Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer (raw, json)
Hash identifier: +6dJdvDAoWSqihqB6DR+XDAJ/KN4jHh+eAeNyvJVJXE=
Subject key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A24A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Mar 2026 13:38:28 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 43.249.72.0/22
IP: 103.244.50.0/24
IP: 103.245.222.0 -- 103.245.224.255
IP: 2001:df0:45f:: -- 2001:df0:462:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172618 (0x2a24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 13:38:28 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:df:50:ef:6a:67:71:04:39:58:64:ca:19:
33:61:2f:2c:ac:5a:54:c8:01:cc:0c:8c:91:fd:fc:
fe:53:60:34:a6:e8:61:d1:e2:a4:45:3b:cb:8b:35:
f2:37:96:fa:f5:4e:be:45:ab:92:38:2b:e7:5d:01:
e2:3c:da:5b:94:d9:a5:c9:52:4a:37:56:95:ac:f1:
e5:35:52:54:0a:06:36:a8:77:47:c4:47:18:88:89:
07:af:76:04:bd:8e:96:a7:52:c7:58:1c:98:58:a7:
5c:c2:99:c4:53:59:c0:7b:6b:62:60:10:9f:d8:82:
ed:72:fb:6d:06:1b:51:72:5d:81:a6:62:f9:06:b6:
d3:a0:86:82:72:d9:27:0c:3b:72:12:92:2a:5a:ce:
65:00:21:5a:5d:49:f4:fb:48:4c:97:ca:c5:d7:eb:
e8:46:db:ba:63:f8:15:ad:18:89:a9:8f:5a:0f:5d:
cb:f9:c2:f5:6b:62:d4:ea:8e:ac:30:b3:03:f5:1e:
2f:a3:b5:d0:48:7b:5c:8b:60:a9:26:28:ea:c9:27:
b1:07:85:0a:c3:de:f9:f4:32:cf:08:61:f7:f2:d4:
bb:12:a7:70:71:dc:8b:ae:9a:a8:27:f9:57:9e:49:
44:e1:b6:02:89:49:a0:04:bf:23:28:f3:6e:ba:ac:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.72.0/22
103.244.50.0/24
103.245.222.0-103.245.224.255
IPv6:
2001:df0:45f::-2001:df0:462:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:3d:55:cd:9a:9e:6a:88:9b:72:df:e7:67:45:9b:6d:91:a8:
ea:36:0b:8f:ef:8c:76:41:e1:e7:04:43:50:f0:c4:33:8a:22:
e2:6a:2f:bc:aa:5d:98:54:a0:37:12:9e:99:f4:3a:64:3a:d2:
dd:9e:ba:01:ab:ef:08:3e:db:e0:dd:05:ce:ac:25:45:8a:80:
b6:4a:92:17:ee:ec:ef:59:f7:15:63:26:e7:93:05:95:8d:13:
1b:b0:83:6b:11:6e:49:34:b1:73:36:1a:20:4c:31:03:6d:78:
bf:88:3d:24:c6:09:0d:db:75:a3:d6:82:fb:08:bd:0d:e6:c8:
7f:aa:d6:1b:fc:94:af:1a:97:c1:e8:7e:d1:83:32:5d:8e:88:
67:63:40:b8:6d:62:28:90:61:3e:9f:6b:e4:bc:85:60:9a:66:
74:27:0e:d6:09:09:47:73:45:2f:6d:9a:0f:6b:b2:36:f1:01:
69:9f:a1:f9:42:f1:f5:f4:51:88:4d:18:06:29:4a:5a:87:42:
fb:d9:79:ac:26:04:9b:b5:50:da:40:1d:4c:5f:4f:c7:89:7f:
8e:20:4d:2b:21:12:96:ac:37:f9:55:71:3d:16:5b:5a:c7:50:
7d:f8:ec:c5:73:b7:3b:21:bd:8b:a4:0c:ba:da:bf:a8:69:9d:
be:84:ff:b0
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIDAqJKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwNDEzMzgyOFoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1
RjAzNDMxM0QxQjcxQjhENDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDS599Q72pncQQ5WGTKGTNhLyysWlTIAcwMjJH9/P5TYDSm6GHR4qRFO8uLNfI3
lvr1Tr5Fq5I4K+ddAeI82luU2aXJUko3VpWs8eU1UlQKBjaod0fERxiIiQevdgS9
jpanUsdYHJhYp1zCmcRTWcB7a2JgEJ/Ygu1y+20GG1FyXYGmYvkGttOghoJy2ScM
O3ISkipazmUAIVpdSfT7SEyXysXX6+hG27pj+BWtGImpj1oPXcv5wvVrYtTqjqww
swP1Hi+jtdBIe1yLYKkmKOrJJ7EHhQrD3vn0Ms8IYffy1LsSp3Bx3Iuumqgn+Vee
SUThtgKJSaAEvyMo8266rHxnAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQUt/pRIVu1
we+I6uFfA0MT0bcbjUQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg4OTdBLzUzM0UyNDYyQjU1MTExRUVCQjRDNTczQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1
MXdlLUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8EQDA+
MCAEAgABMBoDBAIr+UgDBABn9DIwDAMEAWf13gMEAGf14DAaBAIAAjAUMBIDBwAg
AQ3wBF8DBwAgAQ3wBGIwDQYJKoZIhvcNAQELBQADggEBADU9Vc2anmqIm3Lf52dF
m22RqOo2C4/vjHZB4ecEQ1DwxDOKIuJqL7yqXZhUoDcSnpn0OmQ60t2eugGr7wg+
2+DdBc6sJUWKgLZKkhfu7O9Z9xVjJueTBZWNExuwg2sRbkk0sXM2GiBMMQNteL+I
PSTGCQ3bdaPWgvsIvQ3myH+q1hv8lK8al8HoftGDMl2OiGdjQLhtYiiQYT6fa+S8
hWCaZnQnDtYJCUdzRS9tmg9rsjbxAWmfoflC8fX0UYhNGAYpSlqHQvvZeawmBJu1
UNpAHUxfT8eJf44gTSshEpasN/lVcT0WW1rHUH347MVztzshvYukDLrav6hpnb6E
/7A=
-----END CERTIFICATE-----
Generated at Wed Mar 18 19:24:35 2026 by rpki-client