Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer (raw, json)
Hash identifier: TDFqnlkEtntUj11AzouASXFFmxEGd5ZWY6FVkoAW8+g=
Subject key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D510
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Sep 2026 13:46:27 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 132491
IP: 103.73.84.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185616 (0x2d510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 9 13:46:27 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:09:55:47:78:ba:13:d4:54:4c:9e:c7:f0:
c4:fc:e2:70:bd:15:fa:89:e6:c8:a1:eb:6a:36:7a:
80:5b:2f:c9:54:4c:fe:c8:fa:e1:08:29:9c:c4:55:
ae:95:23:27:ff:0e:e7:73:5c:a0:05:a4:47:d6:a1:
2e:6a:a3:a6:16:71:8c:00:02:1c:39:66:87:1c:fb:
d3:8a:83:64:35:ba:24:85:a4:9b:ae:a2:00:a4:e9:
54:6e:1b:ee:a4:81:a0:26:97:8d:20:86:e0:f7:36:
c0:9a:19:1f:bf:fb:c9:62:87:b5:26:cc:b0:4c:54:
7a:10:95:e8:2e:17:69:d8:60:77:e8:20:ae:d1:48:
01:fc:9f:0c:8a:04:f7:c9:7e:2f:9a:16:11:e8:ae:
1f:7f:61:f8:f1:38:a9:65:f1:ab:0a:67:aa:f3:63:
0a:e2:4c:71:39:7b:0e:8c:e1:c0:73:3c:61:75:30:
eb:cb:8b:55:fe:15:e6:47:a1:8a:7d:b5:1e:6b:8f:
e6:b5:4f:41:f0:e2:94:dc:89:5e:af:28:d4:89:2d:
67:07:f1:06:60:c6:e7:7f:94:08:2f:14:21:eb:a3:
86:cd:4e:5f:ca:56:77:97:c6:07:8a:c6:38:7d:bd:
c2:1e:0a:0d:f1:d6:a0:c8:55:18:a7:ca:b5:53:ca:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132491
sbgp-ipAddrBlock: critical
IPv4:
103.73.84.0/23
Signature Algorithm: sha256WithRSAEncryption
09:f4:b2:35:2e:c7:5d:72:9c:22:e8:21:22:5a:ab:65:30:91:
94:1f:90:bf:0a:7e:5e:78:7d:25:49:32:bc:ef:b1:71:77:02:
b7:f1:a5:76:cd:12:40:f8:9a:47:4c:2b:33:2a:16:8a:d8:be:
fb:5b:b2:dc:0c:2c:ec:3b:1e:6e:80:0d:5f:98:04:bd:dc:a1:
e1:56:1d:1f:bb:ac:d3:16:ba:d1:37:bc:c6:ff:15:c3:88:35:
19:d1:c7:5f:a7:07:81:09:f7:e5:2b:52:d9:c8:f5:7c:90:43:
6c:2e:d0:5f:29:d5:c8:a2:88:35:ca:1f:e8:49:60:3e:bd:83:
22:7d:a8:47:28:ae:5a:a4:65:04:67:1c:3b:85:48:e7:bc:3f:
c7:8e:98:01:e4:f3:47:6c:41:65:53:9e:14:a3:6d:1e:3d:4f:
eb:c0:05:98:e2:ff:54:6b:5e:ec:cd:2f:e2:e8:43:e2:31:ed:
14:53:70:56:96:53:ff:a2:b5:58:90:1b:f9:f8:80:40:2f:b7:
63:5e:d2:2a:b1:20:ed:11:fe:19:58:a0:a7:26:25:cb:e6:41:
99:bf:44:26:c8:c4:76:d1:99:89:58:97:5d:4b:5c:30:69:60:
e3:c3:74:7b:91:1c:e7:7b:14:23:02:be:ae:93:7f:77:a6:4d:
72:31:f7:17
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAtUQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkwOTEzNDYyN1oXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjQzNTcxMTAvBgNVBAUTKENCMTY1NjgxMUQwODQ1Nzk5M0U4RDgx
QjlGOTc5OERBRDYxNjk3MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2xglVR3i6E9RUTJ7H8MT84nC9FfqJ5sih62o2eoBbL8lUTP7I+uEIKZzEVa6V
Iyf/DudzXKAFpEfWoS5qo6YWcYwAAhw5Zocc+9OKg2Q1uiSFpJuuogCk6VRuG+6k
gaAml40ghuD3NsCaGR+/+8lih7UmzLBMVHoQleguF2nYYHfoIK7RSAH8nwyKBPfJ
fi+aFhHorh9/YfjxOKll8asKZ6rzYwriTHE5ew6M4cBzPGF1MOvLi1X+FeZHoYp9
tR5rj+a1T0Hw4pTciV6vKNSJLWcH8QZgxud/lAgvFCHro4bNTl/KVneXxgeKxjh9
vcIeCg3x1qDIVRinyrVTylgjAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUyxZWgR0I
RXmT6Ngbn5eY2tYWlxowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI0MzU3L0I4NEIxMEVDNDVBODExRUM4QjE0MDU1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCNDM1Ny9CODRCMTBFQzQ1QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1Iw
SVJYbVQ2TmdibjVlWTJ0WVdseG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgWLMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0lUMA0GCSqG
SIb3DQEBCwUAA4IBAQAJ9LI1Lsddcpwi6CEiWqtlMJGUH5C/Cn5eeH0lSTK877Fx
dwK38aV2zRJA+JpHTCszKhaK2L77W7LcDCzsOx5ugA1fmAS93KHhVh0fu6zTFrrR
N7zG/xXDiDUZ0cdfpweBCfflK1LZyPV8kENsLtBfKdXIoog1yh/oSWA+vYMifahH
KK5apGUEZxw7hUjnvD/HjpgB5PNHbEFlU54Uo20ePU/rwAWY4v9Ua17szS/i6EPi
Me0UU3BWllP/orVYkBv5+IBAL7djXtIqsSDtEf4ZWKCnJiXL5kGZv0QmyMR20ZmJ
WJddS1wwaWDjw3R7kRznexQjAr6uk393pk1yMfcX
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:27:27 2026 by rpki-client