Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer
File: FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer (raw, json)
Hash identifier: 3puLTgsSnDnGAa46KtzQNq10JgOzX5ACBFZShavkepo=
Subject key identifier: 15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D02
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Jun 2026 06:49:30 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.246.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32002 (0x7d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 15 06:49:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91B539C, serialNumber=157FAE07B301ECB484CBB8083B68237192056C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:01:76:2e:e9:03:80:af:f1:dc:e9:f8:49:
40:b5:6b:1b:f7:a4:e1:00:a9:2c:22:40:5b:b9:e8:
81:79:8c:21:73:df:33:a6:2d:b4:4d:06:d9:87:f6:
d5:d6:4d:08:77:17:2b:4c:14:d2:f1:93:66:e8:7a:
2a:d7:71:61:08:01:9b:77:ab:9f:ef:91:0a:32:f0:
44:4e:a5:5f:68:da:07:f8:2c:14:a1:f0:ca:54:76:
d6:ee:6f:3c:28:a7:ab:6c:e9:ce:63:9c:8a:f9:a9:
1c:05:6e:85:5e:09:ef:a7:4f:79:2a:4a:01:c7:15:
56:eb:d4:64:3b:74:1c:53:2c:49:03:77:54:e9:3c:
10:4e:57:a4:26:eb:5f:d7:8b:f0:73:e8:1a:6e:bc:
c4:bb:2a:73:ed:32:1d:97:3c:8a:65:99:04:56:88:
67:f6:86:aa:5e:3c:8b:29:9e:4d:f1:f6:af:d1:db:
73:fb:2c:74:da:a9:53:8a:65:44:54:27:41:f6:fc:
d3:77:50:80:f2:14:be:3d:2f:a2:38:1c:a4:b2:97:
51:a4:32:7a:13:26:88:54:80:19:ab:36:d4:fd:b8:
17:97:01:3e:99:db:2e:9b:0c:50:10:2c:11:f2:d5:
1b:ae:4f:8b:1d:f8:63:00:06:97:f2:bd:1c:b1:f1:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.246.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:5f:8c:ff:8f:33:c7:de:a8:a1:d3:1c:63:57:0e:ea:34:fa:
66:12:74:b9:fa:da:24:95:fe:dc:82:52:17:52:a9:4e:c4:ff:
10:4a:1a:e6:36:b1:d5:2f:32:34:23:bc:b6:39:d7:d1:bd:44:
ca:94:8e:85:86:ee:c7:4e:c0:f9:1c:3e:2f:7a:b1:85:42:e9:
2a:b6:d2:1b:e8:c6:b1:d0:d5:92:ef:4a:b5:fd:0f:de:74:49:
ed:df:6a:27:66:bf:24:8e:6a:91:fd:3d:a6:21:34:65:d2:37:
3e:8a:32:d0:96:ab:b4:0d:c2:a9:ed:f1:5a:73:7a:ee:d2:f8:
8a:7f:6e:a2:17:68:d4:89:07:14:c1:be:e3:9b:b1:7d:65:02:
33:01:3b:a4:2d:c4:42:a6:ee:1f:46:e8:19:40:69:1c:0a:a9:
84:ee:9f:30:9f:5f:75:a2:b5:db:c0:a0:1c:d5:10:71:65:ed:
39:90:cf:fb:68:5a:a1:91:c9:d8:de:26:9e:14:6c:4d:d1:06:
77:54:7e:84:c2:b6:69:d7:a4:93:04:da:fd:7d:f6:9c:e8:36:
05:60:f8:49:1a:92:c8:7c:eb:8c:cc:92:d3:66:75:34:89:0d:
b4:a5:a7:53:b1:c4:08:75:aa:fb:19:72:3d:4d:94:16:89:4e:
d7:97:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:13:48 2026 by rpki-client