Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
File: FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer (raw, json)
Hash identifier: KVm///UnnmrMeR5JZasWRAkE+aylSEWU0bukyeudzyA=
Subject key identifier: 16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026DD9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Oct 2025 05:16:54 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 134585
IP: 2001:df6:3340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159193 (0x26dd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 20 05:16:54 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91A29D7, serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:42:1b:6b:db:1e:51:34:d3:4f:d6:74:cd:
8b:17:c4:29:b0:8a:e8:f8:54:f7:e1:55:56:d5:9a:
02:64:30:6c:61:b8:83:31:47:1e:5a:5d:eb:cd:be:
46:98:7c:77:ec:55:a8:77:79:0c:ab:dd:e0:e2:83:
8c:bd:fb:ab:ee:3e:d3:e7:1b:f6:9d:14:f0:3e:58:
07:98:6f:15:28:30:3e:c1:d4:33:b4:f2:ae:47:ae:
bd:bc:94:ec:85:ca:13:a7:80:53:f8:74:25:8c:9d:
0b:cf:b3:45:d2:6e:a4:8c:9d:f5:d3:52:81:8d:25:
dd:13:f9:d9:5c:84:17:2e:e7:52:77:6b:62:d3:a4:
d1:1e:d9:9b:19:31:e4:25:2b:7a:c8:ee:97:bf:03:
9c:e0:ef:79:87:57:99:f0:13:fb:94:5f:bd:d7:65:
2a:70:51:21:6f:db:b1:bc:a9:11:7a:59:0a:fc:3b:
b5:48:88:39:f5:de:77:49:5a:80:b1:7b:56:c9:fa:
a6:dd:de:0a:6e:78:97:3f:5c:30:a2:29:38:0f:ff:
6f:9c:ac:b4:37:48:00:fa:7e:b2:5f:96:46:f1:53:
64:17:b6:f5:05:32:c2:91:49:20:ea:80:90:72:16:
38:69:36:9c:24:07:08:d5:f8:8b:04:c0:7d:a2:51:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134585
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:3340::/48
Signature Algorithm: sha256WithRSAEncryption
60:87:93:0a:90:7d:98:02:4a:30:4b:35:ff:21:d7:73:33:ab:
50:54:9b:45:89:2e:3c:62:83:c4:9b:fa:3d:57:2e:1f:e5:83:
53:51:9c:cc:9d:e2:f3:98:fa:79:7b:c5:90:4a:0e:33:09:bc:
70:d9:da:f0:c3:1c:86:87:6d:31:bf:e9:3a:9d:4f:b3:79:15:
68:3b:56:ee:94:b7:9b:e9:2b:6d:d3:c6:40:d0:c4:4f:82:e9:
6b:31:52:b5:10:94:b5:5e:37:3f:56:d7:10:66:1d:6c:2c:e1:
c5:cb:d8:c6:dc:7a:60:91:63:f1:d3:91:12:7c:6a:5a:dd:c8:
1a:29:ec:5c:2b:a9:56:15:40:a6:b3:2b:6a:5a:86:85:fa:a6:
5a:0f:bb:80:b3:c7:27:50:db:67:34:58:1d:3a:9b:9e:0a:96:
6b:84:69:a7:16:25:0b:59:6f:7b:37:73:75:d8:ce:a4:20:18:
63:a2:1c:39:ae:60:09:ca:9c:8d:7a:28:8f:49:6b:d4:a6:9d:
47:ca:7a:db:5b:5a:3c:f6:80:5f:01:c0:9b:d4:26:bd:5a:34:
28:69:a2:8c:65:1a:d7:1b:ce:75:b9:52:9a:4f:3c:67:b2:d7:
3a:57:c7:22:22:c6:33:36:d5:73:f6:87:f4:06:80:5d:b5:3a:
36:92:c0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:48 2025 by rpki-client