Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
File: tU4IRltUXO7x4uEAl3XZG6QStj0.cer (raw, json)
Hash identifier: BdQu95vUlfJCjLwcn3E/VO9z1mSZz2p9oOZlLeb4e8M=
Subject key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A14E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:40:07 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 45589
IP: 163.8.0.0/16
IP: 2405:bc00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172366 (0x2a14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 13:40:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1b:22:cd:6a:7a:08:a4:d1:f2:6b:b3:bc:cc:
17:d1:4d:ad:42:d0:33:86:fd:a1:f2:e0:01:6c:68:
f6:89:57:9a:3f:db:38:83:0f:7f:6b:61:57:6b:0c:
d1:eb:52:13:86:35:76:1e:de:12:90:78:5c:0a:99:
ad:b6:21:99:cf:81:d4:2b:14:12:81:ba:21:04:d3:
8f:5a:66:8a:13:33:cc:a4:11:8b:f3:9e:c7:ce:23:
73:88:57:fe:29:86:11:5f:06:ab:62:a8:2f:58:73:
bd:1a:5a:a0:f9:3f:58:e1:01:de:eb:e0:26:eb:c5:
2c:4c:ba:04:bf:4b:d9:57:b3:fd:bd:aa:d5:56:e2:
13:b0:25:44:68:0b:41:fb:e5:d9:35:7d:2f:ea:30:
e8:63:71:4b:61:a1:dc:1a:b1:72:1c:37:d2:15:62:
ac:61:07:83:49:3f:f1:39:20:a1:1e:79:cf:7f:65:
61:37:91:d4:75:27:fa:9b:1b:47:e6:ff:18:03:5d:
36:97:02:78:d1:de:84:bf:60:53:8e:bf:51:a7:07:
31:4f:44:79:5b:27:f2:69:d5:b8:c9:6a:17:1e:85:
1f:42:54:7d:f6:09:b3:b3:88:cb:90:c9:bf:dc:8d:
6b:17:a0:e7:83:fd:31:88:2d:7c:c1:13:ac:7e:8e:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45589
sbgp-ipAddrBlock: critical
IPv4:
163.8.0.0/16
IPv6:
2405:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
85:6b:5b:4e:d5:e6:2b:b9:1b:54:9a:00:3c:37:e6:37:dd:f0:
a8:a1:58:18:0b:7e:d1:4c:b8:f8:35:ee:9b:e9:2d:ad:07:7e:
a9:c2:af:12:72:67:06:95:8f:3f:16:d2:65:d7:8f:d9:da:e4:
a4:88:57:3d:99:05:e1:05:9f:60:40:47:55:36:7d:e7:6b:84:
43:32:0e:00:b5:b5:20:25:ea:56:dc:96:6f:64:bc:a2:b0:5f:
db:b5:df:08:b2:c9:c7:27:3f:d1:d5:9e:25:63:3c:5e:8b:d3:
d7:26:d4:d8:48:18:d5:eb:46:3e:c1:5a:68:ba:15:2d:32:02:
5c:f7:aa:39:7a:7a:15:51:0c:40:73:43:a1:87:65:7d:2c:5b:
27:0a:e3:74:bc:cb:5e:07:d7:3c:78:72:ee:d9:99:65:bb:34:
ae:d3:96:4f:ba:9a:2b:2d:0c:97:4b:ed:14:d7:d6:41:fe:33:
7b:ae:a5:29:4e:28:d9:14:e9:f9:ed:f7:be:51:f2:9a:62:ae:
3d:22:7f:10:9d:b7:43:8b:12:72:ca:c1:45:0c:9c:b2:74:92:
4f:8f:ac:7c:f6:d2:03:0c:bd:3e:4c:be:ca:78:39:03:09:dc:
b7:62:1c:ae:e8:18:36:83:b8:d9:c4:fd:20:b4:0e:93:8e:2e:
45:4e:0e:c3
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgIDAqFOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwMjEzNDAwN1oXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEw
MDk3NzVEOTFCQTQxMkI2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD0GyLNanoIpNHya7O8zBfRTa1C0DOG/aHy4AFsaPaJV5o/2ziDD39rYVdrDNHr
UhOGNXYe3hKQeFwKma22IZnPgdQrFBKBuiEE049aZooTM8ykEYvznsfOI3OIV/4p
hhFfBqtiqC9Yc70aWqD5P1jhAd7r4CbrxSxMugS/S9lXs/29qtVW4hOwJURoC0H7
5dk1fS/qMOhjcUthodwasXIcN9IVYqxhB4NJP/E5IKEeec9/ZWE3kdR1J/qbG0fm
/xgDXTaXAnjR3oS/YFOOv1GnBzFPRHlbJ/Jp1bjJahcehR9CVH32CbOziMuQyb/c
jWsXoOeD/TGILXzBE6x+jpd5AgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUtU4IRltU
XO7x4uEAl3XZG6QStj0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcyQjQ2LzA4ODcwMUI4QUJCNDExRjBBQkYyMDk0MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MkI0Ni8wODg3MDFCOEFCQjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0
VVhPN3g0dUVBbDNYWkc2UVN0ajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALIVMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAowgwDQQCAAIw
BwMFACQFvAAwDQYJKoZIhvcNAQELBQADggEBAIVrW07V5iu5G1SaADw35jfd8Kih
WBgLftFMuPg17pvpLa0HfqnCrxJyZwaVjz8W0mXXj9na5KSIVz2ZBeEFn2BAR1U2
fedrhEMyDgC1tSAl6lbclm9kvKKwX9u13wiyyccnP9HVniVjPF6L09cm1NhIGNXr
Rj7BWmi6FS0yAlz3qjl6ehVRDEBzQ6GHZX0sWycK43S8y14H1zx4cu7ZmWW7NK7T
lk+6mistDJdL7RTX1kH+M3uupSlOKNkU6fnt975R8ppirj0ifxCdt0OLEnLKwUUM
nLJ0kk+PrHz20gMMvT5Mvsp4OQMJ3LdiHK7oGDaDuNnE/SC0DpOOLkVODsM=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:37 2026 by rpki-client