Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
File: F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer (raw, json)
Hash identifier: HkGTXkc9rbwpR/ylF2ZIvKVLbtyGyxdXsi7G0ba8FYo=
Subject key identifier: 17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CA7B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Aug 2026 03:16:35 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 154791
IP: 2001:df7:4dc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 23:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182907 (0x2ca7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 3 03:16:35 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91C3809, serialNumber=17506B92B863377320BDB2E306F48C8500918FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:d8:5d:51:1c:ff:44:c7:47:11:d0:19:14:
8c:b2:fc:ae:df:8d:78:db:1f:22:76:f5:4b:93:bc:
a0:6f:d5:b9:1a:8d:98:20:f4:d4:14:30:25:fa:11:
c0:e8:2e:3c:a4:e6:85:9e:9e:fa:42:60:5e:e3:9a:
73:9b:2a:54:42:51:7b:58:17:58:52:83:05:34:c9:
7a:c7:90:28:c1:99:df:8b:2e:80:32:56:b3:74:fc:
8e:04:58:97:03:a5:81:25:96:ed:9c:92:7f:9f:03:
fb:92:a3:66:12:b6:0b:85:8e:1b:68:30:b1:cc:d1:
f9:b2:d0:aa:3d:6f:c9:95:4c:82:99:88:71:63:c4:
33:64:25:c0:6a:9d:3a:77:58:d7:f5:92:43:c1:05:
c6:5c:03:96:82:80:36:c9:67:f4:a8:48:5d:ac:5c:
60:16:55:a8:e8:53:7b:54:43:f2:e1:b4:eb:e8:b9:
e7:a2:6e:69:68:9c:77:d3:e8:85:9b:e8:11:d4:ff:
6b:f9:30:5b:b7:7d:6d:db:e1:d5:d3:5c:76:64:7a:
d4:d7:bf:18:45:18:23:9e:2c:f1:d7:39:3e:df:64:
b6:08:a7:fb:c6:ed:de:83:61:14:8c:31:72:9c:55:
bf:f1:c5:e9:0c:a7:a3:6a:23:f4:b2:b2:19:28:bb:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154791
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:4dc0::/48
Signature Algorithm: sha256WithRSAEncryption
bd:e9:21:9e:1c:ed:99:ee:f7:6f:08:5c:32:09:28:ea:37:1f:
2d:ab:7b:c5:68:9a:cf:87:51:d2:2c:73:80:0f:25:c4:d2:57:
2b:96:ad:dd:9d:9d:00:cf:98:3e:15:b2:69:ba:69:36:34:07:
c8:65:04:e3:69:35:e9:a1:b1:32:d2:b2:39:ad:94:03:f8:de:
95:ca:b1:2a:41:b5:ac:a8:ea:a2:bb:e9:d1:9e:5d:56:2c:ad:
de:11:44:1b:e0:21:a8:c6:4f:0a:14:c9:b3:d6:4e:b6:48:ab:
a7:e6:8d:43:1c:a5:f4:aa:f0:e7:87:9b:65:e0:1b:d9:2a:b5:
94:d2:76:8a:f3:ff:35:8e:68:4b:d3:c8:33:05:b2:6e:b9:dc:
75:6f:88:10:be:c2:dd:a0:9a:fb:b9:94:83:f6:98:34:b6:3b:
af:24:3c:6b:08:6f:31:27:0f:93:d5:45:68:68:01:76:0b:34:
c9:bc:d2:60:01:ee:b5:ee:52:b4:8a:f1:ab:60:f1:27:dd:2c:
35:e7:be:b1:52:60:b4:c1:3a:b3:8f:0c:41:53:f1:ed:68:08:
ce:13:f8:3e:d4:be:96:56:27:b1:5d:5b:a8:fd:67:15:9b:9f:
72:c9:07:52:b2:3c:45:7c:0e:a3:e7:2a:ff:46:a4:6c:9a:13:
37:f5:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:20 2026 by rpki-client