Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer (raw, json)
Hash identifier: JOwr3Ko4tJi0H4UGa6soaZfXyp2//UBxULtYB3k1vQE=
Subject key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A7E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 13:12:57 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 134087
IP: 103.182.168.0/23
IP: 2001:df0:7ec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174054 (0x2a7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 13:12:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:ea:d0:e9:fc:3f:fb:e6:1a:24:26:4d:fa:
77:66:b2:40:6b:5d:15:65:36:dd:b3:61:40:8f:25:
bd:f0:50:a8:34:31:42:e9:08:74:67:a5:cd:e7:ea:
f1:72:78:33:7c:3f:c3:de:74:57:18:c2:cf:d8:27:
35:f6:56:dc:32:2c:cf:d6:7b:81:59:9b:f1:20:44:
01:a4:9c:01:0f:f6:46:4b:04:64:4b:1e:43:67:22:
88:db:08:91:be:d9:99:15:48:56:ea:8b:5e:d6:19:
67:f7:89:b7:00:9b:3d:0e:1b:2f:6c:88:f0:2f:c2:
70:db:40:2a:c6:ba:36:2f:fa:8c:b9:80:6b:4e:94:
5d:2a:8d:1f:79:8f:0b:2f:24:7c:76:68:d4:7b:68:
66:81:89:7e:2c:23:a2:55:2d:bb:0f:fe:0c:00:9d:
88:62:79:80:be:78:13:47:02:6d:66:ce:14:40:64:
66:dc:42:22:16:dc:fa:ee:e5:e7:d9:18:0d:03:05:
3b:a5:d0:e8:28:88:ca:0b:4a:0e:8a:84:07:61:48:
b1:32:06:39:61:70:ce:a4:a4:6c:ff:24:00:16:a3:
c9:07:77:d0:e0:7a:22:d1:88:d9:79:b4:92:68:85:
eb:94:b1:17:67:e3:8c:3d:39:89:89:7a:ad:3c:0b:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134087
sbgp-ipAddrBlock: critical
IPv4:
103.182.168.0/23
IPv6:
2001:df0:7ec0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:29:7e:55:59:47:a6:7c:07:9e:3e:c0:6c:37:3c:81:59:38:
75:e7:d2:64:a7:d0:5a:cc:52:0a:64:cf:e1:c1:75:3d:ab:77:
86:54:f0:23:fa:a0:2b:67:e9:6a:24:6b:eb:98:32:23:7e:15:
c2:f0:c4:7c:fe:b5:d0:77:e5:d1:a3:47:94:4f:90:8b:d9:da:
40:04:fc:e8:b5:6e:7a:75:24:a4:aa:e7:e6:1d:a1:97:a2:22:
72:d7:bb:48:4b:0a:9f:f5:63:cf:7a:92:e3:9d:ff:22:e0:49:
cd:63:6d:0b:e8:e5:79:6f:94:53:6b:93:59:e9:68:d8:3b:44:
8d:49:50:3d:a3:53:9c:5d:2e:99:f2:1e:8a:25:cc:54:08:98:
45:25:76:30:15:0c:26:c7:6e:bc:2a:52:a4:4b:d3:6b:7b:8c:
e0:e4:d5:5a:04:99:04:35:87:64:3c:32:06:cb:83:15:56:49:
59:a2:a5:d1:14:10:af:86:96:6f:bf:9e:05:07:53:c3:d3:46:
8d:76:2f:45:b3:54:d1:b4:71:a7:60:86:7d:e3:c9:e2:3e:b4:
c6:a3:ef:48:c7:a5:44:38:c8:47:9e:fb:26:4d:74:61:8a:0a:
4b:c5:b3:7e:d2:00:28:2d:06:e7:13:b8:ae:26:ed:91:b3:dd:
fa:97:2b:ee
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAqfmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMzMTEzMTI1N1oXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRB
NzBBQjNFNTI3QjMwMzgxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOferQ6fw/++YaJCZN+ndmskBrXRVlNt2zYUCPJb3wUKg0MULpCHRnpc3n6vFy
eDN8P8PedFcYws/YJzX2VtwyLM/We4FZm/EgRAGknAEP9kZLBGRLHkNnIojbCJG+
2ZkVSFbqi17WGWf3ibcAmz0OGy9siPAvwnDbQCrGujYv+oy5gGtOlF0qjR95jwsv
JHx2aNR7aGaBiX4sI6JVLbsP/gwAnYhieYC+eBNHAm1mzhRAZGbcQiIW3Pru5efZ
GA0DBTul0OgoiMoLSg6KhAdhSLEyBjlhcM6kpGz/JAAWo8kHd9DgeiLRiNl5tJJo
heuUsRdn44w9OYmJeq08C5TXAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU8tEm8UII
aibjxYSnCrPlJ7MDgYIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU2REI0L0U4NERCOThBOUQ5QTExRUNCQTkyOEY0NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJ
SWFpYmp4WVNuQ3JQbEo3TURnWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgvHMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ7aoMA8EAgAC
MAkDBwAgAQ3wfsAwDQYJKoZIhvcNAQELBQADggEBAJ8pflVZR6Z8B54+wGw3PIFZ
OHXn0mSn0FrMUgpkz+HBdT2rd4ZU8CP6oCtn6Woka+uYMiN+FcLwxHz+tdB35dGj
R5RPkIvZ2kAE/Oi1bnp1JKSq5+YdoZeiInLXu0hLCp/1Y896kuOd/yLgSc1jbQvo
5XlvlFNrk1npaNg7RI1JUD2jU5xdLpnyHoolzFQImEUldjAVDCbHbrwqUqRL02t7
jODk1VoEmQQ1h2Q8MgbLgxVWSVmipdEUEK+Glm+/ngUHU8PTRo12L0WzVNG0cadg
hn3jyeI+tMaj70jHpUQ4yEee+yZNdGGKCkvFs37SACgtBucTuK4m7ZGz3fqXK+4=
-----END CERTIFICATE-----
Generated at Sun Apr 5 18:33:47 2026 by rpki-client