Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.cer
File: Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.cer (raw, json)
Hash identifier: a9P27SZ+v8Jii4CFsp5uiLKbmcSwGWayNHKpVX3u1SM=
Subject key identifier: 22:4D:19:86:AF:A6:72:E2:FC:43:37:6D:CB:95:9B:85:54:FA:CF:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D80D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Sep 2026 15:01:44 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 55940
IP: 103.185.101.0/24
IP: 202.94.75.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 05:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186381 (0x2d80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 23 15:01:44 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9151716, serialNumber=224D1986AFA672E2FC43376DCB959B8554FACFD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:82:3b:b3:1b:31:45:3b:e0:bf:11:b9:7b:
67:e7:30:56:ff:16:15:d5:dd:d3:c7:e4:6f:12:0b:
c3:9e:0d:77:51:96:cc:ac:75:bc:0f:b0:27:09:01:
eb:4b:ed:96:46:2d:8a:20:cb:24:91:d8:6c:bc:d0:
93:40:50:61:5d:16:21:3c:bd:21:1a:75:b1:f0:c6:
39:39:60:7d:47:93:1a:88:8e:2e:c8:df:9d:52:e6:
1a:bb:65:75:e7:b9:a2:ce:d4:4d:b2:09:c3:a4:80:
6d:55:62:f3:17:bf:44:b2:e8:32:5c:85:ad:67:55:
cb:49:15:a9:4e:73:82:1b:5c:8d:71:7a:28:1a:0f:
13:2a:92:32:2b:de:8c:f3:07:af:00:9b:da:02:71:
ef:fb:3c:bc:f1:c4:85:cd:3e:8a:17:e1:a5:56:10:
92:db:f8:06:a5:df:16:dd:11:20:d7:7e:37:30:ca:
40:d3:67:cc:22:75:df:3a:c6:4f:81:09:d0:e8:cb:
d6:48:da:0f:67:0e:4f:68:33:c7:ce:7c:5f:34:9a:
b2:db:0c:bd:57:5d:51:ef:f1:ef:bb:4e:4d:93:90:
ed:e7:cc:f5:29:0a:9d:ba:a3:32:f8:1f:c9:f6:da:
63:7a:97:ef:57:89:17:d8:17:89:a0:2d:15:ec:ba:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:19:86:AF:A6:72:E2:FC:43:37:6D:CB:95:9B:85:54:FA:CF:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55940
sbgp-ipAddrBlock: critical
IPv4:
103.185.101.0/24
202.94.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:c5:aa:e0:b5:fb:c3:1a:d0:5c:17:15:fc:61:f3:67:dd:ca:
96:ed:d5:5c:22:36:11:e9:73:db:da:36:c6:51:79:86:1f:d2:
a2:37:19:9b:ea:66:a2:e5:6d:70:c3:e8:11:40:7d:ee:0e:1e:
b0:e1:a6:2e:2f:8c:5a:37:53:0d:5b:2f:08:80:06:2c:1d:f8:
35:fb:b8:ee:a3:de:e0:21:52:b8:3c:cd:ae:e6:8d:95:b3:bc:
8e:9b:51:67:4e:6c:21:d1:4f:1a:fc:02:09:13:d9:91:08:2d:
c7:4c:cb:bf:3c:b0:8f:e9:02:8d:d4:db:40:73:f9:97:35:dc:
7e:71:0a:25:9a:4d:32:6d:25:a5:dd:f0:30:62:d3:c8:49:10:
82:74:f2:71:68:3d:3b:08:18:b2:1f:aa:fc:b7:54:1f:29:f3:
c0:43:ca:e2:ed:12:38:6e:af:1d:19:dc:88:9a:6c:e2:fc:a3:
e7:78:14:16:c8:45:86:42:66:76:53:8f:6c:43:f4:de:28:ba:
0d:a2:51:3e:89:40:08:06:11:06:10:25:03:cc:b8:3e:41:b4:
ff:97:82:4d:fc:ef:73:53:43:ff:eb:70:8c:85:31:a0:2a:27:
c5:91:3f:3c:a7:8e:3d:eb:ca:c0:aa:b6:57:02:ec:33:89:31:
a9:00:e3:39
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAtgNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkyMzE1MDE0NFoXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTE3MTYxMTAvBgNVBAUTKDIyNEQxOTg2QUZBNjcyRTJGQzQzMzc2
RENCOTU5Qjg1NTRGQUNGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCSb4I7sxsxRTvgvxG5e2fnMFb/FhXV3dPH5G8SC8OeDXdRlsysdbwPsCcJAetL
7ZZGLYogyySR2Gy80JNAUGFdFiE8vSEadbHwxjk5YH1HkxqIji7I351S5hq7ZXXn
uaLO1E2yCcOkgG1VYvMXv0Sy6DJcha1nVctJFalOc4IbXI1xeigaDxMqkjIr3ozz
B68Am9oCce/7PLzxxIXNPooX4aVWEJLb+Aal3xbdESDXfjcwykDTZ8widd86xk+B
CdDoy9ZI2g9nDk9oM8fOfF80mrLbDL1XXVHv8e+7Tk2TkO3nzPUpCp26ozL4H8n2
2mN6l+9XiRfYF4mgLRXsuplLAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUIk0Zhq+m
cuL8Qzdty5WbhVT6z9cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUxNzE2L0FFQUUxMTgyQjc1RjExRjE5NjY4RjdDQTQxMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1MTcxNi9BRUFFMTE4MkI3NUYxMUYxOTY2OEY3Q0E0MTExRjk3MC9JazBaaHEt
bWN1TDhRemR0eTVXYmhWVDZ6OWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANqEMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ7llAwQAyl5L
MA0GCSqGSIb3DQEBCwUAA4IBAQC2xargtfvDGtBcFxX8YfNn3cqW7dVcIjYR6XPb
2jbGUXmGH9KiNxmb6mai5W1ww+gRQH3uDh6w4aYuL4xaN1MNWy8IgAYsHfg1+7ju
o97gIVK4PM2u5o2Vs7yOm1FnTmwh0U8a/AIJE9mRCC3HTMu/PLCP6QKN1NtAc/mX
Ndx+cQolmk0ybSWl3fAwYtPISRCCdPJxaD07CBiyH6r8t1QfKfPAQ8ri7RI4bq8d
GdyImmzi/KPneBQWyEWGQmZ2U49sQ/TeKLoNolE+iUAIBhEGECUDzLg+QbT/l4JN
/O9zU0P/63CMhTGgKifFkT88p44968rAqrZXAuwziTGpAOM5
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:29 2026 by rpki-client