Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
File: poz6MR67HxAyDqIHdTAw5_Oij3I.cer (raw, json)
Hash identifier: WGRxQURI4R1DPgAYNL3hj4gxJHXc7OQK7MWnrz4AxU8=
Subject key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A1F2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 12:46:35 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 140212
IP: 103.148.150.0/23
IP: 2001:df2:d980::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 07:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172530 (0x2a1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 12:46:35 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:b5:4f:26:e7:1c:cb:07:47:e7:c3:cf:05:
23:78:d9:37:7b:0c:b7:af:25:5a:3c:0e:12:56:1b:
11:1f:c9:2e:19:59:5e:c9:cc:ff:92:19:f3:e0:47:
3d:d2:05:42:fa:b3:34:b1:08:23:5d:b1:0b:08:43:
99:f4:bf:18:c2:c7:41:27:0f:0d:c3:dc:57:27:f4:
2b:dc:e9:ef:3c:d9:8c:7e:e2:8b:a4:d7:df:fa:51:
e8:e6:2f:d8:da:93:5e:c3:8c:ae:a1:ca:3a:7f:1b:
51:b1:dd:c1:6e:3b:d2:3a:41:64:3d:7e:1e:77:e9:
58:e8:35:a4:f9:07:f0:55:1c:3d:c9:a4:ea:2a:67:
a3:41:20:fa:d7:72:74:d8:e5:a4:18:8d:8f:8a:53:
9e:80:09:63:27:e1:69:b3:53:15:85:8c:54:d2:44:
cf:87:a2:fb:ef:a1:e7:d5:f0:04:d2:19:4e:1b:97:
b3:7a:23:25:45:a0:2f:52:54:ee:d2:c0:a7:62:69:
24:cb:97:e2:e8:22:04:8c:5e:54:f5:b9:22:d1:a6:
23:c4:26:49:ee:31:89:63:7b:88:9d:c9:eb:cf:7e:
db:5b:a7:0e:f7:06:47:e1:5d:20:93:83:00:e6:2b:
d2:b5:26:67:35:57:39:99:6d:03:e7:b9:61:70:a3:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140212
sbgp-ipAddrBlock: critical
IPv4:
103.148.150.0/23
IPv6:
2001:df2:d980::/48
Signature Algorithm: sha256WithRSAEncryption
36:3d:27:9c:aa:cd:cf:ad:62:f8:fe:c0:55:19:93:0d:97:4f:
dc:76:5a:55:bc:4b:0e:1e:7d:24:12:29:bf:b7:1d:b8:1b:cb:
bb:b5:32:2f:3f:d5:22:3d:e4:06:8e:58:d7:f8:68:db:c3:70:
78:36:39:a1:e1:ed:8a:7c:d2:81:17:3b:f6:3a:3c:43:35:fe:
2a:ee:f1:c8:69:2b:e0:e8:7d:6f:09:90:e3:d4:ec:09:52:77:
47:cb:ea:de:dc:f2:89:95:9f:8a:6f:4f:a4:68:5e:b8:fb:9d:
07:ec:1b:87:9f:04:55:85:8a:96:d9:f5:d4:fe:2a:9f:bb:b4:
4a:c3:25:52:c3:bd:95:39:78:8b:4a:86:74:00:f6:73:91:9a:
8d:f2:80:b2:99:2f:99:3f:bb:4f:ff:c9:bb:ee:7c:30:e2:62:
21:7c:23:9d:2e:20:ec:6d:5e:05:9c:c5:ed:39:94:5a:45:6b:
b5:a5:ca:85:c4:6b:af:6b:03:e1:01:96:e0:82:7f:66:8b:68:
9a:6a:ba:5f:f1:4d:b6:9a:35:00:38:da:1c:d1:62:3b:ce:9e:
aa:31:89:d5:00:aa:4d:14:9d:94:bc:f3:77:e7:88:f8:cf:8a:
04:6c:26:df:82:b3:f2:4e:bf:fc:52:5a:5e:7e:34:db:90:73:
77:62:7c:8b
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAqHyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwMzEyNDYzNVoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzI1OEMxMTAvBgNVBAUTKEE2OENGQTMxMUVCQjFGMTAzMjBFQTIw
Nzc1MzAzMEU3RjNBMjhGNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPGrVPJuccywdH58PPBSN42Td7DLevJVo8DhJWGxEfyS4ZWV7JzP+SGfPgRz3S
BUL6szSxCCNdsQsIQ5n0vxjCx0EnDw3D3Fcn9Cvc6e882Yx+4ouk19/6UejmL9ja
k17DjK6hyjp/G1Gx3cFuO9I6QWQ9fh536VjoNaT5B/BVHD3JpOoqZ6NBIPrXcnTY
5aQYjY+KU56ACWMn4WmzUxWFjFTSRM+HovvvoefV8ATSGU4bl7N6IyVFoC9SVO7S
wKdiaSTLl+LoIgSMXlT1uSLRpiPEJknuMYlje4idyevPfttbpw73BkfhXSCTgwDm
K9K1Jmc1VzmZbQPnuWFwo3hnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUpoz6MR67
HxAyDqIHdTAw5/Oij3IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMyNThDL0I0QzQ1RkUwNTQ4RDExRUE4NkM5REQ3RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzMjU4Qy9CNEM0NUZFMDU0OEQxMUVBODZDOUREN0VDNEY5QUUwMi9wb3o2TVI2
N0h4QXlEcUlIZFRBdzVfT2lqM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiO0MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5SWMA8EAgAC
MAkDBwAgAQ3y2YAwDQYJKoZIhvcNAQELBQADggEBADY9J5yqzc+tYvj+wFUZkw2X
T9x2WlW8Sw4efSQSKb+3Hbgby7u1Mi8/1SI95AaOWNf4aNvDcHg2OaHh7Yp80oEX
O/Y6PEM1/iru8chpK+DofW8JkOPU7AlSd0fL6t7c8omVn4pvT6RoXrj7nQfsG4ef
BFWFipbZ9dT+Kp+7tErDJVLDvZU5eItKhnQA9nORmo3ygLKZL5k/u0//ybvufDDi
YiF8I50uIOxtXgWcxe05lFpFa7WlyoXEa69rA+EBluCCf2aLaJpqul/xTbaaNQA4
2hzRYjvOnqoxidUAqk0UnZS883fniPjPigRsJt+Cs/JOv/xSWl5+NNuQc3difIs=
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:26 2026 by rpki-client