Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
File: FFiKS-nrikuZgtGyXesMYHOK77s.cer (raw, json)
Hash identifier: Efx14bF9osr6Tvk3a2+9paX8KETLQwY7LJFplBoGcJc=
Subject key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DAE2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 14:46:03 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 147008
IP: 103.172.191.0/24
IP: 2001:df0:f8c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187106 (0x2dae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 14:46:03 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:14:b3:fd:38:40:7f:98:5e:b3:38:e2:b5:
63:e0:87:8e:9e:0a:dd:b3:51:5c:99:44:cc:35:76:
ee:60:35:32:2b:05:96:d3:8d:5e:7e:90:c9:19:61:
b6:d6:b0:e4:5d:cc:43:5d:02:50:c0:93:6c:16:07:
49:c0:73:d6:a0:9e:bd:e3:fc:d4:cc:e0:79:68:c3:
e9:6c:da:12:0b:e3:53:30:2c:6e:ae:96:21:d8:50:
f7:cb:52:ba:26:6a:2e:23:09:9a:23:10:25:55:18:
d1:b2:c9:74:18:40:33:c1:fc:68:1b:2c:78:67:39:
81:09:95:dc:eb:83:88:0b:54:b4:58:30:64:be:c1:
ba:1f:75:9b:88:da:a1:69:f6:be:21:db:59:b0:72:
85:3c:0d:3f:6e:82:cf:ae:5a:a9:5c:4e:f7:20:87:
d6:7b:0e:d5:10:4c:af:d7:bb:31:79:f1:7c:bd:16:
71:51:d2:05:96:37:e3:3f:68:ce:35:ef:28:35:c3:
68:f0:48:f3:d4:e3:9c:8e:ee:14:3f:4a:b9:25:3c:
44:bb:4a:5a:3e:37:81:b2:56:25:b1:cb:79:82:40:
b0:63:85:1e:7a:b9:ed:57:60:8b:20:51:2d:24:e7:
ed:7a:5e:9d:6d:e6:48:85:bc:40:bb:97:ed:22:39:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147008
sbgp-ipAddrBlock: critical
IPv4:
103.172.191.0/24
IPv6:
2001:df0:f8c0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:5f:ec:ac:12:a4:47:15:cd:fa:dd:36:b7:94:94:d4:d6:ce:
f0:83:e2:31:bf:f8:c1:27:72:ca:6a:70:dd:3f:bc:0b:9c:8e:
08:a3:25:a9:39:36:9f:43:89:d6:b1:86:66:f5:62:8b:21:bc:
50:3d:b9:02:e0:8e:db:89:6e:df:c3:ee:9d:3d:db:a2:1b:a5:
f6:ae:c2:74:bf:21:e3:44:a1:43:4d:73:14:e0:10:3b:33:65:
fd:fb:bb:d4:5c:c1:b7:33:cc:92:66:d9:f9:5c:8d:70:d4:58:
19:22:e6:33:3e:70:3d:63:62:65:46:db:48:06:33:26:73:6e:
3e:b5:6f:a6:ef:61:71:13:d5:7f:11:68:2d:21:db:a6:77:6c:
69:ea:38:c6:82:a4:82:f7:ea:09:fd:64:b8:20:3f:59:8f:2d:
5b:40:70:1f:1a:9c:39:bb:ad:c7:bd:a3:ce:21:c4:ac:80:b5:
76:99:02:08:6f:44:da:f6:9e:61:a7:df:a5:39:e7:64:70:7c:
47:f2:38:d4:0c:4d:81:14:c3:85:76:ac:7c:c2:74:37:08:07:
86:1c:66:e5:de:8e:08:a5:82:98:62:d4:7b:03:6d:a2:f9:1a:
dd:a5:ba:de:fd:af:f5:3f:4f:e7:7a:76:3c:b7:10:a6:15:59:
32:40:d1:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:53:48 2026 by rpki-client