Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
File: IW4UMOXDDg0jp10HDbeJi5CEl5k.cer (raw, json)
Hash identifier: hJcEeHR1prA1Tljea2WENSsB53F7kaxA30XrrDKD9uw=
Subject key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0288F3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Jan 2026 13:52:13 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 45410
IP: 163.61.92.0/23
IP: 202.168.64.0/20
IP: 2401:b780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 15:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166131 (0x288f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 27 13:52:13 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:f2:48:65:47:d5:2c:38:58:b8:b7:14:b2:
5e:a6:35:ca:d9:f7:b6:ed:cb:a4:b6:31:74:27:6e:
4f:4f:7d:28:99:b1:32:59:32:2f:bc:0b:47:98:5e:
90:36:a5:02:2c:a0:59:a6:8b:e8:33:92:eb:d4:91:
08:65:1a:27:50:02:11:43:63:74:80:c2:93:23:30:
ba:a9:16:b3:51:e6:b9:f1:f5:a9:09:31:b8:6c:75:
eb:6f:cf:e3:9f:01:63:32:01:e5:71:b3:58:af:cc:
ca:0c:f2:f8:dc:6b:35:32:85:24:01:93:44:21:a6:
b7:42:7f:26:a9:c3:80:b5:39:6d:25:71:4d:3e:c0:
4c:6e:8e:4a:e7:ce:a4:43:ee:87:0c:be:3c:46:12:
d2:f5:cb:50:fe:6f:67:0d:5e:e0:77:6c:a2:6c:c1:
94:66:19:d4:37:34:85:09:69:e5:81:5a:c8:dd:4d:
5a:b5:4b:71:6b:dc:01:32:81:33:53:69:5a:81:f9:
33:6c:71:e7:88:42:cd:d2:fa:f3:7b:23:60:cc:2e:
d4:94:b5:84:92:9a:2d:4d:ee:97:5d:64:8d:b1:82:
7a:dd:0e:e8:c4:cb:a3:6d:c4:f4:59:b3:03:86:7a:
42:24:3f:6f:28:44:39:6a:ab:dc:c8:da:15:af:eb:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45410
sbgp-ipAddrBlock: critical
IPv4:
163.61.92.0/23
202.168.64.0/20
IPv6:
2401:b780::/32
Signature Algorithm: sha256WithRSAEncryption
10:ca:cb:0a:e5:23:b8:30:38:3a:67:d7:8d:66:01:4d:7a:5a:
23:38:16:37:94:3b:18:43:62:5a:4f:76:3f:8e:59:6a:c6:20:
85:74:cc:97:8a:fa:3c:05:5b:e8:30:0d:7e:b7:3f:ca:bd:2d:
f5:46:48:bd:61:3b:f7:c1:ab:51:47:6d:9e:b6:46:4b:1a:ab:
fd:da:a3:40:ed:23:b7:b7:d2:ee:9a:01:f6:46:8d:7e:28:60:
c6:1b:82:61:00:e9:06:1e:7b:88:b6:91:84:50:e6:48:1b:73:
b4:c9:b3:d8:58:a4:94:81:ba:be:d5:b7:e7:cd:4d:e9:76:0a:
c7:83:33:72:80:ee:ee:9e:d1:5d:40:65:f1:2e:08:b6:cc:fd:
dc:3b:cc:7f:a8:46:cf:f4:61:07:c8:a6:b2:a9:ed:03:59:73:
09:cc:64:be:27:77:11:10:62:aa:f7:59:0d:30:f3:f1:47:7a:
47:75:c0:1b:dc:86:a9:be:eb:3c:e3:aa:11:e1:f2:ae:1b:1b:
6c:d1:82:1b:76:a7:d6:e4:b7:d7:f6:37:fc:ce:23:e8:97:27:
19:4c:c6:db:af:d6:91:1c:f6:f3:a4:e2:29:ef:c2:d2:36:a0:
b8:05:e1:54:7f:e1:48:ca:e4:22:28:18:60:ae:79:fd:5a:64:
47:c0:42:36
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAojzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDEyNzEzNTIxM1oXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxOUE1QjUxMTAvBgNVBAUTKDIxNkUxNDMwRTVDMzBFMEQyM0E3NUQw
NzBEQjc4OThCOTA4NDk3OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzwPJIZUfVLDhYuLcUsl6mNcrZ97bty6S2MXQnbk9PfSiZsTJZMi+8C0eYXpA2
pQIsoFmmi+gzkuvUkQhlGidQAhFDY3SAwpMjMLqpFrNR5rnx9akJMbhsdetvz+Of
AWMyAeVxs1ivzMoM8vjcazUyhSQBk0QhprdCfyapw4C1OW0lcU0+wExujkrnzqRD
7ocMvjxGEtL1y1D+b2cNXuB3bKJswZRmGdQ3NIUJaeWBWsjdTVq1S3Fr3AEygTNT
aVqB+TNsceeIQs3S+vN7I2DMLtSUtYSSmi1N7pddZI2xgnrdDujEy6NtxPRZswOG
ekIkP28oRDlqq9zI2hWv62pTAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUIW4UMOXD
Dg0jp10HDbeJi5CEl5kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlBNUI1LzU4M0NDNEQ0MDNCRTExRUJBNjQ5MjIwQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5QTVCNS81ODNDQzRENDAzQkUxMUVCQTY0OTIyMEJDNEY5QUUwMi9JVzRVTU9Y
RERnMGpwMTBIRGJlSmk1Q0VsNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALFiMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBoz1cAwQEyqhA
MA0EAgACMAcDBQAkAbeAMA0GCSqGSIb3DQEBCwUAA4IBAQAQyssK5SO4MDg6Z9eN
ZgFNelojOBY3lDsYQ2JaT3Y/jllqxiCFdMyXivo8BVvoMA1+tz/KvS31Rki9YTv3
watRR22etkZLGqv92qNA7SO3t9LumgH2Ro1+KGDGG4JhAOkGHnuItpGEUOZIG3O0
ybPYWKSUgbq+1bfnzU3pdgrHgzNygO7untFdQGXxLgi2zP3cO8x/qEbP9GEHyKay
qe0DWXMJzGS+J3cREGKq91kNMPPxR3pHdcAb3Iapvus846oR4fKuGxts0YIbdqfW
5LfX9jf8ziPolycZTMbbr9aRHPbzpOIp78LSNqC4BeFUf+FIyuQiKBhgrnn9WmRH
wEI2
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:01 2026 by rpki-client