Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
File: 0veTjOlKDq6WOebJeYtkX6kMwf0.cer (raw, json)
Hash identifier: 2DZca6WPVaIKlmGxcf6uI/EWe9bFOcpXMD//mHTdH/M=
Subject key identifier: D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B491
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 May 2026 01:06:37 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 24463
AS: 136467
IP: 203.21.156.0/22
IP: 203.21.176.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177297 (0x2b491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 14 01:06:37 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A913BB38, serialNumber=D2F7938CE94A0EAE9639E6C9798B645FA90CC1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:cc:14:a6:84:f4:c8:c8:29:bb:4e:09:bf:
a6:09:c7:ab:b6:15:eb:5e:07:7d:2c:23:e5:9e:ca:
38:c0:11:34:ba:f3:b6:19:51:57:b3:63:b6:46:14:
ed:2c:8e:d4:f9:c4:3b:72:68:92:8e:1d:de:48:e4:
99:f7:73:25:86:48:bd:d2:d1:ba:c1:1d:dd:ca:51:
62:77:fc:2c:93:90:8c:e5:58:d4:69:3a:98:75:63:
d0:c6:b7:de:9e:2d:73:eb:7f:1e:24:df:75:34:06:
9a:a6:89:a1:9c:ef:87:e3:9b:96:5d:f7:39:2c:ee:
d0:8c:6d:b6:6b:e6:86:e9:a3:70:26:64:b7:dd:e8:
cd:3d:9a:48:62:fa:4d:c2:76:74:8e:06:56:b5:fa:
98:84:38:c9:17:00:7d:24:2d:fd:c1:5b:82:2a:7a:
0a:29:2a:79:b7:fa:6c:2b:99:5a:23:a1:1f:79:6d:
7d:fc:a3:eb:da:74:cd:0d:d1:38:3d:8c:0b:6a:28:
7f:e4:9a:8b:bb:72:fa:5b:5d:9c:f0:cb:ca:d0:e0:
70:85:e6:fe:a8:e4:c3:b2:57:65:62:e2:b0:4a:9e:
fb:29:be:6e:85:60:ad:ed:23:c4:2f:47:1f:6a:8c:
6a:c5:bc:6b:50:ef:b2:c3:2b:9a:0d:bc:c5:bd:84:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24463
136467
sbgp-ipAddrBlock: critical
IPv4:
203.21.156.0/22
203.21.176.0/20
Signature Algorithm: sha256WithRSAEncryption
43:9d:77:53:1c:7e:6b:9c:66:1a:99:6c:44:89:8c:95:19:19:
f9:bb:f8:77:56:06:45:41:ab:75:a7:88:96:d1:35:7c:56:cf:
ea:c8:77:63:02:2e:75:72:ad:1e:8e:ec:f3:9e:a7:b6:78:6c:
8f:82:ad:72:14:c3:0d:ec:66:ab:73:30:df:87:c5:e1:20:dc:
eb:ee:20:3a:66:c0:a0:fe:14:f5:d5:b7:41:92:e8:d7:15:47:
d1:6a:c1:ec:fc:46:84:87:e7:d6:07:7d:35:c7:97:1e:04:87:
e2:a8:01:bc:ef:33:1b:c8:b9:66:05:0b:28:70:e6:77:ee:72:
12:53:a5:e9:9c:4e:8f:ad:67:e7:50:42:22:20:67:40:9f:d3:
40:65:b5:1d:9e:54:9d:f9:97:c9:14:37:a1:fd:28:b5:a5:09:
46:da:ea:44:25:49:49:d8:b3:d0:15:09:85:93:23:fc:c1:d7:
ea:06:bd:38:d0:1c:c2:8a:b4:0a:d4:b8:e9:ed:4b:01:4e:a2:
3b:b5:ef:cd:54:c1:20:97:f7:2b:0d:76:f8:9c:e3:9a:0e:dd:
9e:ca:6b:f5:cb:dd:59:bd:b9:d1:fb:d6:ee:7e:c3:56:2b:8e:
9a:bc:79:e2:83:9d:25:fa:6b:0c:03:0d:ab:60:39:3e:70:6e:
7a:3f:0b:56
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgIDArSRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUxNDAxMDYzN1oXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0JCMzgxMTAvBgNVBAUTKEQyRjc5MzhDRTk0QTBFQUU5NjM5RTZD
OTc5OEI2NDVGQTkwQ0MxRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC84swUpoT0yMgpu04Jv6YJx6u2FeteB30sI+WeyjjAETS687YZUVezY7ZGFO0s
jtT5xDtyaJKOHd5I5Jn3cyWGSL3S0brBHd3KUWJ3/CyTkIzlWNRpOph1Y9DGt96e
LXPrfx4k33U0BpqmiaGc74fjm5Zd9zks7tCMbbZr5obpo3AmZLfd6M09mkhi+k3C
dnSOBla1+piEOMkXAH0kLf3BW4IqegopKnm3+mwrmVojoR95bX38o+vadM0N0Tg9
jAtqKH/kmou7cvpbXZzwy8rQ4HCF5v6o5MOyV2Vi4rBKnvspvm6FYK3tI8QvRx9q
jGrFvGtQ77LDK5oNvMW9hDoZAgMBAAGjggMZMIIDFTAdBgNVHQ4EFgQU0veTjOlK
Dq6WOebJeYtkX6kMwf0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNCQjM4LzI2MDFCMTQwNEYzMTExRjFCNDM4MkNCQkIyODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzQkIzOC8yNjAxQjE0MDRGMzExMUYxQjQzODJDQkJCMjgzMzc3My8wdmVUak9s
S0RxNldPZWJKZVl0a1g2a013ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICX48CAwIVEzAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAssVnAME
BMsVsDANBgkqhkiG9w0BAQsFAAOCAQEAQ513Uxx+a5xmGplsRImMlRkZ+bv4d1YG
RUGrdaeIltE1fFbP6sh3YwIudXKtHo7s856ntnhsj4KtchTDDexmq3Mw34fF4SDc
6+4gOmbAoP4U9dW3QZLo1xVH0WrB7PxGhIfn1gd9NceXHgSH4qgBvO8zG8i5ZgUL
KHDmd+5yElOl6ZxOj61n51BCIiBnQJ/TQGW1HZ5UnfmXyRQ3of0otaUJRtrqRCVJ
Sdiz0BUJhZMj/MHX6ga9ONAcwoq0CtS46e1LAU6iO7XvzVTBIJf3Kw12+Jzjmg7d
nspr9cvdWb250fvW7n7DViuOmrx54oOdJfprDAMNq2A5PnBuej8LVg==
-----END CERTIFICATE-----
Generated at Thu May 21 08:40:44 2026 by rpki-client