Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
File: lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer (raw, json)
Hash identifier: +qk4+W0Mnt4K9vw1paZgQF2EE+bHbU4wePus1cebyWU=
Subject key identifier: 95:65:01:9A:A6:51:69:5E:04:F8:61:BA:1D:3D:6E:FF:3E:BA:4D:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CC44
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Aug 2026 09:19:57 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 10125
IP: 202.168.94.0/24
IP: 203.217.174.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183364 (0x2cc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 10 09:19:57 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91187F1, serialNumber=9565019AA651695E04F861BA1D3D6EFF3EBA4DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:0f:54:da:d9:d6:6d:a7:75:97:22:44:56:
54:a2:27:23:38:e4:8a:df:55:ca:35:33:18:12:c7:
ef:3c:89:2d:10:2b:3d:7a:b5:8f:b3:68:e9:72:67:
d9:e6:62:75:89:4f:a5:f5:09:03:f4:25:36:58:36:
81:68:db:90:a1:f3:2f:ca:cf:fb:e5:7c:6e:2f:fb:
78:fe:fb:53:c7:29:e8:d4:f7:9c:a5:83:33:a6:20:
91:1f:86:fb:ed:0d:08:60:de:cd:10:2f:9a:5b:c8:
2a:4b:b9:1b:ef:16:d0:27:da:f8:93:bc:4d:7d:9d:
75:ea:fd:f0:4f:88:23:dc:39:2b:77:9f:80:4d:80:
07:30:27:d7:0b:52:ab:97:de:bf:a6:cc:b7:d7:a4:
42:5e:71:c8:69:54:7b:6d:82:83:6a:39:92:f1:41:
a9:17:d5:91:fb:d1:ee:9b:be:f4:f4:ae:94:84:85:
06:4f:3b:f1:b3:82:14:2a:ba:f0:39:c6:3b:b3:78:
ca:8c:a4:ac:b5:75:0a:3f:18:58:3f:73:03:0d:74:
1c:0d:b8:28:0c:85:58:0f:fe:38:04:40:26:e1:07:
0b:6b:18:d5:fe:6a:0f:2f:dc:76:2d:29:f7:61:40:
cc:2c:76:c4:56:79:9b:08:87:82:4a:a3:d1:09:c1:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:01:9A:A6:51:69:5E:04:F8:61:BA:1D:3D:6E:FF:3E:BA:4D:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10125
sbgp-ipAddrBlock: critical
IPv4:
202.168.94.0/24
203.217.174.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bf:2d:d3:0d:0b:38:b0:af:12:c9:1b:9e:c9:25:31:57:d6:
04:91:07:d3:7b:ff:2c:ba:4b:ab:d7:36:a3:b1:4c:a8:8f:3d:
ef:2b:f0:f1:41:08:c5:b3:6c:bc:d2:96:84:4b:88:ab:d9:fd:
7d:95:ce:1f:d6:91:cb:5d:a3:82:0a:18:a0:23:1c:75:26:06:
b8:82:58:ac:b0:4b:e5:80:d2:37:18:98:b9:3a:25:65:90:e4:
c1:b2:9c:b4:e5:73:13:6f:fc:16:17:5f:4b:98:4b:08:b6:bf:
25:67:8c:a8:7c:23:66:34:c6:84:5c:02:29:23:f0:6d:7f:6f:
2c:3c:8d:a0:dc:95:52:b9:3f:eb:54:af:47:1a:e2:2b:4a:d7:
61:00:0e:4c:be:1e:1b:67:c5:6b:72:89:c1:5f:15:e3:ce:10:
7d:07:52:23:17:da:81:38:80:88:e5:91:40:82:e1:16:4b:7e:
cb:7e:ec:ff:93:1b:39:d3:b6:31:60:c7:07:ef:29:c9:01:94:
41:07:c0:74:60:95:43:8c:be:89:8b:f8:7e:65:73:c5:46:ce:
86:b8:90:dc:e0:61:f9:de:f3:79:25:90:e9:bd:d2:2f:f6:32:
2b:0e:2c:8e:53:25:84:b7:6a:b5:77:6b:dd:24:16:5e:5f:35:
6e:ad:8c:38
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgIDAsxEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgxMDA5MTk1N1oXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTg3RjExMTAvBgNVBAUTKDk1NjUwMTlBQTY1MTY5NUUwNEY4NjFC
QTFEM0Q2RUZGM0VCQTREQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChtA9U2tnWbad1lyJEVlSiJyM45IrfVco1MxgSx+88iS0QKz16tY+zaOlyZ9nm
YnWJT6X1CQP0JTZYNoFo25Ch8y/Kz/vlfG4v+3j++1PHKejU95ylgzOmIJEfhvvt
DQhg3s0QL5pbyCpLuRvvFtAn2viTvE19nXXq/fBPiCPcOSt3n4BNgAcwJ9cLUquX
3r+mzLfXpEJecchpVHttgoNqOZLxQakX1ZH70e6bvvT0rpSEhQZPO/GzghQquvA5
xjuzeMqMpKy1dQo/GFg/cwMNdBwNuCgMhVgP/jgEQCbhBwtrGNX+ag8v3HYtKfdh
QMwsdsRWeZsIh4JKo9EJwf1nAgMBAAGjggMUMIIDEDAdBgNVHQ4EFgQUlWUBmqZR
aV4E+GG6HT1u/z66TbswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE4N0YxL0E1Mzc0NzhBOTQ5QzExRjE5NENERUU2NzZCMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExODdGMS9BNTM3NDc4QTk0OUMxMUYxOTRDREVFNjc2QjExRjk3MC9sV1VCbXFa
UmFWNEUtR0c2SFQxdV96NjZUYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICJ40wJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADKqF4DBADL2a4w
DQYJKoZIhvcNAQELBQADggEBAIy/LdMNCziwrxLJG57JJTFX1gSRB9N7/yy6S6vX
NqOxTKiPPe8r8PFBCMWzbLzSloRLiKvZ/X2Vzh/Wkctdo4IKGKAjHHUmBriCWKyw
S+WA0jcYmLk6JWWQ5MGynLTlcxNv/BYXX0uYSwi2vyVnjKh8I2Y0xoRcAikj8G1/
byw8jaDclVK5P+tUr0ca4itK12EADky+HhtnxWtyicFfFePOEH0HUiMX2oE4gIjl
kUCC4RZLfst+7P+TGznTtjFgxwfvKckBlEEHwHRglUOMvomL+H5lc8VGzoa4kNzg
Yfne83klkOm90i/2MisOLI5TJYS3arV3a90kFl5fNW6tjDg=
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:06 2026 by rpki-client