Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
File: KOAXfHClckcH27FJ7VV8D4FW4Ok.cer (raw, json)
Hash identifier: Z+mWu5BaI9VGYCmdd5mQb/E4f5y2oRy4T0meFqAqA48=
Subject key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BD4C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 14 Jun 2026 22:33:23 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 103.167.234.0/23
IP: 2407:79c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jul 2026 12:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179532 (0x2bd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 14 22:33:23 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:07:c5:6a:74:b7:35:84:2d:cc:af:be:1d:
b4:d7:a1:45:8d:19:89:f5:47:ce:9d:2d:ef:bc:09:
bc:1d:21:3a:64:7f:94:4f:33:cc:b7:08:a1:d2:a4:
e1:2d:25:fc:d8:07:a9:7c:71:d1:87:c3:84:de:e4:
82:69:93:e9:cd:f7:1d:e1:43:97:87:84:f6:2f:15:
20:6e:4e:47:7c:cf:51:53:71:58:21:68:87:18:1e:
5b:e7:5f:82:65:72:8b:bd:35:d2:ea:d8:ab:03:b3:
0e:1e:e3:cc:86:62:66:5a:3c:1d:68:ae:15:41:26:
e1:82:db:2f:84:f9:68:fa:e2:01:3e:f0:61:e5:3a:
a1:23:34:e2:ab:9e:cc:41:f9:1e:91:74:41:79:c8:
d6:2a:ee:ec:ae:bc:ca:00:f4:07:a7:b7:46:15:bd:
fd:be:80:30:44:c4:86:b2:ae:dc:74:aa:27:99:4a:
20:4a:5e:36:32:88:b4:2d:9d:8a:f6:bd:d6:a8:0b:
64:99:90:49:3a:1a:b2:4e:cd:db:c7:64:51:92:0e:
04:93:2f:92:ac:28:2f:fe:a3:9c:17:dc:94:28:6d:
62:95:df:a6:e7:e5:04:c8:65:ca:03:7b:1e:b7:c4:
26:01:24:eb:ca:6c:b2:a7:79:63:e4:3e:a1:f7:c1:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.234.0/23
IPv6:
2407:79c0::/32
Signature Algorithm: sha256WithRSAEncryption
c9:9f:c7:32:eb:cd:b6:d5:81:ba:ad:3d:5a:2a:10:aa:f1:f4:
c6:c4:0b:a0:83:c5:74:18:e8:cf:9c:93:de:cb:24:9a:a4:9a:
54:ee:4c:e1:28:fd:5f:ef:e8:ce:87:c7:75:58:83:86:c6:77:
1c:cd:79:1c:a6:db:e7:ad:ce:af:32:c7:77:ed:96:86:fd:9a:
c5:52:87:53:ed:dd:60:5b:e8:76:cc:77:3b:61:e6:0d:41:11:
0c:6d:7b:02:99:09:a1:80:45:7a:86:91:5d:35:76:79:2b:4a:
f9:f6:7b:7f:59:79:90:df:e8:d4:0a:ad:7a:0c:ca:99:9e:15:
fd:5e:55:13:23:8c:f4:1d:51:da:5c:36:be:c4:2d:94:60:b7:
84:ed:2f:6d:63:2d:66:1e:1a:6a:14:5f:6a:7a:3c:c7:80:1a:
9e:74:dd:9d:a9:ab:e0:bc:44:34:d2:fe:f5:e0:f0:bc:2b:97:
e8:21:9a:8f:39:6e:3f:96:d5:bf:33:f7:81:10:dc:63:e7:9e:
ca:98:f2:4e:56:03:33:81:16:0d:e1:8d:df:f5:9a:66:26:4a:
d0:59:ac:56:86:17:88:5f:a7:f4:cd:3c:86:18:15:94:7d:da:
ad:b8:4e:62:c7:88:9a:6e:c7:4a:72:18:7b:8f:7c:aa:f3:64:
14:d0:f5:c6
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAr1MMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYxNDIyMzMyM1oXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0
OUVENTU3QzBGODE1NkUwRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXvgfFanS3NYQtzK++HbTXoUWNGYn1R86dLe+8CbwdITpkf5RPM8y3CKHSpOEt
JfzYB6l8cdGHw4Te5IJpk+nN9x3hQ5eHhPYvFSBuTkd8z1FTcVghaIcYHlvnX4Jl
cou9NdLq2KsDsw4e48yGYmZaPB1orhVBJuGC2y+E+Wj64gE+8GHlOqEjNOKrnsxB
+R6RdEF5yNYq7uyuvMoA9Aent0YVvf2+gDBExIayrtx0qieZSiBKXjYyiLQtnYr2
vdaoC2SZkEk6GrJOzdvHZFGSDgSTL5KsKC/+o5wX3JQobWKV36bn5QTIZcoDex63
xCYBJOvKbLKneWPkPqH3wTZnAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUKOAXfHCl
ckcH27FJ7VV8D4FW4OkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM2MTA5L0M4MjA3MjEyQzUwRDExRUI5QUFFRTg3QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhD
bGNrY0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAFnp+owDQQCAAIwBwMFACQHecAwDQYJKoZIhvcNAQELBQADggEB
AMmfxzLrzbbVgbqtPVoqEKrx9MbEC6CDxXQY6M+ck97LJJqkmlTuTOEo/V/v6M6H
x3VYg4bGdxzNeRym2+etzq8yx3ftlob9msVSh1Pt3WBb6HbMdzth5g1BEQxtewKZ
CaGARXqGkV01dnkrSvn2e39ZeZDf6NQKrXoMypmeFf1eVRMjjPQdUdpcNr7ELZRg
t4TtL21jLWYeGmoUX2p6PMeAGp503Z2pq+C8RDTS/vXg8Lwrl+ghmo85bj+W1b8z
94EQ3GPnnsqY8k5WAzOBFg3hjd/1mmYmStBZrFaGF4hfp/TNPIYYFZR92q24TmLH
iJpux0pyGHuPfKrzZBTQ9cY=
-----END CERTIFICATE-----
Generated at Sun Jun 28 14:57:26 2026 by rpki-client