Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer (raw, json)
Hash identifier: loNMXKGIavobCFalMEco5dCUIAst7O1jhvhQ9LxSDik=
Subject key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A1EA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 12:35:01 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 149520
IP: 2001:df0:77c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172522 (0x2a1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 12:35:01 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:25:b6:99:25:c8:82:ed:81:ee:cd:99:93:
cd:b4:9a:12:c1:2b:7d:6e:93:05:31:ba:7e:f8:76:
95:0f:b0:20:fd:26:6e:f9:9f:ae:4e:ea:2b:13:db:
90:29:80:d0:75:4f:a7:b2:27:34:2c:95:43:50:f4:
d8:ab:91:ee:08:5f:aa:9e:59:36:56:c1:ef:79:23:
8a:03:27:72:a4:2b:f5:7c:ee:5f:95:4b:0b:7d:69:
81:84:b5:0f:6d:89:48:92:90:20:32:13:3b:70:a5:
b5:d7:95:f8:6f:b7:1b:b3:e6:ea:69:1a:8b:f4:00:
b4:ac:63:08:bd:1f:bf:10:0b:f5:d4:77:2e:7f:e1:
29:25:e4:89:01:ce:01:f3:2b:d2:5c:a7:f0:6c:8a:
7f:c8:dd:fd:a5:65:91:16:c8:90:73:45:c0:77:45:
6e:77:60:42:78:ba:83:65:bd:74:86:2e:c6:b5:42:
a3:fd:c9:2a:88:2b:dd:d8:24:02:37:79:1e:22:3b:
fd:a0:b7:9f:f6:9b:bf:6b:ab:20:ec:ad:d6:6c:55:
44:f1:30:35:ec:82:be:d5:b9:2e:d5:6a:ca:73:11:
77:c5:52:ad:57:f3:03:b3:41:33:39:97:fe:eb:4b:
5c:e8:a7:b7:06:3d:93:69:fc:27:a9:9f:2e:b5:c6:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149520
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:77c0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:2f:83:aa:48:d5:99:07:6f:8b:c6:3f:21:d1:a1:ad:3d:c4:
bd:48:8c:ba:33:1f:1e:47:e7:97:07:f5:34:da:4e:99:fa:83:
a3:13:97:39:db:d4:00:18:e8:c7:1b:b9:1c:b2:60:20:e5:58:
b3:70:54:91:2d:ad:0d:1b:18:29:72:8c:c6:1d:64:f3:a3:d5:
ee:cd:6c:63:3e:dc:cb:a7:32:10:27:90:32:63:2f:8d:41:53:
c2:6e:52:fe:09:01:ac:26:64:d4:24:f7:56:9d:7a:5e:ba:5f:
1d:1d:f4:e6:98:6d:d0:aa:33:06:a1:32:8d:e7:39:7e:35:9c:
b4:5e:a1:0d:f7:d3:b7:c2:cf:6a:7f:89:40:bf:0a:54:0c:2c:
35:d0:59:24:0d:9b:3a:4c:ed:29:d7:2a:83:58:63:ea:43:f9:
c0:85:d4:6c:4c:1c:33:b1:14:83:39:23:2a:a8:8e:d6:d0:a3:
2c:77:a8:d5:02:07:27:75:f0:53:a0:9a:3f:e6:25:da:01:db:
1a:4f:05:de:d9:99:aa:b2:72:64:2c:49:a1:1f:76:c1:c0:47:
00:ee:1e:09:a2:0f:f6:5b:d3:da:12:1d:d1:9b:bc:f0:25:99:
0c:c4:16:78:16:c4:d2:78:1e:e1:0e:95:5c:d7:bf:45:17:4e:
80:5d:f8:bf
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAqHqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwMzEyMzUwMVoXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRE
RjVENzY1MDQwQjkyNDFBQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDn+yW2mSXIgu2B7s2Zk820mhLBK31ukwUxun74dpUPsCD9Jm75n65O6isT25Ap
gNB1T6eyJzQslUNQ9Nirke4IX6qeWTZWwe95I4oDJ3KkK/V87l+VSwt9aYGEtQ9t
iUiSkCAyEztwpbXXlfhvtxuz5uppGov0ALSsYwi9H78QC/XUdy5/4Skl5IkBzgHz
K9Jcp/Bsin/I3f2lZZEWyJBzRcB3RW53YEJ4uoNlvXSGLsa1QqP9ySqIK93YJAI3
eR4iO/2gt5/2m79rqyDsrdZsVUTxMDXsgr7VuS7VaspzEXfFUq1X8wOzQTM5l/7r
S1zop7cGPZNp/Cepny61xqSXAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUxwvz3/RQ
I9Qa9MTfXXZQQLkkGscwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI0M0ZFLzk4MTQ4MDYyOTU2NTExRUM5MTgzQkU1M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyNDNGRS85ODE0ODA2Mjk1NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19S
UUk5UWE5TVRmWFhaUVFMa2tHc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkgQMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8HfAMA0G
CSqGSIb3DQEBCwUAA4IBAQAfL4OqSNWZB2+Lxj8h0aGtPcS9SIy6Mx8eR+eXB/U0
2k6Z+oOjE5c529QAGOjHG7kcsmAg5VizcFSRLa0NGxgpcozGHWTzo9XuzWxjPtzL
pzIQJ5AyYy+NQVPCblL+CQGsJmTUJPdWnXpeul8dHfTmmG3QqjMGoTKN5zl+NZy0
XqEN99O3ws9qf4lAvwpUDCw10FkkDZs6TO0p1yqDWGPqQ/nAhdRsTBwzsRSDOSMq
qI7W0KMsd6jVAgcndfBToJo/5iXaAdsaTwXe2ZmqsnJkLEmhH3bBwEcA7h4Jog/2
W9PaEh3Rm7zwJZkMxBZ4FsTSeB7hDpVc179FF06AXfi/
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:19 2026 by rpki-client