Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer
File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer (raw, json)
Hash identifier: sQ8X5use5rR6U38sBWa8zWs9ZuCmMnIcLE8/iCMGIMQ=
Subject key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A7FB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 14:04:39 +0000
Certificate not after: Sat 01 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 38036
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174075 (0x2a7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 14:04:39 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:64:da:57:5f:61:a8:0a:b0:08:c0:53:4d:
ee:d6:16:12:71:66:2f:47:a0:d0:9e:e1:97:52:c6:
1b:65:b2:0f:2b:6d:2d:d0:dd:ac:20:58:98:8b:64:
ba:eb:87:d3:1e:c4:d6:8c:3c:38:f6:ff:44:87:56:
3b:f0:26:6e:c9:11:dc:c0:72:f8:35:52:e7:fc:50:
2c:3e:22:e1:ca:ba:95:d9:c3:17:3f:29:33:ea:c4:
d3:52:dc:2b:dd:f8:18:d6:92:f7:9f:57:e7:e1:1c:
60:35:b0:83:98:92:38:b1:cb:bb:42:75:1a:9f:df:
a4:0e:96:90:40:a4:4f:ba:f5:08:c1:93:9e:77:15:
75:a9:46:bc:56:e4:66:81:eb:2e:a9:b4:0f:c1:89:
57:8c:3f:42:1b:2f:5d:a5:78:d7:b6:ac:b4:c2:ab:
03:22:f2:3a:af:bb:25:68:7a:1c:8a:3a:98:d8:76:
cc:d4:b3:d7:30:05:4c:b8:cd:62:27:c0:0c:32:12:
bf:25:a5:46:a8:d2:20:a3:4d:1a:40:3e:50:38:f4:
a3:66:7b:51:81:26:ba:7f:7e:1c:cc:03:b0:1e:26:
37:0d:7d:0b:10:df:d8:4a:ba:7b:a6:30:c0:28:ef:
1e:14:dd:af:1c:45:17:0d:1b:47:43:06:f5:3e:b1:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38036
Signature Algorithm: sha256WithRSAEncryption
4a:89:87:ec:fe:73:e0:f6:df:fa:c8:22:1f:8e:6a:05:20:62:
01:c0:30:00:73:c7:58:b3:71:23:6a:ec:9a:d4:87:f4:7a:a9:
9f:36:0d:0a:7e:54:29:8d:16:0f:5b:73:99:6a:06:5f:eb:3b:
cb:7c:d3:77:99:94:8a:30:d5:0e:d0:5d:4f:26:3a:b1:b2:7c:
27:61:b4:9a:0a:ad:a6:aa:27:2c:51:28:63:54:8a:ad:a1:14:
68:44:30:d3:dc:27:08:50:58:82:05:0c:e1:bf:bf:cd:0a:dc:
4a:ab:1a:a2:a7:f7:cb:e0:91:50:b0:ec:3e:66:ba:6d:a7:e1:
34:0a:1b:a3:38:4b:dd:a2:98:90:88:7f:f5:79:ae:44:4e:a8:
73:06:3d:41:74:5e:de:c0:ec:8e:85:89:93:24:b5:92:8f:a1:
2b:08:3b:b8:72:c2:30:b4:48:ff:d7:0e:ba:e6:c9:85:e6:2b:
a6:62:30:7a:25:79:87:47:76:a6:9c:00:36:d8:ca:60:6c:87:
76:14:f3:7f:ca:0d:b2:c5:f2:9b:a7:2d:6b:a7:08:ea:32:ad:
bc:21:fe:37:b2:86:03:a8:b9:38:8e:67:8f:35:a8:18:ac:20:
6f:5f:29:76:f2:0b:6c:16:38:1b:cb:d4:07:67:00:80:8d:37:
10:3d:43:c5
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAqf7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMzMTE0MDQzOVoXDTI2MDgwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJE
MzQ0QzNFQkJCRDU2RkU0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyc2TaV19hqAqwCMBTTe7WFhJxZi9HoNCe4ZdSxhtlsg8rbS3Q3awgWJiLZLrr
h9MexNaMPDj2/0SHVjvwJm7JEdzAcvg1Uuf8UCw+IuHKupXZwxc/KTPqxNNS3Cvd
+BjWkvefV+fhHGA1sIOYkjixy7tCdRqf36QOlpBApE+69QjBk553FXWpRrxW5GaB
6y6ptA/BiVeMP0IbL12leNe2rLTCqwMi8jqvuyVoehyKOpjYdszUs9cwBUy4zWIn
wAwyEr8lpUao0iCjTRpAPlA49KNme1GBJrp/fhzMA7AeJjcNfQsQ39hKunumMMAo
7x4U3a8cRRcNG0dDBvU+sboDAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUcazs8aGt
lwhWVdvTRMPru9Vv5HQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE3NTlGLzBBNkYyNjM0NjlDNTExRTI4NTkwMDI0NTI5NzlCQjIwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFH
dGx3aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJSUMA0GCSqGSIb3DQEBCwUAA4IBAQBKiYfs/nPg9t/6yCIfjmoFIGIB
wDAAc8dYs3Ejauya1If0eqmfNg0KflQpjRYPW3OZagZf6zvLfNN3mZSKMNUO0F1P
JjqxsnwnYbSaCq2mqicsUShjVIqtoRRoRDDT3CcIUFiCBQzhv7/NCtxKqxqip/fL
4JFQsOw+Zrptp+E0ChujOEvdopiQiH/1ea5ETqhzBj1BdF7ewOyOhYmTJLWSj6Er
CDu4csIwtEj/1w665smF5iumYjB6JXmHR3amnAA22MpgbId2FPN/yg2yxfKbpy1r
pwjqMq28If43soYDqLk4jmePNagYrCBvXyl28gtsFjgby9QHZwCAjTcQPUPF
-----END CERTIFICATE-----
Generated at Sun Apr 5 18:30:46 2026 by rpki-client