
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
File: tO2w1sy18AyTBDdO6B9eJhrmcck.cer (raw, json)
Hash identifier: oUpuE6xRlU8FM4XI/odx5dHy01Z0jHNnIV2eSLt4j4E=
Subject key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BE5A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Jun 2026 03:27:13 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 135521
IP: 103.221.240.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179802 (0x2be5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 19 03:27:13 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:b2:52:22:e3:66:31:07:01:24:35:1c:87:
95:c7:8d:5c:9b:3a:5b:74:0f:56:2a:22:16:aa:14:
e5:11:b2:3c:8d:b7:eb:cd:8d:33:83:74:a2:10:4f:
20:62:01:87:4e:0a:8f:9e:da:50:c8:59:af:5a:f7:
a3:43:c7:8e:ca:42:00:62:dc:30:47:14:58:17:21:
96:61:98:5d:1a:f3:16:29:32:e0:67:c5:4d:6b:c5:
16:6f:38:ab:30:26:48:b1:39:3f:3e:20:d7:d8:36:
db:23:3d:c5:21:b4:90:b6:bf:c3:30:fb:c3:5a:b5:
b3:94:dd:4c:e1:2d:6b:96:9a:54:32:1b:8d:fe:5f:
ab:06:36:de:e2:50:a6:ac:d1:90:6e:1e:aa:44:c1:
ad:4b:bb:f7:ca:46:11:c2:0e:03:09:76:b1:f9:17:
39:40:72:ef:66:5d:83:5b:2e:6a:bc:be:85:71:2c:
02:39:0f:0d:d6:69:02:9d:05:dc:d6:eb:ee:6b:2c:
00:f9:bd:e0:af:72:2e:cc:77:64:7a:29:4f:a2:55:
ca:9a:5c:56:de:09:17:98:dc:6b:8c:8e:65:49:31:
9c:27:b4:ba:26:01:e1:87:d2:ab:7b:f7:50:91:f0:
21:93:44:a6:c2:68:df:77:b2:ef:c2:e9:6b:9c:80:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135521
sbgp-ipAddrBlock: critical
IPv4:
103.221.240.0/22
Signature Algorithm: sha256WithRSAEncryption
39:53:c1:f8:45:85:9f:e7:05:0c:57:af:ef:81:bc:08:c5:d4:
90:3c:2f:52:b6:f5:28:65:c6:32:ae:d2:64:b2:44:ab:ac:b4:
e0:89:8e:19:e8:1c:56:7b:95:c2:57:c1:04:e3:04:a9:c4:44:
20:33:8d:38:fa:d3:ec:38:41:19:1f:58:61:11:42:fd:bc:29:
b5:81:e2:1d:ed:f8:62:b7:9a:f2:17:bb:4c:99:8a:3e:53:86:
1c:02:44:8b:b6:ed:3b:bd:07:35:84:db:e4:f5:a5:27:3a:10:
e9:1e:f2:4b:01:22:66:5a:33:a3:2e:02:df:38:9e:bd:d5:3a:
84:98:ed:f9:27:d8:79:aa:c7:8e:63:fc:b0:b9:a8:4e:63:77:
f5:c5:2d:c0:d4:42:94:b4:9a:b8:5f:89:e7:3b:ea:85:22:e0:
21:0e:18:cd:c1:75:9b:a5:5b:c3:91:1e:7b:21:36:57:f7:23:
34:3b:5d:7b:a3:51:67:c0:56:d3:7f:61:08:d0:b1:41:0c:fb:
46:9c:4e:6a:24:0e:fb:d9:37:2a:50:e7:ed:a2:95:36:ef:0c:
03:59:76:be:5b:28:48:c5:f6:ea:50:f3:7c:e9:4b:47:79:8a:
73:e0:3e:ed:2b:16:6e:af:c2:bb:4c:6d:1d:25:b3:43:6b:94:
ab:22:e0:be
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAr5aMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYxOTAzMjcxM1oXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0
RUU4MUY1RTI2MUFFNjcxQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCs3LJSIuNmMQcBJDUch5XHjVybOlt0D1YqIhaqFOURsjyNt+vNjTODdKIQTyBi
AYdOCo+e2lDIWa9a96NDx47KQgBi3DBHFFgXIZZhmF0a8xYpMuBnxU1rxRZvOKsw
JkixOT8+INfYNtsjPcUhtJC2v8Mw+8NatbOU3UzhLWuWmlQyG43+X6sGNt7iUKas
0ZBuHqpEwa1Lu/fKRhHCDgMJdrH5FzlAcu9mXYNbLmq8voVxLAI5Dw3WaQKdBdzW
6+5rLAD5veCvci7Md2R6KU+iVcqaXFbeCReY3GuMjmVJMZwntLomAeGH0qt791CR
8CGTRKbCaN93su/C6WucgEgHAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUtO2w1sy1
8AyTBDdO6B9eJhrmcckwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE2QUM2L0ExQjZDQkVBNzk3RDExRUU5OTQ5QjA3M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5
MThBeVRCRGRPNkI5ZUpocm1jY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhFhMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ93wMA0GCSqG
SIb3DQEBCwUAA4IBAQA5U8H4RYWf5wUMV6/vgbwIxdSQPC9StvUoZcYyrtJkskSr
rLTgiY4Z6BxWe5XCV8EE4wSpxEQgM404+tPsOEEZH1hhEUL9vCm1geId7fhit5ry
F7tMmYo+U4YcAkSLtu07vQc1hNvk9aUnOhDpHvJLASJmWjOjLgLfOJ691TqEmO35
J9h5qseOY/ywuahOY3f1xS3A1EKUtJq4X4nnO+qFIuAhDhjNwXWbpVvDkR57ITZX
9yM0O117o1FnwFbTf2EI0LFBDPtGnE5qJA772TcqUOftopU27wwDWXa+WyhIxfbq
UPN86UtHeYpz4D7tKxZur8K7TG0dJbNDa5SrIuC+
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:30 2026 by rpki-client