
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WO00XGpI5t9mZgekGpERoFnvCY.cer
File: 1WO00XGpI5t9mZgekGpERoFnvCY.cer (raw, json)
Hash identifier: CVYoUg5eEsaXCE9GtUIz9NK92WcW3ofEbMFJsveU++0=
Subject key identifier: D5:63:B4:D1:71:A9:23:9B:7D:99:98:1E:90:6A:44:46:81:67:BC:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D84E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/1WO00XGpI5t9mZgekGpERoFnvCY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Sep 2026 18:55:43 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 136498
IP: 45.251.228.0/22
IP: 103.220.204.0/22
IP: 2407:5c80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186446 (0x2d84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 24 18:55:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A916D23A, serialNumber=D563B4D171A9239B7D99981E906A44468167BC26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:a4:1d:a3:09:ea:07:09:e7:f1:cf:20:0f:
d1:2f:84:f9:ec:fb:ef:73:3f:1d:18:33:8a:44:31:
0d:4e:68:54:61:08:64:cf:c5:bc:41:69:40:b7:9a:
40:6f:3f:21:da:25:fb:65:13:09:8f:0d:ba:d0:11:
a7:72:45:0f:53:17:c0:52:19:2e:3b:30:80:11:23:
cf:72:29:52:6d:9c:0c:b5:09:09:7b:65:eb:60:95:
96:2b:02:53:26:15:a7:72:3b:76:e7:b8:3d:e0:83:
2d:bd:ab:c8:bc:74:56:0a:ef:ca:f3:49:c1:4c:05:
88:7e:10:b3:4c:6c:f0:bd:47:d8:b7:1f:e6:97:72:
3a:b7:7b:89:08:ae:16:c8:a3:c4:87:ef:b3:6e:ac:
06:eb:e1:b9:b6:8c:14:3d:53:96:ee:02:fc:5f:31:
45:a2:ba:5e:eb:88:a8:85:16:ef:88:83:30:ca:c6:
79:25:db:0b:34:b8:84:3a:19:1d:a1:f3:b8:c1:bb:
99:15:6d:1d:dc:32:eb:d3:41:c9:3c:b2:2f:41:53:
c0:be:67:37:86:26:ab:69:24:ea:06:05:3d:d5:75:
67:15:3d:cf:87:10:31:9c:d9:97:b0:74:77:1a:77:
c8:2a:5e:c7:0c:ac:a4:3c:b8:10:a1:a5:81:cb:dc:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:B4:D1:71:A9:23:9B:7D:99:98:1E:90:6A:44:46:81:67:BC:26
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/1WO00XGpI5t9mZgekGpERoFnvCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136498
sbgp-ipAddrBlock: critical
IPv4:
45.251.228.0/22
103.220.204.0/22
IPv6:
2407:5c80::/32
Signature Algorithm: sha256WithRSAEncryption
0f:b9:a4:53:44:f7:da:e0:68:36:a5:4b:71:77:f2:e5:e1:d5:
a6:f7:93:47:d0:48:06:26:db:dc:4d:af:12:b1:77:8f:55:cd:
48:9b:f7:fe:c6:6a:23:ce:4a:2c:9c:f3:19:2f:24:6e:eb:31:
7b:d7:21:f8:01:7c:85:36:91:3d:c6:28:0d:87:a5:a2:7c:3f:
09:c2:2a:93:8e:13:1d:51:dc:1f:3a:12:f8:80:03:45:95:3d:
56:eb:b0:48:59:3a:3e:c8:cd:b6:92:08:a8:d5:7f:47:45:f9:
34:49:82:c3:49:97:c3:b7:5f:7a:e1:d0:a5:a1:d3:2e:79:db:
6a:23:dd:8d:e5:b9:81:17:d5:29:de:28:a6:35:e6:a4:35:94:
c1:19:e3:a2:66:a2:10:66:be:d8:3a:5d:7e:f3:69:cb:35:b0:
1d:30:68:70:a8:e8:41:85:c4:eb:b1:23:15:9c:aa:da:86:43:
89:3c:4b:ce:3d:30:83:e4:00:28:49:da:f6:c5:40:96:c8:62:
21:cf:56:40:b0:2f:98:38:c1:93:d1:37:af:03:5d:5e:df:80:
47:dd:5b:53:94:1f:d8:7e:93:88:17:a2:eb:5d:3f:be:2c:27:
4d:da:b5:92:58:1c:6e:fa:6d:1c:76:c1:7f:0f:25:63:b4:96:
14:02:65:cc
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAthOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkyNDE4NTU0M1oXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkQyM0ExMTAvBgNVBAUTKEQ1NjNCNEQxNzFBOTIzOUI3RDk5OTgx
RTkwNkE0NDQ2ODE2N0JDMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbg6QdownqBwnn8c8gD9EvhPns++9zPx0YM4pEMQ1OaFRhCGTPxbxBaUC3mkBv
PyHaJftlEwmPDbrQEadyRQ9TF8BSGS47MIARI89yKVJtnAy1CQl7ZetglZYrAlMm
FadyO3bnuD3ggy29q8i8dFYK78rzScFMBYh+ELNMbPC9R9i3H+aXcjq3e4kIrhbI
o8SH77NurAbr4bm2jBQ9U5buAvxfMUWiul7riKiFFu+IgzDKxnkl2ws0uIQ6GR2h
87jBu5kVbR3cMuvTQck8si9BU8C+ZzeGJqtpJOoGBT3VdWcVPc+HEDGc2ZewdHca
d8gqXscMrKQ8uBChpYHL3ISZAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU1WO00XGp
I5t9mZgekGpERoFnvCYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZEMjNBLzhFM0MxMjFFNDhENTExRUE4MzM1MTc3MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8xV08wMFhH
cEk1dDltWmdla0dwRVJvRm52Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhUyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLfvkAwQCZ9zM
MA0EAgACMAcDBQAkB1yAMA0GCSqGSIb3DQEBCwUAA4IBAQAPuaRTRPfa4Gg2pUtx
d/Ll4dWm95NH0EgGJtvcTa8SsXePVc1Im/f+xmojzkosnPMZLyRu6zF71yH4AXyF
NpE9xigNh6WifD8JwiqTjhMdUdwfOhL4gANFlT1W67BIWTo+yM22kgio1X9HRfk0
SYLDSZfDt1964dClodMuedtqI92N5bmBF9Up3iimNeakNZTBGeOiZqIQZr7YOl1+
82nLNbAdMGhwqOhBhcTrsSMVnKrahkOJPEvOPTCD5AAoSdr2xUCWyGIhz1ZAsC+Y
OMGT0TevA11e34BH3VtTlB/YfpOIF6LrXT++LCdN2rWSWBxu+m0cdsF/DyVjtJYU
AmXM
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:01 2026 by rpki-client