Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
File: zmNwmX29E9IOXsYWW1qe46KCprA.cer (raw, json)
Hash identifier: 5DoFA5+LAJOeDQlA+sMyF+a4XUyKpZU9GO4yj/bAjDk=
Subject key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E050
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 Oct 2026 13:10:52 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 103.101.232.0/24
IP: 103.165.176.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 02:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188496 (0x2e050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 26 13:10:52 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:53:a9:74:4b:ef:98:a0:02:5d:20:d3:53:
8f:3d:e7:62:82:0b:96:76:17:8a:69:d1:c0:74:ee:
e1:1c:03:08:fa:54:da:0b:96:8c:e5:3f:bf:04:ff:
51:fd:da:97:53:be:1f:bf:fe:75:1e:fb:13:45:74:
67:9a:17:36:9f:ce:7e:1f:99:20:ee:e8:44:3c:4a:
7d:3e:8f:a4:2b:c7:8b:95:9f:c8:15:51:76:9a:d4:
02:e9:b5:98:82:c3:69:fa:bf:15:ab:69:9d:8a:0e:
77:53:4f:c3:c6:7d:50:6b:77:8f:d1:72:64:dc:4f:
3c:fb:6e:3a:ea:50:b4:7f:85:3a:1f:ea:5c:4f:24:
67:72:11:e7:1d:9b:4f:3b:83:51:87:f6:6c:9f:bd:
ae:fa:76:fa:45:84:9e:c8:23:e4:8d:e4:00:53:1f:
a4:b7:28:9c:55:bd:48:82:df:2c:b8:48:1c:dc:b2:
f9:d5:18:ca:34:61:b5:15:28:7e:69:34:54:35:a9:
51:7e:8a:ba:e1:bb:bb:bc:77:dc:16:1a:82:93:0c:
10:16:2f:2e:f2:43:c7:1c:87:f6:ee:bb:1d:4b:e3:
27:59:3d:d3:5e:42:6a:35:22:bf:49:8b:86:7b:c5:
e2:ec:a3:c5:9a:59:40:52:cc:5f:ef:51:b1:ff:4c:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.232.0/24
103.165.176.0/24
Signature Algorithm: sha256WithRSAEncryption
be:1d:c3:89:f7:c7:c2:56:e2:e8:06:1b:1b:0c:33:d7:07:97:
14:4d:93:ef:e2:02:f9:a4:da:e9:ad:88:a3:1e:31:44:04:ee:
a2:08:37:0a:03:94:56:77:bb:36:58:e6:8d:2b:c9:c4:95:28:
94:7f:ce:77:11:28:5a:77:30:9c:c4:88:8b:fe:eb:39:bd:b2:
c5:3c:a7:82:10:82:11:75:11:0e:55:2a:86:dd:5d:f9:61:e7:
c8:b8:d2:78:b6:aa:e7:97:08:2d:60:fb:0e:cc:40:e9:20:ff:
6d:6b:f9:bd:e3:3b:1a:65:4c:00:1a:65:00:75:f7:0e:55:e2:
0a:a8:7a:bb:63:ea:05:85:77:d3:c8:45:00:65:b1:42:0f:67:
07:8b:df:64:e4:f6:62:4f:32:e2:8b:71:3c:bd:49:49:d1:85:
e2:ed:ee:72:1e:ea:6f:31:27:c9:63:9b:dd:bd:a1:39:46:ba:
53:8e:85:6b:41:bb:6d:aa:fa:70:cd:43:04:b7:b8:a1:0a:3e:
13:c9:7a:b9:64:8a:92:54:29:5a:88:76:4c:96:12:20:99:ad:
fb:d5:ec:18:7a:6f:cf:cc:c4:aa:17:b9:d9:3b:36:f0:ab:69:
0e:48:84:3c:8e:94:e7:41:72:2d:9d:91:37:e5:52:ae:ea:cc:
31:b8:b2:f9
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDAuBQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAyNjEzMTA1MloXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYx
NjVCNUE5RUUzQTI4MkE2QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5sVOpdEvvmKACXSDTU48952KCC5Z2F4pp0cB07uEcAwj6VNoLlozlP78E/1H9
2pdTvh+//nUe+xNFdGeaFzafzn4fmSDu6EQ8Sn0+j6Qrx4uVn8gVUXaa1ALptZiC
w2n6vxWraZ2KDndTT8PGfVBrd4/RcmTcTzz7bjrqULR/hTof6lxPJGdyEecdm087
g1GH9myfva76dvpFhJ7II+SN5ABTH6S3KJxVvUiC3yy4SBzcsvnVGMo0YbUVKH5p
NFQ1qVF+irrhu7u8d9wWGoKTDBAWLy7yQ8cch/buux1L4ydZPdNeQmo1Ir9Ji4Z7
xeLso8WaWUBSzF/vUbH/TATvAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUzmNwmX29
E9IOXsYWW1qe46KCprAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdBQ0E4L0Y5NzE0QUU2QUFGQTExRUVBMjIxRTcyRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgy
OUU5SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBABnZegDBABnpbAwDQYJKoZIhvcNAQELBQADggEBAL4dw4n3x8JW
4ugGGxsMM9cHlxRNk+/iAvmk2umtiKMeMUQE7qIINwoDlFZ3uzZY5o0rycSVKJR/
zncRKFp3MJzEiIv+6zm9ssU8p4IQghF1EQ5VKobdXflh58i40ni2queXCC1g+w7M
QOkg/21r+b3jOxplTAAaZQB19w5V4gqoertj6gWFd9PIRQBlsUIPZweL32Tk9mJP
MuKLcTy9SUnRheLt7nIe6m8xJ8ljm929oTlGulOOhWtBu22q+nDNQwS3uKEKPhPJ
erlkipJUKVqIdkyWEiCZrfvV7Bh6b8/MxKoXudk7NvCraQ5IhDyOlOdBci2dkTfl
Uq7qzDG4svk=
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:47 2026 by rpki-client