Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer (raw, json)
Hash identifier: 7/o7ssWd2fqKtTjZZi4womna5qWAinz8NyYY9Pgv+Kw=
Subject key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028E87
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Feb 2026 04:34:24 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 202.44.128.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 12:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167559 (0x28e87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 11 04:34:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:45:61:7e:86:52:a4:6d:ae:bf:98:7e:89:
a0:82:5e:a1:b0:14:33:11:d1:22:6e:7d:34:d3:a9:
0d:ca:6f:a5:79:97:48:2f:9e:1d:54:90:80:37:7f:
da:90:a3:49:97:bd:ec:3e:3b:e8:62:eb:34:76:38:
b4:8f:48:b5:c4:5e:4d:97:7c:72:0f:c6:33:d2:fe:
1e:f2:f6:83:bf:65:79:67:d9:53:8c:d5:97:6f:35:
74:bc:25:12:94:ff:4e:c5:78:ec:d2:d6:47:3a:dd:
03:3a:a2:e9:27:64:27:8a:79:77:56:2d:e4:4c:29:
05:be:c8:63:d2:a6:e6:77:95:f6:08:68:fd:e3:36:
ea:98:d1:4c:75:a3:72:3b:d3:8e:5d:97:b1:cb:4b:
dd:55:bd:4a:ce:f5:72:a3:06:cf:2f:b4:ff:35:c1:
9e:c6:84:e4:6a:ed:9c:d4:c8:eb:71:8a:9f:4b:8f:
e2:f3:b7:11:b2:25:0c:aa:f3:8c:8d:cc:9f:0f:84:
a9:7e:71:a7:97:dd:73:46:0a:d4:19:f9:38:10:62:
e6:7b:5f:61:b5:1a:ef:51:06:1e:14:52:7a:4b:f3:
d2:e6:40:c2:72:2d:93:cd:8a:62:0e:82:4b:d6:ea:
67:f2:4a:a4:41:c8:f6:82:cf:7f:fa:44:42:43:30:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.44.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:69:21:fe:29:fb:f0:72:cc:c0:1c:72:0e:63:45:c8:49:ec:
eb:14:31:5c:c5:ab:bb:ff:5e:a0:04:1f:ae:09:b7:f6:2f:03:
7f:72:73:b5:d8:6c:1f:97:49:31:20:e0:e3:f5:06:4a:28:88:
4d:a3:62:83:70:b9:a4:a3:23:19:d9:59:86:5b:65:5b:0a:27:
c6:25:b3:fd:63:22:04:10:b2:d0:7b:4a:a7:82:ad:d0:29:8b:
92:3f:73:1b:ca:5b:85:c6:fa:79:45:bc:3e:91:42:4d:cb:b1:
96:fe:83:8c:a2:46:83:b2:40:02:a9:cf:4c:2e:a4:de:7f:88:
a9:8c:64:b8:29:32:a1:0a:24:0f:54:01:93:27:d6:d5:dc:71:
b8:22:b4:38:1c:7e:8a:3c:10:27:52:05:a7:fb:74:aa:86:34:
26:1a:96:63:b3:ba:62:50:ad:98:b3:98:0f:f4:7c:0b:9c:ea:
0d:f3:c9:17:65:23:fb:ce:a9:dc:fe:46:05:0c:b7:19:80:9b:
ad:02:af:9b:f1:b6:fd:b2:4f:2f:40:78:c4:e2:37:5b:4a:a9:
1a:e9:c8:8b:3a:03:6f:13:3c:4c:98:f7:e1:1a:e6:4a:21:3f:
b5:76:32:90:19:4f:5c:e3:e1:9f:d8:4b:4d:36:77:05:c0:b2:
31:bd:b6:eb
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAo6HMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIxMTA0MzQyNFoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxNzNDQ0ExMTAvBgNVBAUTKDZGRDVCNzQzMUU3MTUwRUQ2NTBGN0Yy
N0EzRENGOEM1Q0VBQzc3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmR0VhfoZSpG2uv5h+iaCCXqGwFDMR0SJufTTTqQ3Kb6V5l0gvnh1UkIA3f9qQ
o0mXvew+O+hi6zR2OLSPSLXEXk2XfHIPxjPS/h7y9oO/ZXln2VOM1ZdvNXS8JRKU
/07FeOzS1kc63QM6ouknZCeKeXdWLeRMKQW+yGPSpuZ3lfYIaP3jNuqY0Ux1o3I7
045dl7HLS91VvUrO9XKjBs8vtP81wZ7GhORq7ZzUyOtxip9Lj+LztxGyJQyq84yN
zJ8PhKl+caeX3XNGCtQZ+TgQYuZ7X2G1Gu9RBh4UUnpL89LmQMJyLZPNimIOgkvW
6mfySqRByPaCz3/6REJDMNMhAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUb9W3Qx5x
UO1lD38no9z4xc6sd2QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTczQ0NBLzFDQTlCODI0NjU0RDExRUZCNDRCN0I1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3M0NDQS8xQ0E5QjgyNDY1NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1
eFVPMWxEMzhubzl6NHhjNnNkMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADKLIAwDQYJKoZIhvcNAQELBQADggEBAMNpIf4p+/ByzMAccg5j
RchJ7OsUMVzFq7v/XqAEH64Jt/YvA39yc7XYbB+XSTEg4OP1BkooiE2jYoNwuaSj
IxnZWYZbZVsKJ8Yls/1jIgQQstB7SqeCrdApi5I/cxvKW4XG+nlFvD6RQk3LsZb+
g4yiRoOyQAKpz0wupN5/iKmMZLgpMqEKJA9UAZMn1tXccbgitDgcfoo8ECdSBaf7
dKqGNCYalmOzumJQrZizmA/0fAuc6g3zyRdlI/vOqdz+RgUMtxmAm60Cr5vxtv2y
Ty9AeMTiN1tKqRrpyIs6A28TPEyY9+Ea5kohP7V2MpAZT1zj4Z/YS002dwXAsjG9
tus=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:08:49 2026 by rpki-client