Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer (raw, json)
Hash identifier: Bbt2Gg9W0bHWwehqtU89eycsdLhjNHWzRKLAkYTLf/c=
Subject key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B5EC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 May 2026 14:19:28 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 38303
IP: 103.114.174.0/23
IP: 103.219.114.0/23
IP: 2001:df2:7200::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177644 (0x2b5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 20 14:19:28 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:f0:df:36:c0:82:5b:c4:24:5e:15:52:f0:
ba:53:b9:32:c5:0a:75:be:e4:40:86:4e:8f:fd:9b:
67:00:9f:fd:dc:3b:8c:3d:d5:c8:17:e4:a6:bb:7c:
dd:55:0d:33:e6:e6:27:1c:6d:e2:7a:d3:e3:a9:95:
0a:ee:a3:76:c1:0e:d2:c4:01:bf:51:d7:79:c3:81:
68:a1:d1:e9:b3:c8:79:3d:53:0a:d2:cf:2b:b4:5e:
4b:71:51:4b:d7:e9:38:6c:3e:b2:1a:c5:ef:20:41:
34:09:32:c4:86:ed:20:55:4f:60:24:fc:b2:c8:5c:
c7:d6:68:f4:3c:09:40:04:54:98:e4:aa:e3:e1:92:
56:f5:55:40:d3:04:b8:13:13:3a:ac:a2:5f:ec:12:
6c:d6:8f:d0:57:96:2a:44:30:cc:41:7c:4e:b1:fe:
5c:7c:54:7c:d5:0f:03:e1:51:87:97:08:2b:ee:80:
ec:7c:0b:bc:0e:d3:67:64:87:80:dd:e7:63:18:e6:
4d:a6:0c:88:b3:8b:17:1d:9a:e4:28:08:77:18:c6:
7f:f2:91:df:bd:b5:2a:ee:40:af:4e:98:1f:c1:8f:
c6:d1:a2:de:a3:2d:8e:f2:02:56:b3:9b:27:7a:aa:
3d:6c:6e:12:73:0a:85:9c:e3:42:c8:a3:ab:b9:00:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38303
sbgp-ipAddrBlock: critical
IPv4:
103.114.174.0/23
103.219.114.0/23
IPv6:
2001:df2:7200::/48
Signature Algorithm: sha256WithRSAEncryption
2b:05:a2:5f:5a:aa:46:5b:34:ea:73:2d:4b:25:cb:33:34:cb:
00:a3:f6:2c:86:d5:b1:ed:6f:8d:43:7e:29:f9:32:bc:9e:84:
41:16:96:06:e6:0a:ac:63:40:f9:95:20:89:de:6b:9c:63:3c:
32:02:d8:5d:e0:f1:19:f9:4f:37:a8:f5:83:42:50:28:2a:9c:
d0:34:b2:f1:de:4a:b7:3d:67:05:1d:ae:0e:b1:2f:a7:db:8f:
13:32:10:a1:81:8f:bb:fd:c9:ec:f4:57:a5:35:75:3c:f9:ed:
f6:97:07:3f:0b:b4:93:fd:79:a3:fa:8d:55:83:5c:e2:a7:88:
9b:b8:35:63:ec:79:56:9d:7a:58:54:99:43:18:d1:f6:ed:84:
9b:0f:86:da:24:50:53:e3:1d:db:67:56:ce:74:e0:39:85:bf:
d9:f3:6e:66:5f:89:65:06:71:ca:b8:55:99:96:54:53:63:74:
6e:80:9f:db:37:8f:04:4a:6c:eb:61:89:9e:9c:d2:b1:9b:fa:
34:07:9a:dc:ae:b0:4a:96:6e:ab:e2:cf:c4:c5:00:1b:7b:78:
fe:11:0d:c7:9d:29:cb:f6:2a:65:fa:5f:6d:ef:6e:cd:04:bb:
48:b9:ee:ae:61:9c:ab:e5:12:66:1c:2b:74:a5:79:71:40:55:
0c:3e:49:0f
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDArXsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUyMDE0MTkyOFoXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0
MzVBMkI4NTQzQkNFNDc2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGzvDfNsCCW8QkXhVS8LpTuTLFCnW+5ECGTo/9m2cAn/3cO4w91cgX5Ka7fN1V
DTPm5iccbeJ60+OplQruo3bBDtLEAb9R13nDgWih0emzyHk9UwrSzyu0XktxUUvX
6ThsPrIaxe8gQTQJMsSG7SBVT2Ak/LLIXMfWaPQ8CUAEVJjkquPhklb1VUDTBLgT
Ezqsol/sEmzWj9BXlipEMMxBfE6x/lx8VHzVDwPhUYeXCCvugOx8C7wO02dkh4Dd
52MY5k2mDIizixcdmuQoCHcYxn/ykd+9tSruQK9OmB/Bj8bRot6jLY7yAlazmyd6
qj1sbhJzCoWc40LIo6u5AOErAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUx8+UPjp2
TzfAA81DWiuFQ7zkdgkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM4NUU5LzA4MjUzOEVDRjk2NTExRThCQzA1MjQxMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpw
MlR6ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJWfMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBZ3KuAwQBZ9ty
MA8EAgACMAkDBwAgAQ3ycgAwDQYJKoZIhvcNAQELBQADggEBACsFol9aqkZbNOpz
LUslyzM0ywCj9iyG1bHtb41Dfin5MryehEEWlgbmCqxjQPmVIInea5xjPDIC2F3g
8Rn5Tzeo9YNCUCgqnNA0svHeSrc9ZwUdrg6xL6fbjxMyEKGBj7v9yez0V6U1dTz5
7faXBz8LtJP9eaP6jVWDXOKniJu4NWPseVadelhUmUMY0fbthJsPhtokUFPjHdtn
Vs504DmFv9nzbmZfiWUGccq4VZmWVFNjdG6An9s3jwRKbOthiZ6c0rGb+jQHmtyu
sEqWbqviz8TFABt7eP4RDcedKcv2KmX6X23vbs0Eu0i57q5hnKvlEmYcK3SleXFA
VQw+SQ8=
-----END CERTIFICATE-----
Generated at Thu May 21 08:42:13 2026 by rpki-client