Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
File: w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer (raw, json)
Hash identifier: Y/j0Wx7K1lO1lr9OUT1P5Bihlt182IevhMs2E8ZKFSE=
Subject key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C870
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jul 2026 13:39:19 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 131448
IP: 103.69.136.0/22
IP: 116.66.180.0/22
IP: 2405:ef80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182384 (0x2c870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 13:39:19 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:23:bf:a6:99:78:00:2c:9a:63:80:a9:04:
9b:dd:95:6c:80:25:9a:cc:89:da:83:f0:d5:45:d2:
36:c2:96:a4:50:d3:05:6f:17:3d:85:ee:91:a5:48:
80:91:2b:99:6c:52:97:2e:5b:62:85:89:29:0f:df:
66:fc:15:7f:26:b0:07:b6:ad:d7:58:e3:96:5f:c4:
64:89:9d:c1:12:e1:b7:11:9c:64:7f:63:b9:dc:b2:
f9:f0:3c:80:ea:b3:3d:b9:9f:07:24:7f:e8:53:dc:
51:0c:07:68:23:2b:b1:4e:2b:53:76:2c:b4:e3:03:
a6:2a:8d:35:11:ef:08:a4:50:e1:e3:eb:0d:8a:5f:
73:83:5c:cf:ec:de:45:f9:a4:b1:8d:8f:79:87:a2:
31:12:ed:f3:7e:8e:fc:8c:42:26:1a:24:67:73:0a:
7e:63:c6:3d:fb:d8:2f:40:5a:1e:1d:cd:95:76:8a:
7f:6a:ee:58:be:84:33:9a:ad:64:ed:e4:a4:ec:8a:
c1:84:e7:d5:fa:53:39:a9:01:69:ce:52:8b:ac:9b:
3f:60:75:e4:03:01:59:75:f5:ce:84:22:40:95:1b:
26:99:b1:ef:8b:a8:a8:fa:26:0a:b7:13:cf:cd:b0:
e3:6c:f4:7a:4e:c2:9f:7e:a2:4d:ff:97:e1:1a:4d:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131448
sbgp-ipAddrBlock: critical
IPv4:
103.69.136.0/22
116.66.180.0/22
IPv6:
2405:ef80::/32
Signature Algorithm: sha256WithRSAEncryption
86:0c:5d:25:e4:ec:7b:5a:87:d9:ae:41:7e:53:d9:6c:e5:92:
6f:b7:83:a5:85:e9:f5:a2:51:93:09:6e:d4:b0:c1:93:06:9e:
f7:5b:24:4a:0a:82:5f:7e:8f:ce:60:03:ac:16:7e:d3:85:03:
56:80:a7:5c:75:d7:7e:50:5e:88:65:7c:6b:9d:0f:e6:d6:54:
0e:12:58:4d:40:e5:4c:cd:f7:85:ba:0b:1b:80:04:d4:91:25:
8c:e3:0c:2c:77:f6:90:88:4c:19:42:b6:c9:24:14:42:78:e3:
10:db:57:b7:58:34:cc:d7:be:bb:32:b4:53:f2:b5:24:5c:9c:
8e:18:01:17:21:8e:a4:92:c7:4c:a7:ee:b1:13:01:ec:1f:39:
2e:c7:54:d9:23:5f:84:59:70:7d:b6:b1:b7:ad:86:3f:c5:32:
61:ff:da:34:dd:b6:2c:d8:28:b5:a1:0e:05:38:46:61:3c:16:
91:c3:34:27:a5:3f:32:4e:8c:3b:ea:66:0b:e8:ea:59:90:1d:
c9:47:45:1f:d7:e4:a3:da:9a:cd:cc:15:50:c5:dd:67:7b:00:
89:f4:44:d0:4b:b2:2b:73:61:10:87:25:2b:a7:87:66:b2:69:
73:1a:0e:21:c0:d4:5c:77:dc:d8:0e:1d:c0:a0:d2:84:9b:19:
40:10:aa:ce
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAshwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcyOTEzMzkxOVoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjgxOTcxMTAvBgNVBAUTKEMzQjY0OEVCMkUyMzg3MkE5MThEMDU3
NzEzMEYzNTg1M0Y2RjYzOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyGSO/ppl4ACyaY4CpBJvdlWyAJZrMidqD8NVF0jbClqRQ0wVvFz2F7pGlSICR
K5lsUpcuW2KFiSkP32b8FX8msAe2rddY45ZfxGSJncES4bcRnGR/Y7ncsvnwPIDq
sz25nwckf+hT3FEMB2gjK7FOK1N2LLTjA6YqjTUR7wikUOHj6w2KX3ODXM/s3kX5
pLGNj3mHojES7fN+jvyMQiYaJGdzCn5jxj372C9AWh4dzZV2in9q7li+hDOarWTt
5KTsisGE59X6UzmpAWnOUousmz9gdeQDAVl19c6EIkCVGyaZse+LqKj6Jgq3E8/N
sONs9HpOwp9+ok3/l+EaTfEVAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUw7ZI6y4j
hyqRjQV3Ew81hT9vY54wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY4MTk3L0E0RERBNTI0NDREMjExRUJCMTM3OUMzRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2ODE5Ny9BNEREQTUyNDQ0RDIxMUVCQjEzNzlDM0VDNEY5QUUwMi93N1pJNnk0
amh5cVJqUVYzRXc4MWhUOXZZNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgF4MDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ0WIAwQCdEK0
MA0EAgACMAcDBQAkBe+AMA0GCSqGSIb3DQEBCwUAA4IBAQCGDF0l5Ox7WofZrkF+
U9ls5ZJvt4Olhen1olGTCW7UsMGTBp73WyRKCoJffo/OYAOsFn7ThQNWgKdcddd+
UF6IZXxrnQ/m1lQOElhNQOVMzfeFugsbgATUkSWM4wwsd/aQiEwZQrbJJBRCeOMQ
21e3WDTM1767MrRT8rUkXJyOGAEXIY6kksdMp+6xEwHsHzkux1TZI1+EWXB9trG3
rYY/xTJh/9o03bYs2Ci1oQ4FOEZhPBaRwzQnpT8yTow76mYL6OpZkB3JR0Uf1+Sj
2prNzBVQxd1newCJ9ETQS7Irc2EQhyUrp4dmsmlzGg4hwNRcd9zYDh3AoNKEmxlA
EKrO
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:49:35 2026 by rpki-client