba:8d:bc:c6:d7:6a:d8:
c6:17:80:c6:62:77:2b:6f:e5:28:b9:0b:82:5f:2d:37:6b:84:
90:18:53:4c:eb:77:5b:03:31:e1:3b:e8:08:c7:c2:0d:2e:71:
40:6e:d5:d6:51:64:cd:d2:cd:40:04:d6:d4:3f:4f:eb:2c:e9:
d3:13:21:0c:40:4c:56:97:4c:60:81:8d:11:ba:3a:73:b7:9d:
ce:7a:87:82:fc:1f:8d:f7:3a:5f:9d:89:02:8e:a7:ab:fe:97:
0b:44:16:85:38:22:40:d9:0f:f4:9c:a7:89:41:9c:07:05:e5:
36:d0:ee:9e:1e:cd:73:f2:1a:5d:03:70:51:01:4c:2d:9c:4a:
d2:4a:89:6e:c6:25:db:9b:ff:36:4d:20:5a:c7:55:51:6f:8c:
13:e9:19:87:c2:1a:1b:c5:ca:07:ca:64:7c:65:37:79:1f:75:
53:02:04:a6
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAq59MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyMzEzMTEyMloXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTg5MEQxMTAvBgNVBAUTKDhEMzc4OTRCMDk0MUVDRkQ0RDZCMDVF
MUUxNENBQjg1Njk4N0IwNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDr0gSBZHvbhi881Ie6QJ6kvxb4ZxTc74yHiR2SwUGL0ysLiddvgz9r56u6LBB
iQp2tGTUZgl6emuSiCJCZqfOyy/+MwZOEd2Jv4Ei3FDzyqoLmf/JVbsWZGkSkuC2
4SLDx5CtYm2DejHUp+mAPCBsJgzmQUiIu9Fa/UCirjYnGZqh3DbNXDvSD9WdUKL+
XuVuerm+BZRHRDzIBHxB6HBAyK0EHm9TMG1q7EwWzS9KjDiX+rtfcanTkCluuxIZ
4tzlaFdcn0JLnKJ08FQGfDz06ljjOMMmlUULZthe6HMRBe/4KBftJ2ul97JTwM/+
GeQpiisnro7QIg4G89Kej/gnAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUjTeJSwlB
7P1NawXh4UyrhWmHsF0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU4OTBELzIxQjdBODBFRkZGQzExRTU4NkI0RDk2NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1ODkwRC8yMUI3QTgwRUZGRkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3ds
QjdQMU5hd1hoNFV5cmhXbUhzRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBABnN9QwDwQCAAIwCQMHACABDfPEADANBgkqhkiG9w0BAQsFAAOC
AQEAJNp0AOFeZOl8M8C3pRCtgI4RuxiAnPYdWW28nKX+VaMkce0qIkDejM0bjkNc
/PGrqgmEZz7KC+5HsGOq8Gu+VG1U+51uq6CCLpZLLNDKzSrsp2q6jbzG12rYxheA
xmJ3K2/lKLkLgl8tN2uEkBhTTOt3WwMx4TvoCMfCDS5xQG7V1lFkzdLNQATW1D9P
6yzp0xMhDEBMVpdMYIGNEbo6c7edznqHgvwfjfc6X52JAo6nq/6XC0QWhTgiQNkP
9JyniUGcBwXlNtDunh7Nc/IaXQNwUQFMLZxK0kqJbsYl25v/Nk0gWsdVUW+ME+kZ
h8IaG8XKB8pkfGU3eR91UwIEpg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:33:44 2026 by rpki-client