Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
File: rVo_mWvNoZuP1pKxr8inCuMzPO0.cer (raw, json)
Hash identifier: +DioHjffnqoXHYs6CBp/US/f8cgAXmoIS8T8mzzxg4c=
Subject key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B11F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 08:48:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 2569 -- 2570
AS: 4648
AS: 4771
AS: 4834
AS: 9325
AS: 17994
AS: 18006
AS: 18348
AS: 18353
AS: 38479
AS: 38485
AS: 38560
AS: 45222
AS: 55936
AS: 64070
AS: 133124
AS: 133420
AS: 133473
AS: 134444
IP: 45.65.4.0/22
IP: 103.16.20.0/22
IP: 103.232.108.0/22
IP: 103.253.48.0/22
IP: 110.34.48.0/22
IP: 115.188.0.0/15
IP: 122.56.0.0/13
IP: 125.236.0.0/19
IP: 125.236.34.0/24
IP: 125.236.40.0 -- 125.236.45.255
IP: 125.236.48.0 -- 125.236.79.255
IP: 125.236.96.0 -- 125.239.255.255
IP: 202.14.96.0/24
IP: 202.20.32.0/20
IP: 202.27.156.0/22
IP: 202.27.169.0/24
IP: 202.27.176.0 -- 202.27.185.255
IP: 202.27.254.0/23
IP: 202.36.0.0/21
IP: 202.36.30.0/23
IP: 202.36.40.0/24
IP: 202.36.90.0/24
IP: 202.37.45.0/24
IP: 202.37.236.0/22
IP: 202.37.242.0 -- 202.37.247.255
IP: 202.49.49.0/24
IP: 202.49.160.0/22
IP: 202.49.169.0/24
IP: 202.50.74.0/23
IP: 202.50.80.0/22
IP: 202.50.110.0/24
IP: 202.50.116.0/24
IP: 202.50.119.0/24
IP: 202.50.224.0/20
IP: 202.50.245.0/24
IP: 202.55.96.0/20
IP: 203.96.0.0/17
IP: 210.54.0.0/15
IP: 210.86.0.0/17
IP: 219.88.0.0/15
IP: 220.247.132.0/22
IP: 222.152.0.0/14
IP: 2401:4540::/32
IP: 2403:9800::/32
IP: 2404:e200::/32
IP: 2405:e840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176415 (0x2b11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 08:48:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:3d:f8:d0:91:52:ed:95:8f:96:14:d9:bd:
69:d2:e8:62:86:08:10:c6:59:66:d8:1c:48:fd:29:
65:a3:87:da:5f:02:d5:18:d1:a3:bf:52:1a:60:bc:
63:ee:f7:97:10:55:03:bb:a0:55:9d:cc:6a:20:6c:
e0:8c:b2:b1:06:b5:01:f6:df:fb:f5:18:e2:a9:13:
dd:89:cf:d7:69:94:50:7b:99:b5:44:ae:a9:38:50:
a7:04:64:7b:d4:58:f7:53:99:55:76:e5:d4:fb:bf:
d3:6d:da:dd:3a:31:27:f5:69:3b:e3:f5:12:66:78:
64:39:4f:8d:ac:25:cc:8e:fc:ff:af:cd:66:3c:35:
fb:bb:41:ef:6c:91:a5:66:c6:1f:0d:a2:68:79:13:
ae:6e:d3:0c:83:95:f7:9a:91:bb:c4:c9:04:83:b6:
d6:c0:b9:77:f8:f7:b0:ee:65:02:a6:22:61:72:fa:
44:31:87:d0:be:a4:88:72:6c:86:21:4d:bc:26:4c:
66:22:76:03:31:d8:fb:94:aa:40:d8:82:04:77:64:
10:45:d7:73:ed:ed:f1:3f:90:84:dd:aa:a0:64:11:
34:d7:5e:51:89:b3:09:9c:34:e2:68:0b:5d:8a:bd:
22:f8:bc:f3:f1:1d:64:7a:21:a6:b1:6c:d5:a0:69:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2569-2570
4648
4771
4834
9325
17994
18006
18348
18353
38479
38485
38560
45222
55936
64070
133124
133420
133473
134444
sbgp-ipAddrBlock: critical
IPv4:
45.65.4.0/22
103.16.20.0/22
103.232.108.0/22
103.253.48.0/22
110.34.48.0/22
115.188.0.0/15
122.56.0.0/13
125.236.0.0/19
125.236.34.0/24
125.236.40.0-125.236.45.255
125.236.48.0-125.236.79.255
125.236.96.0-125.239.255.255
202.14.96.0/24
202.20.32.0/20
202.27.156.0/22
202.27.169.0/24
202.27.176.0-202.27.185.255
202.27.254.0/23
202.36.0.0/21
202.36.30.0/23
202.36.40.0/24
202.36.90.0/24
202.37.45.0/24
202.37.236.0/22
202.37.242.0-202.37.247.255
202.49.49.0/24
202.49.160.0/22
202.49.169.0/24
202.50.74.0/23
202.50.80.0/22
202.50.110.0/24
202.50.116.0/24
202.50.119.0/24
202.50.224.0/20
202.50.245.0/24
202.55.96.0/20
203.96.0.0/17
210.54.0.0/15
210.86.0.0/17
219.88.0.0/15
220.247.132.0/22
222.152.0.0/14
IPv6:
2401:4540::/32
2403:9800::/32
2404:e200::/32
2405:e840::/32
Signature Algorithm: sha256WithRSAEncryption
93:ca:3b:2f:7e:92:51:ac:ef:0e:19:03:62:29:9b:d0:59:b3:
04:78:1a:35:4c:a7:df:75:25:1a:9d:5d:9b:0e:47:6d:39:dd:
32:82:68:bb:ed:07:bf:cd:cc:da:3f:b8:5e:ea:75:de:53:ba:
a4:92:e5:e8:50:86:48:02:56:10:36:8d:db:8b:0e:04:28:7b:
2d:32:70:f4:a2:c0:44:b2:06:c4:40:f4:a0:fb:f5:52:87:c8:
0c:3a:6d:03:53:fb:34:d9:19:f2:53:a7:05:7f:52:8f:e8:e2:
07:c3:71:ac:af:8d:e9:6a:bd:69:c1:a0:ad:02:53:dd:1a:82:
27:0a:30:f7:d4:ed:38:26:38:84:8e:75:36:d1:c6:03:65:a7:
bf:51:8e:cc:e5:e2:23:c3:d3:bb:6b:64:fe:2d:f3:94:20:90:
fc:ee:03:4b:ec:d2:25:94:40:94:1c:f5:fe:7e:23:de:4f:6e:
59:fc:80:8a:85:37:ef:23:ef:61:cb:88:bf:0a:29:75:40:18:
9d:5f:6f:38:79:75:09:7d:43:de:ad:dd:98:c3:eb:e9:6b:b6:
a1:4a:e3:27:52:d4:75:57:18:e0:2c:df:a4:fa:ac:3c:9a:07:
6d:56:68:3f:00:c6:d7:14:58:29:75:bf:6c:1f:c0:c5:4b:3b:
27:69:4f:51
-----BEGIN CERTIFICATE-----
MIIHtzCCBp+gAwIBAgIDArEfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUwMTA4NDgyMFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0NDRjQxMTAvBgNVBAUTKEFENUEzRjk5NkJDREExOUI4RkQ2OTJC
MUFGQzhBNzBBRTMzMzNDRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCHST340JFS7ZWPlhTZvWnS6GKGCBDGWWbYHEj9KWWjh9pfAtUY0aO/UhpgvGPu
95cQVQO7oFWdzGogbOCMsrEGtQH23/v1GOKpE92Jz9dplFB7mbVErqk4UKcEZHvU
WPdTmVV25dT7v9Nt2t06MSf1aTvj9RJmeGQ5T42sJcyO/P+vzWY8Nfu7Qe9skaVm
xh8Nomh5E65u0wyDlfeakbvEyQSDttbAuXf497DuZQKmImFy+kQxh9C+pIhybIYh
TbwmTGYidgMx2PuUqkDYggR3ZBBF13Pt7fE/kITdqqBkETTXXlGJswmcNOJoC12K
vSL4vPPxHWR6IaaxbNWgaaD7AgMBAAGjggSsMIIEqDAdBgNVHQ4EFgQUrVo/mWvN
oZuP1pKxr8inCuMzPO0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNDQ0Y0L0FBRDU3OTM2RjBGMTExRjBCRDZERjU1NTQzNkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDQ0NGNC9BQUQ1NzkzNkYwRjExMUYwQkQ2REY1NTU0MzZGNTZCQy9yVm9fbVd2
Tm9adVAxcEt4cjhpbkN1TXpQTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcQYIKwYBBQUHAQgBAf8EYjBg
oF4wXDAIAgIKCQICCgoCAhIoAgISowICEuICAiRtAgJGSgICRlYCAkesAgJHsQID
AJZPAgMAllUCAwCWoAIDALCmAgMA2oACAwD6RgIDAggEAgMCCSwCAwIJYQIDAg0s
MIIBYwYIKwYBBQUHAQcBAf8EggFSMIIBTjCCASYEAgABMIIBHgMEAi1BBAMEAmcQ
FAMEAmfobAMEAmf9MAMEAm4iMAMDAXO8AwMDejgDBAV97AADBAB97CIwDAMEA33s
KAMEAX3sLDAMAwQEfewwAwQEfexAMAsDBAV97GADAwR94AMEAMoOYAMEBMoUIAME
AsobnAMEAMobqTAMAwQEyhuwAwQByhu4AwQByhv+AwQDyiQAAwQByiQeAwQAyiQo
AwQAyiRaAwQAyiUtAwQCyiXsMAwDBAHKJfIDBAPKJfADBADKMTEDBALKMaADBADK
MakDBAHKMkoDBALKMlADBADKMm4DBADKMnQDBADKMncDBATKMuADBADKMvUDBATK
N2ADBAfLYAADAwHSNgMEB9JWAAMDAdtYAwQC3PeEAwMC3pgwIgQCAAIwHAMFACQB
RUADBQAkA5gAAwUAJATiAAMFACQF6EAwDQYJKoZIhvcNAQELBQADggEBAJPKOy9+
klGs7w4ZA2Ipm9BZswR4GjVMp991JRqdXZsOR2053TKCaLvtB7/NzNo/uF7qdd5T
uqSS5ehQhkgCVhA2jduLDgQoey0ycPSiwESyBsRA9KD79VKHyAw6bQNT+zTZGfJT
pwV/Uo/o4gfDcayvjelqvWnBoK0CU90agicKMPfU7TgmOISOdTbRxgNlp79Rjszl
4iPD07trZP4t85QgkPzuA0vs0iWUQJQc9f5+I95Pbln8gIqFN+8j72HLiL8KKXVA
GJ1fbzh5dQl9Q96t3ZjD6+lrtqFK4ydS1HVXGOAs36T6rDyaB21WaD8AxtcUWCl1
v2wfwMVLOydpT1E=
-----END CERTIFICATE-----
Generated at Wed May 13 12:08:59 2026 by rpki-client