Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
File: mFpmWpz7T1ygDsqL_rgGML9PSBY.cer (raw, json)
Hash identifier: QK5jcEdy9Vhgc+iPdLe1gNEqUhjN1pBo5nF0CfSIBI0=
Subject key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A6A0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Mar 2026 14:31:18 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 17645
AS: 45794
AS: 55332
IP: 58.65.0.0/19
IP: 116.51.0.0/16
IP: 175.28.8.0/22
IP: 202.136.160.0/19
IP: 2402:2c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173728 (0x2a6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 26 14:31:18 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e3:7b:94:0e:be:7f:f9:24:d7:95:3a:3a:f5:
2c:68:af:34:e2:aa:c5:93:4f:5c:31:79:49:db:31:
4d:91:0a:58:1f:af:2b:40:2e:e9:4f:2d:6c:5b:e1:
b0:20:a9:39:23:e2:1c:98:11:dc:6b:76:dc:37:bb:
4d:96:67:97:90:63:65:a6:dd:87:34:09:81:c8:87:
f3:60:81:3c:f0:84:7f:a6:67:4c:3c:72:a2:aa:dd:
e1:2e:d2:cc:ce:54:4f:94:3e:cb:26:4a:ec:a8:31:
71:4e:b4:97:20:bf:02:cb:af:6a:70:1d:4d:28:ab:
d8:91:8b:3a:9f:6e:2c:14:7f:8c:00:64:00:55:31:
2c:35:34:42:0d:d3:d6:4d:b6:ce:c6:b0:15:51:ff:
3c:4c:13:af:a5:63:d2:91:1a:05:06:67:e6:93:08:
bc:df:07:f5:f5:18:d5:31:3c:37:6e:42:c5:ad:32:
34:0b:6c:fc:66:8e:c6:40:19:ba:f5:00:33:76:04:
bb:d6:db:31:31:62:49:88:73:d1:46:ad:75:bd:5d:
70:cc:fb:ad:e4:fb:8e:df:b3:ab:5d:28:07:04:19:
88:fc:58:40:6d:29:6c:17:73:78:67:7b:dc:98:61:
40:89:24:7e:35:15:0a:64:f2:c7:a4:46:07:3a:6e:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17645
45794
55332
sbgp-ipAddrBlock: critical
IPv4:
58.65.0.0/19
116.51.0.0/16
175.28.8.0/22
202.136.160.0/19
IPv6:
2402:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
da:80:2a:17:a3:51:09:7a:2d:7e:09:69:87:1e:05:ba:09:37:
f3:ef:65:8e:ca:28:c2:45:f4:56:a2:58:2c:e1:9a:5b:a4:f0:
de:09:93:f3:8f:6f:eb:3b:30:79:d4:51:d6:86:16:81:1a:28:
3a:c5:70:11:55:7d:82:38:d0:19:79:49:57:f9:ce:01:ea:d4:
16:70:79:0c:d2:4a:01:29:bf:f2:84:62:8a:cc:c9:21:61:00:
cc:15:ad:20:40:85:7b:e9:9d:75:4f:ce:54:0a:e5:82:0c:d0:
97:ec:b7:c9:95:58:81:ad:ec:b6:8f:01:82:38:63:73:0c:a7:
eb:ba:9a:1d:b0:2b:5a:7e:63:18:bf:da:14:74:b7:8e:fb:a0:
b6:0e:af:64:61:6e:41:41:7f:30:af:77:cf:a7:9c:fc:8c:30:
d3:6b:e4:92:16:bd:85:c9:40:9c:a3:c2:bf:5a:08:42:1a:9e:
c3:8f:1e:58:b8:45:03:47:c6:44:5f:17:4a:65:59:44:ea:f2:
e8:82:66:e0:2c:82:ef:dd:96:03:73:99:92:5d:b8:1e:56:70:
fb:bd:d1:49:d5:bc:77:a7:32:9e:18:3e:35:39:14:7c:34:0f:
3c:cf:c9:44:9a:bb:03:5f:53:85:c6:2d:d7:40:be:35:31:cb:
62:ad:15:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIDAqagMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMyNjE0MzExOFoXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4
QkZFQjgwNjMwQkY0RjQ4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD943uUDr5/+STXlTo69SxorzTiqsWTT1wxeUnbMU2RClgfrytALulPLWxb4bAg
qTkj4hyYEdxrdtw3u02WZ5eQY2Wm3Yc0CYHIh/NggTzwhH+mZ0w8cqKq3eEu0szO
VE+UPssmSuyoMXFOtJcgvwLLr2pwHU0oq9iRizqfbiwUf4wAZABVMSw1NEIN09ZN
ts7GsBVR/zxME6+lY9KRGgUGZ+aTCLzfB/X1GNUxPDduQsWtMjQLbPxmjsZAGbr1
ADN2BLvW2zExYkmIc9FGrXW9XXDM+63k+47fs6tdKAcEGYj8WEBtKWwXc3hne9yY
YUCJJH41FQpk8sekRgc6bqUNAgMBAAGjggM4MIIDNDAdBgNVHQ4EFgQUmFpmWpz7
T1ygDsqL/rgGML9PSBYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU2RDVELzlEQ0I2OEUwMUQ4ODExRTI5NEI5NTVFMTA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFNkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6
N1QxeWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQgBAf8EFDAS
oBAwDgICRO0CAwCy4gIDANgkMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQF
OkEAAwMAdDMDBAKvHAgDBAXKiKAwDQQCAAIwBwMFACQCLAAwDQYJKoZIhvcNAQEL
BQADggEBANqAKhejUQl6LX4JaYceBboJN/PvZY7KKMJF9FaiWCzhmluk8N4Jk/OP
b+s7MHnUUdaGFoEaKDrFcBFVfYI40Bl5SVf5zgHq1BZweQzSSgEpv/KEYorMySFh
AMwVrSBAhXvpnXVPzlQK5YIM0Jfst8mVWIGt7LaPAYI4Y3MMp+u6mh2wK1p+Yxi/
2hR0t477oLYOr2RhbkFBfzCvd8+nnPyMMNNr5JIWvYXJQJyjwr9aCEIansOPHli4
RQNHxkRfF0plWUTq8uiCZuAsgu/dlgNzmZJduB5WcPu90UnVvHenMp4YPjU5FHw0
DzzPyUSauwNfU4XGLddAvjUxy2KtFRI=
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:35 2026 by rpki-client