Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer
File: OT7Ose29xrFv9nglTZ02WP5it_0.cer (raw, json)
Hash identifier: Bll7eralQQPkZOPyC01GqqvutM0XHVJ9luTHyrgy8zo=
Subject key identifier: 39:3E:CE:B1:ED:BD:C6:B1:6F:F6:78:25:4D:9D:36:58:FE:62:B7:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D84C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Sep 2026 16:14:52 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 136621
IP: 163.52.242.0/23
IP: 2001:df7:93c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 16:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186444 (0x2d84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 24 16:14:52 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91DE342, serialNumber=393ECEB1EDBDC6B16FF678254D9D3658FE62B7FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:5a:95:51:6a:a8:4e:14:a5:0b:74:55:80:
09:5f:08:9e:00:14:96:02:84:db:ed:6d:a0:21:50:
02:c6:5a:81:53:69:32:a1:89:08:b1:8d:b7:61:7e:
ee:43:21:2e:03:60:47:5f:7f:e6:f0:33:17:e8:38:
1f:6e:76:11:ec:c2:70:b7:dd:c8:9d:18:47:70:82:
f1:c6:60:b2:2a:64:8e:0a:75:5d:54:07:b3:5d:78:
a4:11:b9:e8:ef:34:0e:bc:e5:e9:81:96:19:92:4c:
d2:91:c1:c1:60:2d:33:40:0b:9e:1d:31:30:a6:47:
30:93:82:ea:67:d8:dd:34:97:c1:09:6f:9a:c1:25:
e5:96:b0:99:65:b2:aa:b8:d0:09:22:9c:cb:78:01:
ed:14:2f:27:d1:4b:cf:34:3e:51:96:75:80:5f:79:
fb:5a:e4:a8:ca:27:61:59:13:ec:e2:15:d2:7f:42:
e0:32:6d:08:57:0b:2b:b9:75:44:9c:32:f2:71:7f:
9b:cc:1f:e1:56:bc:36:a6:0d:c3:d0:6f:5e:6a:8a:
2e:a4:64:51:ed:a1:6a:fa:b1:59:60:00:07:c3:74:
72:16:48:0a:02:db:47:a3:9d:42:62:13:0d:a7:4f:
10:f6:8f:15:49:1d:88:de:5f:4e:d9:bb:2b:b5:55:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:CE:B1:ED:BD:C6:B1:6F:F6:78:25:4D:9D:36:58:FE:62:B7:FD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136621
sbgp-ipAddrBlock: critical
IPv4:
163.52.242.0/23
IPv6:
2001:df7:93c0::/48
Signature Algorithm: sha256WithRSAEncryption
4c:8f:02:66:98:58:89:b0:bb:4e:68:77:3a:07:f2:0d:a6:75:
19:f9:00:62:87:04:28:f1:64:6c:9f:fe:45:1c:a1:19:44:89:
ab:90:26:99:41:bf:13:66:1d:79:91:3f:04:ea:76:6c:ea:3d:
18:86:83:4e:39:f6:bb:08:98:a8:97:1a:5f:12:9d:cd:97:92:
fa:f9:37:88:e7:69:6d:63:ee:ff:d5:b6:08:98:b0:6e:00:b0:
22:7a:2d:d3:ef:01:27:3d:19:1e:45:ba:a7:70:8f:98:bd:0a:
79:c9:14:3b:4d:37:b0:10:b3:d2:8d:9e:a0:eb:12:31:aa:6c:
51:1d:af:7e:44:b5:d3:4f:c2:0d:86:39:5c:03:58:80:40:18:
e2:d8:a3:00:b3:ea:0f:ed:75:72:b7:c6:19:94:88:60:de:c0:
eb:07:d6:63:d3:63:64:cc:9e:31:0d:f6:e7:2c:46:c8:90:88:
9a:1a:2c:c3:8f:90:de:cb:45:8b:aa:66:7d:36:15:e8:e7:a8:
91:13:43:0c:0b:10:00:2c:d9:7f:a4:73:62:e3:c8:67:5d:6c:
2f:81:42:94:cf:6e:de:7d:98:23:45:98:29:50:65:e9:55:02:
83:c2:30:31:09:1f:c2:4d:9d:fd:41:85:dd:c9:bf:05:fb:2a:
d7:48:0e:c0
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAthMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkyNDE2MTQ1MloXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREUzNDIxMTAvBgNVBAUTKDM5M0VDRUIxRURCREM2QjE2RkY2Nzgy
NTREOUQzNjU4RkU2MkI3RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDkd1qVUWqoThSlC3RVgAlfCJ4AFJYChNvtbaAhUALGWoFTaTKhiQixjbdhfu5D
IS4DYEdff+bwMxfoOB9udhHswnC33cidGEdwgvHGYLIqZI4KdV1UB7NdeKQRuejv
NA685emBlhmSTNKRwcFgLTNAC54dMTCmRzCTgupn2N00l8EJb5rBJeWWsJllsqq4
0AkinMt4Ae0ULyfRS880PlGWdYBfefta5KjKJ2FZE+ziFdJ/QuAybQhXCyu5dUSc
MvJxf5vMH+FWvDamDcPQb15qii6kZFHtoWr6sVlgAAfDdHIWSAoC20ejnUJiEw2n
TxD2jxVJHYjeX07Zuyu1VVE7AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUOT7Ose29
xrFv9nglTZ02WP5it/0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURFMzQyLzEwMUUyQzgwQjgzMzExRjFCODNGQjIyODQxMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERTM0Mi8xMDFFMkM4MEI4MzMxMUYxQjgzRkIyMjg0MTExRjk3MC9PVDdPc2Uy
OXhyRnY5bmdsVFowMldQNWl0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhWtMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBozTyMA8EAgAC
MAkDBwAgAQ33k8AwDQYJKoZIhvcNAQELBQADggEBAEyPAmaYWImwu05odzoH8g2m
dRn5AGKHBCjxZGyf/kUcoRlEiauQJplBvxNmHXmRPwTqdmzqPRiGg0459rsImKiX
Gl8Snc2Xkvr5N4jnaW1j7v/VtgiYsG4AsCJ6LdPvASc9GR5Fuqdwj5i9CnnJFDtN
N7AQs9KNnqDrEjGqbFEdr35EtdNPwg2GOVwDWIBAGOLYowCz6g/tdXK3xhmUiGDe
wOsH1mPTY2TMnjEN9ucsRsiQiJoaLMOPkN7LRYuqZn02FejnqJETQwwLEAAs2X+k
c2LjyGddbC+BQpTPbt59mCNFmClQZelVAoPCMDEJH8JNnf1Bhd3JvwX7KtdIDsA=
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:13:00 2026 by rpki-client