Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
File: cjdHbP3kFQq5UJerug_t7UKtuas.cer (raw, json)
Hash identifier: 5IfoKq3+WMx0ELMo6XZaEun95LU+CZGc6MCW7gsSpaI=
Subject key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B4CB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 May 2026 14:46:58 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.54.111.0/24
IP: 103.67.167.0/24
IP: 2001:df2:ea00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177355 (0x2b4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 14 14:46:58 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:54:c7:6c:5e:ec:d2:aa:2b:74:40:df:59:
ce:26:dc:30:a7:c2:a2:10:0e:0d:b7:60:95:46:8b:
cd:26:7d:c6:3a:6b:9b:90:ab:8e:6f:82:27:86:8e:
3f:ad:a2:bf:79:d6:40:42:f3:67:e9:3b:ac:ed:8e:
d2:a7:d4:2a:45:6d:96:f5:9a:57:2f:30:9a:ec:00:
e3:b4:e1:ca:da:46:79:35:74:d9:61:30:54:cd:a5:
cf:ef:38:da:85:19:ff:f3:6f:9e:33:c2:fb:2d:34:
1c:82:64:54:01:60:f8:b5:cb:24:26:1c:8e:b3:93:
ce:8f:b4:ea:f3:09:12:f5:67:ab:f7:ab:48:8d:4d:
ee:6c:c8:a0:e4:33:9d:05:86:cb:53:f9:88:4d:17:
78:ce:dc:89:3f:9e:26:8c:8d:cb:5d:56:5d:5c:f7:
67:cb:9f:15:cd:2c:84:6a:bf:5b:be:ea:53:2f:59:
bd:9f:26:df:e7:d3:6c:ba:cf:18:00:4a:33:ca:9e:
82:5b:73:af:73:4c:15:e1:db:58:38:2d:54:25:b5:
42:1b:6e:1d:ea:1d:3e:f6:95:71:7b:f6:d3:a8:30:
4e:6f:25:52:07:93:1d:33:48:5a:30:d8:46:d2:b7:
e7:1f:df:3a:c9:da:a0:dc:31:f4:a7:2a:b5:75:36:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.111.0/24
103.67.167.0/24
IPv6:
2001:df2:ea00::/48
Signature Algorithm: sha256WithRSAEncryption
a9:cf:63:df:0c:d4:ac:9b:93:20:83:d1:85:f9:3b:4f:86:f2:
40:88:9e:f8:a7:37:65:dd:4a:59:4b:5e:51:7f:06:a3:63:98:
c6:fc:db:6b:75:e0:ef:bd:9b:fa:94:c3:f8:b5:39:5d:2f:b7:
e5:21:9c:3c:85:58:11:d8:ca:d3:4b:33:36:0a:aa:f7:52:40:
1c:a9:6d:07:bf:b4:5a:36:37:45:7d:8e:b7:b8:6d:ba:6d:8b:
63:5e:86:74:21:ed:12:59:99:25:d8:3b:d6:2c:dc:bf:2d:1b:
25:e1:5d:ae:da:e4:66:d8:b5:cd:eb:33:73:e3:30:b9:05:58:
a3:60:e8:be:a1:b7:fe:a4:eb:8c:8b:66:b8:59:b9:e7:0c:38:
88:06:83:f8:2f:4d:a3:de:69:a9:23:08:a5:40:dd:35:a1:02:
93:52:a6:79:ed:11:7e:f3:96:0b:e2:84:86:fe:fd:9b:a6:b9:
51:28:ba:60:5a:03:48:79:55:58:02:0a:fb:70:76:ef:70:b6:
cb:0b:1b:f0:5c:23:99:a0:bf:11:0b:d2:26:b4:b1:ba:42:2e:
ef:26:d3:52:32:d2:d6:34:48:63:de:1f:ff:b5:bb:cc:0a:93:
d1:36:e9:e2:2f:d8:2d:39:88:ba:8a:92:2b:c8:2d:58:10:a9:
59:4f:45:2c
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIDArTLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUxNDE0NDY1OFoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdB
QkJBMEZFREVENDJBREI5QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDT8VTHbF7s0qordEDfWc4m3DCnwqIQDg23YJVGi80mfcY6a5uQq45vgieGjj+t
or951kBC82fpO6ztjtKn1CpFbZb1mlcvMJrsAOO04craRnk1dNlhMFTNpc/vONqF
Gf/zb54zwvstNByCZFQBYPi1yyQmHI6zk86PtOrzCRL1Z6v3q0iNTe5syKDkM50F
hstT+YhNF3jO3Ik/niaMjctdVl1c92fLnxXNLIRqv1u+6lMvWb2fJt/n02y6zxgA
SjPKnoJbc69zTBXh21g4LVQltUIbbh3qHT72lXF79tOoME5vJVIHkx0zSFow2EbS
t+cf3zrJ2qDcMfSnKrV1Nu8lAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUcjdHbP3k
FQq5UJerug/t7UKtuaswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY0RkU2L0JCMDk1ODJDN0RENDExRUE5NEJFQUY3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAz
a0ZRcTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8EJzAl
MBIEAgABMAwDBABnNm8DBABnQ6cwDwQCAAIwCQMHACABDfLqADANBgkqhkiG9w0B
AQsFAAOCAQEAqc9j3wzUrJuTIIPRhfk7T4byQIie+Kc3Zd1KWUteUX8Go2OYxvzb
a3Xg772b+pTD+LU5XS+35SGcPIVYEdjK00szNgqq91JAHKltB7+0WjY3RX2Ot7ht
um2LY16GdCHtElmZJdg71izcvy0bJeFdrtrkZti1zeszc+MwuQVYo2DovqG3/qTr
jItmuFm55ww4iAaD+C9No95pqSMIpUDdNaECk1Kmee0RfvOWC+KEhv79m6a5USi6
YFoDSHlVWAIK+3B273C2ywsb8FwjmaC/EQvSJrSxukIu7ybTUjLS1jRIY94f/7W7
zAqT0Tbp4i/YLTmIuoqSK8gtWBCpWU9FLA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:17:13 2026 by rpki-client