Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
File: xl_8-yz82bzWja6waX0xbPNbI_A.cer (raw, json)
Hash identifier: dE9lau4abwG4t8t61KYEqRWkezhxpsCtK/uIirSCGz8=
Subject key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CD01
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Aug 2026 12:44:47 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 150137
IP: 103.90.12.0/23
IP: 103.191.181.0/24
IP: 2001:df1:940::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183553 (0x2cd01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 13 12:44:47 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:c1:8a:f2:07:ca:07:79:ac:98:d5:5b:6e:
11:7b:12:47:88:ba:e2:55:0d:7a:47:05:ed:c6:c8:
86:61:27:10:91:4b:b1:b1:e8:37:15:d6:5d:58:9b:
1a:87:13:c5:07:a6:0a:7d:f7:45:5b:d6:dc:c8:77:
b3:ad:3b:50:f3:4d:98:fb:b1:78:72:5a:47:8b:77:
6e:af:26:2c:2a:d2:11:7b:c7:67:67:ae:74:cc:b9:
ab:a8:45:35:3a:7d:0e:46:93:d9:06:72:fa:4d:42:
9c:2c:6c:09:e9:84:3c:54:00:86:57:0b:00:3f:92:
fe:f3:35:ae:30:3e:59:8f:20:99:18:8f:00:f3:bf:
80:19:e6:25:42:f7:4d:4c:64:9c:8d:6e:81:12:fb:
b0:6f:3a:f2:e8:47:87:69:a6:68:bc:67:ad:f7:70:
89:6c:d7:c1:e2:d8:77:1f:b3:02:f8:27:03:3e:b2:
18:01:15:45:19:97:77:fa:d5:72:86:fb:98:2e:fc:
8a:bc:67:51:97:4a:bb:89:7c:1e:93:40:c0:5b:b0:
07:2d:e3:a1:61:cc:5b:4f:9b:d4:fd:5b:7c:3d:5a:
77:1b:a4:6e:16:82:4e:10:4a:3e:ae:52:0b:27:04:
f2:47:65:9a:9e:a3:2f:20:c1:03:9e:fd:99:60:29:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150137
sbgp-ipAddrBlock: critical
IPv4:
103.90.12.0/23
103.191.181.0/24
IPv6:
2001:df1:940::/48
Signature Algorithm: sha256WithRSAEncryption
45:68:5a:00:5a:43:eb:fa:89:b0:b4:36:85:d7:1c:75:1d:1a:
be:c2:0f:e2:df:ee:91:ac:87:91:cb:f3:dd:b3:7b:07:e5:e2:
97:33:fb:ca:59:5c:cb:d2:37:80:2f:c2:80:b2:fd:61:cb:8c:
b2:8c:db:66:62:58:78:6b:24:40:2b:db:15:fd:38:8c:57:e9:
79:b3:c0:f2:1b:e6:17:81:75:f3:8b:ef:1f:ec:6a:7e:94:e6:
8c:f8:7e:3e:d1:49:fd:e7:2c:d7:89:de:4a:11:fc:34:03:59:
9f:77:e9:ff:f7:12:3a:d0:d2:7e:93:9d:13:8a:43:aa:54:8a:
b1:a6:26:75:df:50:01:f9:88:14:9d:42:f3:27:8a:8c:8f:3e:
3a:8d:f7:88:9a:77:02:3f:99:7d:a4:ea:66:a8:75:da:e4:91:
d8:38:45:2c:b6:97:73:f4:4f:c5:c9:4f:51:4d:e2:69:82:40:
ac:bc:28:a1:73:d7:48:db:25:e4:20:94:2b:1e:39:0c:c3:94:
7c:f0:a8:8c:66:e0:ca:71:cd:1a:34:73:d1:0a:7d:30:42:a1:
00:f0:7b:ff:26:92:24:88:12:bc:78:7c:07:f2:c9:60:39:f4:
e7:6e:03:cb:85:e5:88:5b:5a:6f:32:d8:7c:9e:5a:8f:6b:94:
b2:93:84:ba
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAs0BMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgxMzEyNDQ0N1oXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDcyRTIxMTAvBgNVBAUTKEM2NUZGQ0ZCMkNGQ0Q5QkNENjhEQUVC
MDY5N0QzMTZDRjM1QjIzRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+qsGK8gfKB3msmNVbbhF7EkeIuuJVDXpHBe3GyIZhJxCRS7Gx6DcV1l1YmxqH
E8UHpgp990Vb1tzId7OtO1DzTZj7sXhyWkeLd26vJiwq0hF7x2dnrnTMuauoRTU6
fQ5Gk9kGcvpNQpwsbAnphDxUAIZXCwA/kv7zNa4wPlmPIJkYjwDzv4AZ5iVC901M
ZJyNboES+7BvOvLoR4dppmi8Z633cIls18Hi2HcfswL4JwM+shgBFUUZl3f61XKG
+5gu/Iq8Z1GXSruJfB6TQMBbsAct46FhzFtPm9T9W3w9WncbpG4Wgk4QSj6uUgsn
BPJHZZqeoy8gwQOe/ZlgKX69AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUxl/8+yz8
2bzWja6waX0xbPNbI/AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ3MkUyLzJGMTk1MzVDMENCMjExRUQ5NUNFQzk1Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NzJFMi8yRjE5NTM1QzBDQjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6
ODJieldqYTZ3YVgweGJQTmJJX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkp5MDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBZ1oMAwQAZ7+1
MA8EAgACMAkDBwAgAQ3xCUAwDQYJKoZIhvcNAQELBQADggEBAEVoWgBaQ+v6ibC0
NoXXHHUdGr7CD+Lf7pGsh5HL892zewfl4pcz+8pZXMvSN4AvwoCy/WHLjLKM22Zi
WHhrJEAr2xX9OIxX6XmzwPIb5heBdfOL7x/san6U5oz4fj7RSf3nLNeJ3koR/DQD
WZ936f/3EjrQ0n6TnROKQ6pUirGmJnXfUAH5iBSdQvMnioyPPjqN94iadwI/mX2k
6maoddrkkdg4RSy2l3P0T8XJT1FN4mmCQKy8KKFz10jbJeQglCseOQzDlHzwqIxm
4MpxzRo0c9EKfTBCoQDwe/8mkiSIErx4fAfyyWA59OduA8uF5YhbWm8y2HyeWo9r
lLKThLo=
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:49:38 2026 by rpki-client