Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTpmVjdgJzJMGb7qBrVEZUYfvj8.cer
File: FTpmVjdgJzJMGb7qBrVEZUYfvj8.cer (raw, json)
Hash identifier: Y4ocKj4T/CAYcX7dltQaUtPnLrQo6txF3f6CCKCoUrE=
Subject key identifier: 15:3A:66:56:37:60:27:32:4C:19:BE:EA:06:B5:44:65:46:1F:BE:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CD2C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Aug 2026 23:43:58 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 27.123.226.0/24
IP: 2001:df7:5bc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183596 (0x2cd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 13 23:43:58 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91AE6DE, serialNumber=153A6656376027324C19BEEA06B54465461FBE3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:d2:d9:9f:ca:6e:c9:d2:96:33:71:f3:99:
4c:ed:12:4f:a5:97:6d:3d:4d:3a:b7:22:3b:a0:d0:
39:18:66:51:85:78:e1:59:a0:1b:2f:c5:57:5a:d5:
f4:b9:26:46:07:1b:1c:c1:66:cd:2b:31:9a:93:96:
5b:da:14:b4:3c:11:17:06:1e:90:0c:44:52:db:1e:
4a:f1:bc:f2:1c:44:44:cf:bb:fc:85:49:86:7d:d1:
5a:f1:a9:86:d1:12:a5:31:c6:83:d8:eb:a5:2f:2a:
3a:16:f9:5e:12:a4:63:a7:f9:74:d3:68:9b:bd:3a:
84:45:1e:95:89:c3:24:a5:03:24:3f:bd:89:95:39:
9a:08:bc:e0:2e:58:d6:4f:ac:f6:c6:74:ba:8e:28:
26:3c:0e:16:ad:0a:81:4f:24:e2:f8:3d:b1:71:60:
68:e1:d5:72:0b:90:3d:a7:64:16:df:6a:2f:9f:26:
7b:b2:a9:6c:80:1b:86:7e:60:81:02:80:9c:4b:31:
65:f5:a4:8c:1f:87:cf:d1:64:d0:ea:08:95:fb:d9:
e5:bf:ff:44:61:75:57:83:a4:97:65:b2:46:d2:d6:
40:d6:3a:5d:2f:12:32:75:9d:f1:4e:93:31:c8:68:
21:3b:75:d8:f9:80:be:de:8f:2f:a9:78:43:b8:97:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:66:56:37:60:27:32:4C:19:BE:EA:06:B5:44:65:46:1F:BE:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.226.0/24
IPv6:
2001:df7:5bc0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:1c:f3:f5:c0:e2:2e:90:4e:4f:e7:01:3e:3f:53:06:a2:4b:
aa:dd:71:69:63:6d:0b:52:2b:63:23:61:39:1f:6b:7b:f7:1b:
b2:8a:a9:72:b5:f5:9d:98:97:2b:b3:18:2a:e8:91:fe:f5:02:
d6:22:af:70:c0:b3:54:03:e2:ca:01:04:56:fb:b7:3d:59:8e:
65:dc:56:10:05:86:81:2d:64:d1:4e:ec:a0:29:eb:a4:70:89:
99:79:42:01:b1:47:28:17:9b:fa:a7:5f:65:0c:6f:95:97:da:
f2:a7:f8:de:e3:5f:51:59:6c:fc:cd:8e:85:0a:ac:67:76:da:
af:a8:fb:47:d7:b3:77:0b:6b:79:44:69:13:72:e5:42:0d:1c:
4c:b5:2d:09:a4:85:74:45:f4:e5:e5:0e:e4:39:f0:03:6c:ed:
2a:93:31:23:6f:cd:8f:06:f7:03:fc:88:09:70:5e:45:a2:f9:
c8:c1:d6:23:63:ea:11:cb:66:a4:2d:95:ca:04:36:36:12:ff:
dd:97:be:de:66:fe:a1:80:2a:a1:34:df:4d:d3:53:98:89:78:
f0:25:03:1a:3e:38:e5:23:04:b2:43:22:01:50:6d:2b:a4:e7:
d3:4f:6e:7f:93:09:6c:85:9d:81:94:ed:bd:3d:83:92:ca:32:
48:22:43:57
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAs0sMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgxMzIzNDM1OFoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUU2REUxMTAvBgNVBAUTKDE1M0E2NjU2Mzc2MDI3MzI0QzE5QkVF
QTA2QjU0NDY1NDYxRkJFM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzOdLZn8puydKWM3HzmUztEk+ll209TTq3Ijug0DkYZlGFeOFZoBsvxVda1fS5
JkYHGxzBZs0rMZqTllvaFLQ8ERcGHpAMRFLbHkrxvPIcRETPu/yFSYZ90VrxqYbR
EqUxxoPY66UvKjoW+V4SpGOn+XTTaJu9OoRFHpWJwySlAyQ/vYmVOZoIvOAuWNZP
rPbGdLqOKCY8DhatCoFPJOL4PbFxYGjh1XILkD2nZBbfai+fJnuyqWyAG4Z+YIEC
gJxLMWX1pIwfh8/RZNDqCJX72eW//0RhdVeDpJdlskbS1kDWOl0vEjJ1nfFOkzHI
aCE7ddj5gL7ejy+peEO4l6npAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUFTpmVjdg
JzJMGb7qBrVEZUYfvj8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFFNkRFL0Q3QzYzQUUwOTc3MDExRjE5Q0ExODZEQzQ1MTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBRTZERS9EN0M2M0FFMDk3NzAxMUYxOUNBMTg2REM0NTExRjk3MC9GVHBtVmpk
Z0p6Sk1HYjdxQnJWRVpVWWZ2ajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAAbe+IwDwQCAAIwCQMHACABDfdbwDANBgkqhkiG9w0BAQsFAAOC
AQEAXxzz9cDiLpBOT+cBPj9TBqJLqt1xaWNtC1IrYyNhOR9re/cbsoqpcrX1nZiX
K7MYKuiR/vUC1iKvcMCzVAPiygEEVvu3PVmOZdxWEAWGgS1k0U7soCnrpHCJmXlC
AbFHKBeb+qdfZQxvlZfa8qf43uNfUVls/M2OhQqsZ3bar6j7R9ezdwtreURpE3Ll
Qg0cTLUtCaSFdEX05eUO5DnwA2ztKpMxI2/Njwb3A/yICXBeRaL5yMHWI2PqEctm
pC2VygQ2NhL/3Ze+3mb+oYAqoTTfTdNTmIl48CUDGj445SMEskMiAVBtK6Tn009u
f5MJbIWdgZTtvT2DksoySCJDVw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:05 2026 by rpki-client