Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer
File: r8_0bpt9aQ0-itnal3CgDiHeQUs.cer (raw, json)
Hash identifier: d6MU5hqR9DBlLCWOzWsHOW8wYZH8WbsPgka+9QZ8fb8=
Subject key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AED1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Apr 2026 14:34:04 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 203.14.96.0/22
IP: 2405:b680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175825 (0x2aed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 24 14:34:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:6a:d2:32:ce:70:97:79:03:92:35:21:b2:
f2:44:7b:59:9e:54:f0:15:fe:54:9f:66:a9:7e:6c:
7d:0e:6f:a1:a2:25:79:93:2f:f0:cc:c9:68:dc:51:
70:54:33:34:9e:76:76:f0:0a:f7:30:99:91:51:01:
95:1f:91:8a:2a:27:aa:1c:48:d6:6b:07:9e:35:26:
16:9e:02:33:46:53:d9:cc:db:1a:b3:bf:4d:36:2a:
a7:58:02:25:93:14:8c:90:ba:26:60:6b:07:76:75:
0d:c5:12:25:c7:cc:62:f8:7b:df:bb:e9:27:08:61:
fb:18:22:36:7f:07:80:c1:95:48:70:0a:ed:7a:52:
2f:58:9b:d8:a8:bc:3d:29:bb:29:0c:a2:1b:24:38:
8e:54:f9:b8:88:fb:10:da:5d:37:77:e2:ed:e3:a2:
09:78:f7:0d:cb:54:bc:18:ca:7d:77:71:bf:d4:ad:
d0:0c:c3:57:f7:f1:5c:93:16:ca:4b:87:ac:80:45:
c0:c8:35:3a:b7:c0:8f:d6:ce:8f:ec:9a:b4:39:65:
21:b5:f8:b0:ce:20:03:b5:ed:59:d0:93:82:00:83:
15:79:8d:8c:e1:7b:c8:3e:6f:95:cb:a4:82:2f:3e:
c3:8d:b3:61:b4:f5:37:7f:14:63:f9:48:0f:54:81:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.96.0/22
IPv6:
2405:b680::/32
Signature Algorithm: sha256WithRSAEncryption
47:3f:f9:69:af:22:9c:96:a8:24:30:0d:6e:30:b3:73:73:c5:
27:27:1e:20:24:69:2e:8a:b8:33:d2:71:83:6d:e5:3d:f1:55:
35:e3:cb:f6:f1:5d:5b:98:3b:02:73:dd:c4:2a:6a:97:e5:92:
cd:0a:72:34:a2:e3:4e:7d:73:0d:3f:1d:a3:ba:12:b2:8b:de:
54:6b:43:97:48:a4:07:a3:fb:1e:b6:d1:b8:d2:26:2f:2d:5b:
81:8c:38:a0:68:e2:eb:8b:23:25:f4:2b:55:4c:f9:f5:5f:f1:
39:84:2f:d6:78:b2:1b:b7:3a:4e:18:dc:01:f0:91:94:ab:45:
7e:56:06:e4:25:ae:35:7c:f8:79:c5:26:bf:7a:68:67:40:00:
1e:45:6d:23:0a:9c:f2:77:f4:58:e6:9a:6a:7b:1e:5f:fd:23:
b4:1e:d0:a8:fe:04:2a:4a:27:7a:a2:ca:e4:0e:56:e8:5f:f5:
f4:7f:fa:75:46:5e:3f:ef:b6:e5:98:03:e7:3d:24:09:61:43:
48:26:87:b3:b6:45:6e:55:b0:b1:98:6d:0d:0d:f3:57:30:d0:
5a:55:96:ad:d9:3f:f1:fb:b9:03:aa:d9:a5:ba:a8:ec:cd:d1:
03:c8:fb:74:ff:f1:d8:7e:a7:5e:05:ae:f3:05:37:2e:21:3e:
2b:6c:50:27
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAq7RMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyNDE0MzQwNFoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUQ2NUMxMTAvBgNVBAUTKEFGQ0ZGNDZFOUI3RDY5MEQzRThBRDlE
QTk3NzBBMDBFMjFERTQxNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCKqGrSMs5wl3kDkjUhsvJEe1meVPAV/lSfZql+bH0Ob6GiJXmTL/DMyWjcUXBU
MzSednbwCvcwmZFRAZUfkYoqJ6ocSNZrB541JhaeAjNGU9nM2xqzv002KqdYAiWT
FIyQuiZgawd2dQ3FEiXHzGL4e9+76ScIYfsYIjZ/B4DBlUhwCu16Ui9Ym9iovD0p
uykMohskOI5U+biI+xDaXTd34u3jogl49w3LVLwYyn13cb/UrdAMw1f38VyTFspL
h6yARcDINTq3wI/Wzo/smrQ5ZSG1+LDOIAO17VnQk4IAgxV5jYzhe8g+b5XLpIIv
PsONs2G09Td/FGP5SA9UgSktAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUr8/0bpt9
aQ0+itnal3CgDiHeQUswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVENjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFRDY1Qy8wMTQ5N0U0ODFFM0QxMUYxQkZCNUVBMUMyRjNEOEM2Ny9yOF8wYnB0
OWFRMC1pdG5hbDNDZ0RpSGVRVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBALLDmAwDQQCAAIwBwMFACQFtoAwDQYJKoZIhvcNAQELBQADggEB
AEc/+WmvIpyWqCQwDW4ws3NzxScnHiAkaS6KuDPScYNt5T3xVTXjy/bxXVuYOwJz
3cQqapflks0KcjSi4059cw0/HaO6ErKL3lRrQ5dIpAej+x620bjSJi8tW4GMOKBo
4uuLIyX0K1VM+fVf8TmEL9Z4shu3Ok4Y3AHwkZSrRX5WBuQlrjV8+HnFJr96aGdA
AB5FbSMKnPJ39Fjmmmp7Hl/9I7Qe0Kj+BCpKJ3qiyuQOVuhf9fR/+nVGXj/vtuWY
A+c9JAlhQ0gmh7O2RW5VsLGYbQ0N81cw0FpVlq3ZP/H7uQOq2aW6qOzN0QPI+3T/
8dh+p14FrvMFNy4hPitsUCc=
-----END CERTIFICATE-----
Generated at Wed May 13 01:23:20 2026 by rpki-client