Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer
File: XiBrZUYXUm6oHe9p1A3KkMONpJM.cer (raw, json)
Hash identifier: rV2Eviz/nyqMU52PV65RO8ESrOnl3naFtQoiA0u2Iyw=
Subject key identifier: 5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C35C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Jul 2026 02:28:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 203.33.112.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 09:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181084 (0x2c35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 7 02:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91C7106, serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:7a:ea:34:aa:e0:44:01:be:06:03:68:c7:
11:de:94:85:b5:19:1a:a0:ee:00:6c:74:5b:d3:e5:
c2:ff:2c:63:ea:5a:58:25:e0:01:93:50:30:a6:8a:
9f:36:19:4d:f5:91:f4:a1:69:9c:0e:0f:f8:dd:1e:
f4:59:57:b1:fd:a9:61:28:bd:4a:92:6c:5d:b3:f2:
a0:f6:9e:e1:ef:53:52:47:9a:48:04:75:ac:ef:f7:
51:27:f8:c6:bf:a4:07:31:30:59:c5:fc:06:fa:61:
51:58:72:19:77:b7:ce:d3:da:60:23:5c:ed:b3:de:
e6:0c:39:5c:33:13:56:ba:5c:c3:b6:e5:51:3e:26:
a3:9d:8a:32:41:da:ea:28:2f:f4:38:01:39:28:95:
0f:29:17:08:bb:01:30:d9:e1:92:1a:a2:b7:40:b4:
f4:3f:4f:9c:c5:bc:52:d0:f8:fc:1e:a5:25:67:ea:
af:d5:35:af:69:68:85:f6:4a:43:20:ac:d5:eb:dc:
e7:0e:fc:42:e8:32:c7:6a:5c:6a:f6:d1:af:92:4e:
b7:f4:1e:b0:0b:3a:cf:e1:74:2d:36:46:2d:b0:08:
1f:bd:1e:78:57:92:b5:14:68:41:84:fe:56:80:cc:
2a:12:ed:59:fd:05:52:49:db:b7:17:f8:ad:80:b0:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.33.112.0/21
Signature Algorithm: sha256WithRSAEncryption
00:d2:55:a6:b3:5b:b3:5a:b8:2b:96:b5:c9:ee:a9:b6:19:89:
ac:69:36:f5:93:9d:97:7b:3e:3d:09:76:95:8e:b8:80:c7:e2:
7a:7d:77:55:e1:78:6a:36:7c:8a:3a:36:5b:e0:c5:e3:ed:93:
7c:25:2d:3b:a6:09:d5:e4:fc:02:bd:fa:a3:2e:39:66:e1:9c:
36:f6:1b:fe:9a:52:3d:8e:0a:aa:a4:d6:60:27:c0:d9:59:9d:
13:41:ef:8c:de:8a:08:fd:64:ba:d2:7b:6e:fc:57:85:86:7d:
11:18:33:4b:b4:52:90:59:f1:3d:bc:fc:63:e1:34:71:11:67:
5c:f3:db:e9:ea:62:2f:b5:94:d6:2c:22:2a:ea:0b:9f:9b:74:
ae:a0:c4:51:24:22:ed:0b:40:f1:b2:66:a2:1d:94:9f:74:09:
aa:8e:be:b0:69:af:fd:d9:eb:51:d5:b8:e7:ee:d7:dd:55:42:
47:d7:4e:38:ea:6c:b4:23:83:dc:2f:cf:7e:12:ba:b2:bd:56:
18:d9:1d:11:38:38:c3:2d:70:51:4d:04:6a:be:68:14:ca:ca:
9e:5b:16:13:ec:6f:4e:76:a3:5a:eb:67:21:ea:73:b2:92:7b:
f8:40:73:26:6e:d6:cc:8f:cf:59:32:8b:02:4c:b8:68:30:09:
bd:cc:b5:e9
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAsNcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcwNzAyMjgxMVoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzcxMDYxMTAvBgNVBAUTKDVFMjA2QjY1NDYxNzUyNkVBODFERUY2
OUQ0MERDQTkwQzM4REE0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDD1XrqNKrgRAG+BgNoxxHelIW1GRqg7gBsdFvT5cL/LGPqWlgl4AGTUDCmip82
GU31kfShaZwOD/jdHvRZV7H9qWEovUqSbF2z8qD2nuHvU1JHmkgEdazv91En+Ma/
pAcxMFnF/Ab6YVFYchl3t87T2mAjXO2z3uYMOVwzE1a6XMO25VE+JqOdijJB2uoo
L/Q4ATkolQ8pFwi7ATDZ4ZIaordAtPQ/T5zFvFLQ+PwepSVn6q/VNa9paIX2SkMg
rNXr3OcO/ELoMsdqXGr20a+STrf0HrALOs/hdC02Ri2wCB+9HnhXkrUUaEGE/laA
zCoS7Vn9BVJJ27cX+K2AsFK7AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUXiBrZUYX
Um6oHe9p1A3KkMONpJMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM3MTA2LzdDRjE1RDgwNzlBQjExRjE5NDMxMDI4QTk1QTMwRkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNzEwNi83Q0YxNUQ4MDc5QUIxMUYxOTQzMTAyOEE5NUEzMEZCQy9YaUJyWlVZ
WFVtNm9IZTlwMUEzS2tNT05wSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAPLIXAwDQYJKoZIhvcNAQELBQADggEBAADSVaazW7NauCuWtcnu
qbYZiaxpNvWTnZd7Pj0JdpWOuIDH4np9d1XheGo2fIo6NlvgxePtk3wlLTumCdXk
/AK9+qMuOWbhnDb2G/6aUj2OCqqk1mAnwNlZnRNB74zeigj9ZLrSe278V4WGfREY
M0u0UpBZ8T28/GPhNHERZ1zz2+nqYi+1lNYsIirqC5+bdK6gxFEkIu0LQPGyZqId
lJ90CaqOvrBpr/3Z61HVuOfu191VQkfXTjjqbLQjg9wvz34SurK9VhjZHRE4OMMt
cFFNBGq+aBTKyp5bFhPsb052o1rrZyHqc7KSe/hAcyZu1syPz1kyiwJMuGgwCb3M
tek=
-----END CERTIFICATE-----
Generated at Thu Jul 9 11:01:55 2026 by rpki-client