Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.cer (raw, json)
Hash identifier: CPOaZ8eA3APZ951tcexJ0EbGGiwjl5oN//KISmJ8mnE=
Subject key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B494
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 May 2026 04:53:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 9280
AS: 17462
AS: 18345
AS: 23670
AS: 24113
AS: 24238
AS: 45261
AS: 45425
AS: 45671
AS: 56225
AS: 131229
AS: 132324
AS: 134061
IP: 27.50.64.0/19
IP: 27.111.80.0/24
IP: 27.111.85.0/24
IP: 27.111.87.0/24
IP: 27.111.90.0/23
IP: 43.242.68.0/22
IP: 43.250.204.0/22
IP: 45.65.12.0/24
IP: 103.2.196.0/22
IP: 103.11.52.0/22
IP: 103.12.8.0 -- 103.12.10.255
IP: 103.13.100.0/22
IP: 103.13.186.0/23
IP: 103.24.14.0/24
IP: 103.50.34.0/23
IP: 103.223.138.0/23
IP: 103.227.28.0/22
IP: 103.235.52.0/22
IP: 103.248.189.0 -- 103.248.191.255
IP: 103.255.249.0/24
IP: 114.141.192.0 -- 114.141.203.255
IP: 117.20.0.0/20
IP: 117.120.8.0/21
IP: 118.127.0.0/18
IP: 163.53.232.0/22
IP: 180.92.192.0/21
IP: 202.51.160.0/20
IP: 202.60.64.0/19
IP: 202.125.32.0/20
IP: 202.130.32.0/22
IP: 202.131.88.0 -- 202.131.94.255
IP: 203.26.196.0/22
IP: 203.28.51.0/24
IP: 203.56.250.0/24
IP: 203.88.104.0/22
IP: 221.121.128.0/19
IP: 223.252.0.0/18
IP: 223.252.96.0/20
IP: 2400:8100::/32
IP: 2400:d400::/32
IP: 2403:b800::/32
IP: 2404:5300::/32
IP: 2405:1000::/32
IP: 2407:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 20:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177300 (0x2b494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 14 04:53:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:d8:2f:ef:02:0c:ca:69:b2:a7:c1:2a:25:
ec:2e:58:4f:36:d2:a6:0d:50:a1:61:3a:6a:65:54:
18:2a:bb:ea:98:4d:5f:17:8a:3b:95:74:36:ef:c7:
06:77:22:b2:a8:d4:72:99:bd:83:12:0b:1f:9f:85:
b7:4e:0f:4a:22:a2:a3:59:2f:ee:f1:ad:51:41:16:
0a:ca:8c:8e:61:88:de:6e:71:ed:ba:ce:ba:c6:c2:
16:0e:24:74:e2:6e:be:fc:77:c5:9b:ec:e1:36:50:
e8:17:d1:ec:73:7d:06:6b:ba:e5:94:a0:28:ce:db:
5a:95:94:b5:24:69:7d:d1:6a:17:fe:9f:85:0e:8c:
f9:56:e5:d3:22:db:06:63:99:51:97:8e:35:6a:78:
4b:27:54:92:f2:ab:32:fa:8d:f5:f8:72:05:74:47:
be:b6:67:8d:97:12:70:f6:1b:f0:3e:3e:e2:35:b6:
24:ae:cb:a7:84:de:4b:06:a1:9d:95:2a:e3:05:4b:
fa:90:b2:90:57:3b:73:03:9e:57:af:cd:21:53:ce:
47:58:27:e0:e4:49:b8:1b:ec:36:25:48:29:c5:8d:
5e:cb:73:95:f8:7e:52:40:39:14:fd:cd:de:86:f2:
f0:a3:f8:27:2c:eb:ee:1e:45:cb:9e:64:fc:e0:ab:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9280
17462
18345
23670
24113
24238
45261
45425
45671
56225
131229
132324
134061
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.50.34.0/23
103.223.138.0/23
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.51.160.0/20
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
203.56.250.0/24
203.88.104.0/22
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400::/32
2403:b800::/32
2404:5300::/32
2405:1000::/32
2407:2200::/32
Signature Algorithm: sha256WithRSAEncryption
25:ea:87:b2:81:7f:d4:9d:c4:61:19:44:54:be:9c:37:19:e4:
85:eb:9b:f3:39:c7:6d:89:a4:a0:89:e3:ba:e7:c9:0a:71:6c:
88:7c:57:a3:6e:12:2e:43:39:35:36:fd:df:76:24:1e:ce:93:
b2:91:09:5f:b8:c5:40:ff:2c:5c:96:1a:72:de:6f:75:e2:50:
7c:bf:74:56:e8:2a:78:52:1b:d6:36:f4:7c:23:cd:95:02:3a:
46:47:e2:4e:e4:aa:a7:67:c9:db:08:6b:be:d2:5a:af:eb:19:
d5:cc:43:c2:b0:89:ce:1f:e9:9b:9a:92:ac:47:c9:27:e5:85:
ac:ec:32:7c:79:98:36:f5:60:75:99:a3:9a:16:4f:4c:02:d3:
08:bb:52:7a:81:19:46:cb:5a:02:cc:f5:33:ce:d3:63:e6:3b:
02:6d:3e:24:d3:81:20:16:61:a9:17:e5:13:71:c3:4c:68:78:
ef:72:bf:9c:ed:0c:da:e9:3a:fa:da:db:46:2e:47:f3:a6:60:
60:c6:9c:4a:71:97:bc:7f:01:f3:37:f5:0c:60:47:03:ee:42:
d8:59:2c:ca:cb:38:4a:d1:2d:b2:c0:e0:88:af:0b:15:3f:a0:
8c:1c:a6:4d:c7:da:dc:0c:66:72:f4:4c:40:2f:7a:3b:67:b8:
41:71:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 02:51:16 2026 by rpki-client