Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer
File: oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer (raw, json)
Hash identifier: AKJ3RmfcVPPfmIvttdXSKFh4jRgwQPuOdIZRi18wCQo=
Subject key identifier: A2:2F:17:6C:76:3B:4D:DE:D9:26:55:F1:76:3C:11:76:3C:62:C2:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A526
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Mar 2026 00:56:02 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 55304
IP: 183.177.120.0/22
IP: 2001:df7:1400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173350 (0x2a526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 19 00:56:02 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91AB26A, serialNumber=A22F176C763B4DDED92655F1763C11763C62C215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:69:9e:ba:7b:14:a7:df:ae:8f:2d:bb:91:
7b:e7:97:98:ce:90:ae:95:3e:a9:f6:31:45:eb:46:
96:ef:1b:2a:76:7e:56:5e:52:28:d5:97:05:e4:8e:
17:fa:f9:ab:f7:2b:92:3a:53:1a:8c:db:a0:bc:dd:
98:88:72:31:13:93:12:d4:cb:25:68:c2:70:f1:b6:
d0:05:ba:d8:58:49:e5:b1:0f:24:99:ca:cc:15:9f:
4f:84:31:ca:3c:4b:e4:23:3c:ce:99:d1:ae:e0:6d:
4e:e6:1b:ae:ab:2a:e0:93:a8:a8:94:d9:cb:35:d6:
a4:f9:e1:52:6b:f4:78:07:75:ca:eb:94:64:a3:15:
fc:f9:66:38:f8:0c:8c:88:ee:b8:bc:45:7f:f6:08:
0e:04:d8:8f:23:70:ac:cf:be:50:c7:63:3d:0a:8b:
dd:89:33:29:8c:35:aa:df:46:c1:33:3e:04:95:9d:
b9:33:72:20:30:54:4a:50:0c:c1:65:9c:21:1e:54:
95:42:1f:22:6e:01:b1:ba:5a:8b:34:5f:f4:cf:12:
d2:e5:66:4e:89:bb:ee:1c:1a:65:4e:62:4e:6a:16:
87:d2:ac:0c:b4:88:cc:15:43:31:ca:a8:4f:ea:3c:
15:de:f4:d6:dd:5b:3c:3f:7e:f8:42:19:c1:51:60:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2F:17:6C:76:3B:4D:DE:D9:26:55:F1:76:3C:11:76:3C:62:C2:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55304
sbgp-ipAddrBlock: critical
IPv4:
183.177.120.0/22
IPv6:
2001:df7:1400::/48
Signature Algorithm: sha256WithRSAEncryption
42:5e:c6:36:5a:02:9e:b4:d8:ab:2d:26:e2:ca:da:d0:11:f4:
58:75:25:71:5b:00:d0:5e:b0:e0:11:32:05:63:e2:3f:d1:8a:
95:06:74:5b:cf:22:4f:ff:e8:19:e7:6d:1d:2e:11:be:ce:57:
ea:de:37:d0:99:55:b9:ac:6c:0c:7c:91:70:cc:95:e8:f0:97:
c0:85:39:c8:92:24:9f:c5:0d:9b:b2:77:ac:57:28:fa:98:9c:
8e:bd:49:f7:cd:9f:b4:f3:10:38:8c:b4:3f:27:ca:5b:9e:e9:
b0:90:5f:dd:ee:79:a2:26:b4:72:ed:8c:d2:ea:7e:ac:43:63:
72:96:24:0d:7d:26:d0:4e:94:de:1e:33:2c:39:d9:c1:a0:51:
79:3d:62:88:20:d2:be:85:80:a6:62:db:4a:ad:25:1b:ec:ce:
15:df:01:4c:93:2c:b6:1e:32:68:3b:d5:b6:5a:28:20:9e:3d:
aa:e7:e1:a4:5d:cb:82:31:c6:6d:c9:b2:2f:75:6f:7e:48:00:
1a:4b:a2:37:a2:35:d9:ea:c1:19:5b:b8:41:32:a9:5a:6b:8e:
61:24:07:e7:c3:c8:2b:4f:79:56:9f:59:a8:eb:87:ea:1a:76:
2f:a4:fe:98:3c:d3:a5:89:72:1d:68:14:57:c3:4f:0a:7c:33:
04:51:49:7c
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAqUmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMxOTAwNTYwMloXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUIyNkExMTAvBgNVBAUTKEEyMkYxNzZDNzYzQjREREVEOTI2NTVG
MTc2M0MxMTc2M0M2MkMyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDV22meunsUp9+ujy27kXvnl5jOkK6VPqn2MUXrRpbvGyp2flZeUijVlwXkjhf6
+av3K5I6UxqM26C83ZiIcjETkxLUyyVownDxttAFuthYSeWxDySZyswVn0+EMco8
S+QjPM6Z0a7gbU7mG66rKuCTqKiU2cs11qT54VJr9HgHdcrrlGSjFfz5Zjj4DIyI
7ri8RX/2CA4E2I8jcKzPvlDHYz0Ki92JMymMNarfRsEzPgSVnbkzciAwVEpQDMFl
nCEeVJVCHyJuAbG6Wos0X/TPEtLlZk6Ju+4cGmVOYk5qFofSrAy0iMwVQzHKqE/q
PBXe9NbdWzw/fvhCGcFRYDSjAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUoi8XbHY7
Td7ZJlXxdjwRdjxiwhUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFCMjZBLzY0MTczRERBMjMyRTExRjE4NTM3QTc4MEEzODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBQjI2QS82NDE3M0REQTIzMkUxMUYxODUzN0E3ODBBMzgzMzc3My9vaThYYkhZ
N1RkN1pKbFh4ZGp3UmRqeGl3aFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANgIMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCt7F4MA8EAgAC
MAkDBwAgAQ33FAAwDQYJKoZIhvcNAQELBQADggEBAEJexjZaAp602KstJuLK2tAR
9Fh1JXFbANBesOARMgVj4j/RipUGdFvPIk//6BnnbR0uEb7OV+reN9CZVbmsbAx8
kXDMlejwl8CFOciSJJ/FDZuyd6xXKPqYnI69SffNn7TzEDiMtD8nylue6bCQX93u
eaImtHLtjNLqfqxDY3KWJA19JtBOlN4eMyw52cGgUXk9Yogg0r6FgKZi20qtJRvs
zhXfAUyTLLYeMmg71bZaKCCeParn4aRdy4Ixxm3Jsi91b35IABpLojeiNdnqwRlb
uEEyqVprjmEkB+fDyCtPeVafWajrh+oadi+k/pg806WJch1oFFfDTwp8MwRRSXw=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:00:54 2026 by rpki-client