Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMMrInaBES_Vu7WzaYO1aHEWc8A.cer
File: FMMrInaBES_Vu7WzaYO1aHEWc8A.cer (raw, json)
Hash identifier: U22sVHpPL+rIBy/BKbNdSMTwWHFPYepU3TSvJ1Wagf0=
Subject key identifier: 14:C3:2B:22:76:81:11:2F:D5:BB:B5:B3:69:83:B5:68:71:16:73:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B059
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Apr 2026 08:41:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 140572
IP: 2001:df6:fc40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176217 (0x2b059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 29 08:41:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911EED9, serialNumber=14C32B227681112FD5BBB5B36983B568711673C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:d2:1b:6e:87:14:1e:a1:0d:e5:4a:e3:68:
49:29:55:57:83:25:04:c6:fe:58:9c:53:9b:c7:a5:
77:33:a9:f5:f8:85:bc:6a:a9:25:61:e1:38:1c:5e:
b7:c3:99:ac:c9:ca:ad:d1:61:f9:ba:69:f3:04:0b:
91:35:41:82:1b:bc:8e:d3:21:12:fa:cd:b4:a7:b5:
a8:ba:a6:03:0f:97:8c:e9:12:58:45:c9:23:26:93:
f0:c5:05:dc:07:8c:c2:6c:6f:60:af:f6:ce:c8:27:
10:12:4c:0d:dd:64:01:7c:7d:ca:60:79:02:f4:56:
d1:f3:19:f5:3e:f8:87:f4:0c:92:7e:33:1b:3a:c5:
2c:95:f4:3b:c1:3c:08:dc:d5:4c:93:a1:03:c5:06:
2b:b1:b0:0f:e5:b5:88:83:5b:04:9e:fa:17:2b:03:
f5:3d:7b:97:0a:83:53:62:0c:63:86:77:94:07:30:
fb:32:6e:1f:cb:55:9f:11:38:0d:63:21:a5:ba:22:
aa:41:59:8b:56:42:d2:25:51:c7:42:d5:04:44:2e:
3b:20:69:4a:ff:e2:8d:9e:7b:7c:b6:dd:9e:d5:ad:
21:77:11:f7:76:64:0a:eb:ad:9e:92:c9:28:ca:e3:
8b:c9:cb:0b:d5:cc:12:19:7d:ab:2b:b3:47:b2:2e:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C3:2B:22:76:81:11:2F:D5:BB:B5:B3:69:83:B5:68:71:16:73:C0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140572
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:fc40::/48
Signature Algorithm: sha256WithRSAEncryption
36:2a:c5:fd:20:a4:38:9e:b1:b8:43:da:6e:50:4f:89:eb:a3:
ad:5f:a0:27:eb:fb:b5:20:fd:41:c1:1d:d7:b2:90:13:20:96:
c9:b6:10:83:dd:9b:b5:27:52:d8:f2:26:ba:1b:7f:07:dd:fd:
dc:74:bd:a0:7e:7c:86:82:fd:ee:a0:1a:68:12:5f:08:b5:a7:
ab:14:f5:9d:ee:90:ba:ae:44:49:bb:31:a3:28:23:1b:f3:7b:
fd:7c:de:9e:0a:61:5a:d3:b7:fe:78:ab:6c:0c:76:a8:24:3a:
ed:41:76:46:16:a8:d1:bd:3a:f1:c2:54:99:67:8e:e7:8d:52:
a2:68:97:ac:c5:a2:d9:58:bb:6b:3d:d3:68:bb:aa:45:7d:44:
2a:24:9e:32:55:ce:24:76:da:f3:e2:e4:a2:05:cf:43:4c:53:
8b:4a:f2:d2:bf:ca:b8:90:ad:f1:b4:dd:2e:fb:c1:d8:e0:e4:
66:19:75:4a:a4:a8:a0:5d:a1:ef:9e:19:95:dc:13:d6:59:57:
6c:22:af:d9:05:50:e2:f0:bd:d0:17:0a:5f:a6:96:1d:1c:7b:
f6:a5:71:1f:2a:18:3d:58:f3:6f:c1:aa:79:3f:34:f6:8f:66:
f0:9a:b7:ec:b5:f5:b2:71:87:c9:a5:36:a1:8e:79:1f:c8:4f:
dc:37:cc:c2
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDArBZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyOTA4NDEyMVoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUVFRDkxMTAvBgNVBAUTKDE0QzMyQjIyNzY4MTExMkZENUJCQjVC
MzY5ODNCNTY4NzExNjczQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVHdIbbocUHqEN5UrjaEkpVVeDJQTG/licU5vHpXczqfX4hbxqqSVh4TgcXrfD
mazJyq3RYfm6afMEC5E1QYIbvI7TIRL6zbSntai6pgMPl4zpElhFySMmk/DFBdwH
jMJsb2Cv9s7IJxASTA3dZAF8fcpgeQL0VtHzGfU++If0DJJ+Mxs6xSyV9DvBPAjc
1UyToQPFBiuxsA/ltYiDWwSe+hcrA/U9e5cKg1NiDGOGd5QHMPsybh/LVZ8ROA1j
IaW6IqpBWYtWQtIlUcdC1QRELjsgaUr/4o2ee3y23Z7VrSF3Efd2ZArrrZ6SySjK
44vJywvVzBIZfasrs0eyLkdDAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUFMMrInaB
ES/Vu7WzaYO1aHEWc8AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFFRUQ5LzJFRTM3RTNDNDNBNzExRjFBNTkxMTJFMDkzODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExRUVEOS8yRUUzN0UzQzQzQTcxMUYxQTU5MTEyRTA5MzgzMzc3My9GTU1ySW5h
QkVTX1Z1N1d6YVlPMWFIRVdjOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiUcMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9vxAMA0G
CSqGSIb3DQEBCwUAA4IBAQA2KsX9IKQ4nrG4Q9puUE+J66OtX6An6/u1IP1BwR3X
spATIJbJthCD3Zu1J1LY8ia6G38H3f3cdL2gfnyGgv3uoBpoEl8ItaerFPWd7pC6
rkRJuzGjKCMb83v9fN6eCmFa07f+eKtsDHaoJDrtQXZGFqjRvTrxwlSZZ47njVKi
aJesxaLZWLtrPdNou6pFfUQqJJ4yVc4kdtrz4uSiBc9DTFOLSvLSv8q4kK3xtN0u
+8HY4ORmGXVKpKigXaHvnhmV3BPWWVdsIq/ZBVDi8L3QFwpfppYdHHv2pXEfKhg9
WPNvwap5PzT2j2bwmrfstfWycYfJpTahjnkfyE/cN8zC
-----END CERTIFICATE-----
Generated at Thu May 21 08:40:48 2026 by rpki-client