Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer
File: jqjmtSCNaoLUqRJIaXYVovYuYKM.cer (raw, json)
Hash identifier: sQjJ4B49zqpOQFgfpCtxetZhkueP89J5ozwPvT/KLl0=
Subject key identifier: 8E:A8:E6:B5:20:8D:6A:82:D4:A9:12:48:69:76:15:A2:F6:2E:60:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A22E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Mar 2026 05:16:03 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 103.131.164.0/22
IP: 103.212.220.0/22
IP: 160.202.160.0/22
IP: 2400:5920::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172590 (0x2a22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 05:16:03 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91B01B9, serialNumber=8EA8E6B5208D6A82D4A91248697615A2F62E60A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:18:7f:96:d9:b7:8c:2b:9c:d3:96:49:4d:
0e:10:4d:ae:ae:7a:4c:e1:d1:4e:68:89:75:cf:7f:
18:82:65:29:0b:db:40:d0:2e:86:a7:34:c9:3a:c3:
3e:30:ca:c7:e2:73:e9:cc:9e:50:99:50:ee:b3:63:
35:9a:c1:3a:33:46:4c:a5:15:02:55:73:b8:7d:04:
56:93:1d:64:64:84:ac:1d:fd:02:1f:66:3b:15:47:
c0:c5:4f:00:79:08:21:f1:08:ce:35:bc:a1:8d:2a:
a2:26:61:6c:33:59:18:27:63:ee:7f:13:17:62:53:
f4:de:45:9f:8f:9d:c9:2a:2b:a6:ea:97:c6:ea:f4:
5a:d4:ec:3a:26:90:15:87:aa:b1:ec:c9:80:45:16:
9a:de:6a:a6:cc:97:58:a7:47:f6:01:96:44:05:e4:
f2:7d:b9:bc:b3:51:be:dc:12:df:0f:88:94:0e:39:
29:a4:de:ba:31:49:91:98:f3:ea:11:ee:29:44:85:
2b:3d:f7:15:5e:2d:7e:25:3c:6b:38:f7:0c:10:f2:
ce:d3:e6:63:b3:2f:06:84:e1:8c:b0:40:63:72:40:
97:aa:b3:27:aa:e1:d7:ef:11:d3:36:1b:b2:15:58:
4d:c9:ff:83:71:e4:20:df:21:ae:d8:c6:2f:c7:56:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:E6:B5:20:8D:6A:82:D4:A9:12:48:69:76:15:A2:F6:2E:60:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.164.0/22
103.212.220.0/22
160.202.160.0/22
IPv6:
2400:5920::/32
Signature Algorithm: sha256WithRSAEncryption
b4:a7:ac:d8:c1:e4:ec:fc:e4:8a:f3:68:9f:e3:3d:dc:6e:cf:
37:0c:be:2f:04:03:8f:d4:49:b4:dd:3e:db:2b:15:bd:95:61:
b2:4a:ce:b7:ea:a1:98:60:98:08:90:f5:b6:29:06:dd:ac:cb:
58:21:57:75:d4:fd:85:30:26:39:ac:32:ad:b8:1b:61:d0:68:
24:51:85:e9:09:4e:97:df:29:df:09:aa:9a:90:a0:16:95:d6:
d3:86:f5:d2:4a:c1:2b:a2:f8:a6:51:83:fc:68:01:70:4d:56:
d9:a1:e0:07:86:38:a1:ba:6d:94:9a:4c:04:5e:e5:2f:c0:41:
5d:46:f1:95:85:a9:bd:2a:86:6a:6e:88:f7:9e:8d:a1:6a:28:
c7:46:1e:71:94:5b:fc:14:0e:4e:77:20:dc:fa:60:23:1a:69:
a8:40:08:f6:2d:94:1e:da:b6:85:e8:d7:e4:02:0b:e6:70:dc:
a3:3f:15:bb:87:c4:ad:18:7a:0a:dc:ee:2e:89:d9:2e:63:12:
98:5f:c2:ae:67:e8:f8:df:e9:94:87:05:d1:bf:d0:4f:fb:de:
97:b0:e3:2d:d0:77:cb:2e:53:d5:4b:2e:ba:29:a5:5a:b8:03:
b9:22:27:5e:fb:48:5a:fd:15:5c:91:6b:af:58:12:f6:d8:5d:
32:a3:5a:4f
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgIDAqIuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwNDA1MTYwM1oXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjAxQjkxMTAvBgNVBAUTKDhFQThFNkI1MjA4RDZBODJENEE5MTI0
ODY5NzYxNUEyRjYyRTYwQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfNhh/ltm3jCuc05ZJTQ4QTa6uekzh0U5oiXXPfxiCZSkL20DQLoanNMk6wz4w
ysfic+nMnlCZUO6zYzWawTozRkylFQJVc7h9BFaTHWRkhKwd/QIfZjsVR8DFTwB5
CCHxCM41vKGNKqImYWwzWRgnY+5/ExdiU/TeRZ+PnckqK6bql8bq9FrU7DomkBWH
qrHsyYBFFpreaqbMl1inR/YBlkQF5PJ9ubyzUb7cEt8PiJQOOSmk3roxSZGY8+oR
7ilEhSs99xVeLX4lPGs49wwQ8s7T5mOzLwaE4YywQGNyQJeqsyeq4dfvEdM2G7IV
WE3J/4Nx5CDfIa7Yxi/HVm5LAgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQUjqjmtSCN
aoLUqRJIaXYVovYuYKMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIwMUI5LzNBQTk4MEY4MTc4OTExRjE4QTRGQUNDMjI5M0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCMDFCOS8zQUE5ODBGODE3ODkxMUYxOEE0RkFDQzIyOTNEOEM2Ny9qcWptdFND
TmFvTFVxUkpJYVhZVm92WXVZS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8EKzAp
MBgEAgABMBIDBAJng6QDBAJn1NwDBAKgyqAwDQQCAAIwBwMFACQAWSAwDQYJKoZI
hvcNAQELBQADggEBALSnrNjB5Oz85IrzaJ/jPdxuzzcMvi8EA4/USbTdPtsrFb2V
YbJKzrfqoZhgmAiQ9bYpBt2sy1ghV3XU/YUwJjmsMq24G2HQaCRRhekJTpffKd8J
qpqQoBaV1tOG9dJKwSui+KZRg/xoAXBNVtmh4AeGOKG6bZSaTARe5S/AQV1G8ZWF
qb0qhmpuiPeejaFqKMdGHnGUW/wUDk53INz6YCMaaahACPYtlB7atoXo1+QCC+Zw
3KM/FbuHxK0Yegrc7i6J2S5jEphfwq5n6Pjf6ZSHBdG/0E/73pew4y3Qd8suU9VL
LroppVq4A7kiJ177SFr9FVyRa69YEvbYXTKjWk8=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:57 2026 by rpki-client