Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
File: Fz6pPabl71KPpzMJc4hIg92lJ-4.cer (raw, json)
Hash identifier: ZyDsWexjApXd/bxiTxmsVJdD+3dSo9IQ6sJJMrRaWbM=
Subject key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D89C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 26 Sep 2026 12:44:10 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 153202
IP: 2401:bce0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186524 (0x2d89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 26 12:44:10 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6c:fb:54:bc:02:2f:a0:48:81:a0:0d:12:1d:
41:1b:c6:ce:6a:21:49:23:bd:ba:e7:7f:07:d6:88:
23:ff:ad:d0:b9:8f:42:1f:24:5f:4b:fa:54:2b:a6:
cd:44:19:6c:1d:fd:3e:4f:ad:42:37:1c:8b:00:53:
bb:71:fc:10:bf:20:7d:26:9b:1c:85:18:63:f0:d3:
13:a0:86:73:a3:c2:4c:07:e1:f9:c3:eb:f8:a2:51:
69:f1:cd:c4:d7:16:4d:de:b7:14:a2:e9:bc:bc:e5:
36:86:7c:0e:73:53:d3:24:29:8e:ff:3b:9b:79:44:
cb:21:bd:89:82:d6:00:af:9b:a5:b7:4f:80:66:fa:
2a:10:2c:dc:6f:87:fc:e1:ec:b7:3a:eb:90:2a:6e:
00:b4:39:9b:1e:7b:25:36:81:6f:4e:65:0c:a4:a7:
54:41:1e:66:c3:48:80:76:a0:61:86:79:d5:22:87:
71:78:a3:6f:18:47:9c:f8:6d:35:ad:4c:eb:ef:15:
5e:5a:5a:96:1e:b1:e6:ad:fd:48:cb:6c:06:f7:92:
32:03:0b:10:76:15:8f:4c:18:a7:9e:43:a5:dc:7c:
ad:d6:36:72:7f:62:e1:8c:ff:e2:9a:19:41:43:f0:
17:a0:28:58:8f:6e:0e:47:40:f1:8b:13:24:63:05:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153202
sbgp-ipAddrBlock: critical
IPv6:
2401:bce0::/32
Signature Algorithm: sha256WithRSAEncryption
89:65:d0:e2:c1:5c:63:e5:21:1e:23:f6:89:5c:35:be:a7:d7:
2e:25:35:c6:da:f5:78:dd:a6:26:d8:08:70:03:bc:b1:92:47:
ff:45:94:20:23:20:93:80:7b:e4:4d:93:6c:e9:8d:8b:2b:2d:
dd:b6:db:a8:f6:08:af:8b:d4:5c:4b:7d:d1:2e:13:17:94:d5:
5d:42:44:1b:6e:1f:f9:b6:44:47:4c:ee:73:98:02:24:18:7c:
c1:a2:b6:be:4e:b5:5d:cc:51:3a:de:c1:67:86:1a:84:c9:eb:
aa:f6:9c:0d:86:51:43:dc:71:9f:25:08:64:37:e9:fa:14:1b:
1b:10:da:58:b5:03:ca:a0:ae:7f:cf:c7:86:e1:ee:64:4d:e1:
d1:b3:ca:e4:78:59:97:38:c1:99:f6:10:4c:b2:f2:d2:c9:11:
cc:ef:8d:41:73:58:2b:c8:94:5c:32:04:4c:dc:59:d4:77:c5:
42:a8:64:89:12:93:c8:18:13:9b:a4:d1:67:85:24:6b:70:1c:
49:b6:17:fb:7d:7c:73:42:19:a5:9b:46:13:e5:0b:ee:4c:20:
2f:10:60:5b:2b:23:c7:66:35:ea:42:71:43:5c:75:a3:cc:1c:
11:7a:7e:eb:64:b3:2d:8c:ed:62:69:fe:22:26:1a:59:b5:34:
0f:8e:b5:61
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAticMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkyNjEyNDQxMFoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDVFMDkxMTAvBgNVBAUTKDE3M0VBOTNEQTZFNUVGNTI4RkE3MzMw
OTczODg0ODgzRERBNTI3RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxbPtUvAIvoEiBoA0SHUEbxs5qIUkjvbrnfwfWiCP/rdC5j0IfJF9L+lQrps1E
GWwd/T5PrUI3HIsAU7tx/BC/IH0mmxyFGGPw0xOghnOjwkwH4fnD6/iiUWnxzcTX
Fk3etxSi6by85TaGfA5zU9MkKY7/O5t5RMshvYmC1gCvm6W3T4Bm+ioQLNxvh/zh
7Lc665AqbgC0OZseeyU2gW9OZQykp1RBHmbDSIB2oGGGedUih3F4o28YR5z4bTWt
TOvvFV5aWpYeseat/UjLbAb3kjIDCxB2FY9MGKeeQ6XcfK3WNnJ/YuGM/+KaGUFD
8BegKFiPbg5HQPGLEyRjBSpbAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUFz6pPabl
71KPpzMJc4hIg92lJ+4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ1RTA5LzhGNjI1QzRFMDhDODExRjBBMEQzNEU1NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NUUwOS84RjYyNUM0RTA4QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9GejZwUGFi
bDcxS1Bwek1KYzRoSWc5MmxKLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlZyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAG84DANBgkq
hkiG9w0BAQsFAAOCAQEAiWXQ4sFcY+UhHiP2iVw1vqfXLiU1xtr1eN2mJtgIcAO8
sZJH/0WUICMgk4B75E2TbOmNiyst3bbbqPYIr4vUXEt90S4TF5TVXUJEG24f+bZE
R0zuc5gCJBh8waK2vk61XcxROt7BZ4YahMnrqvacDYZRQ9xxnyUIZDfp+hQbGxDa
WLUDyqCuf8/HhuHuZE3h0bPK5HhZlzjBmfYQTLLy0skRzO+NQXNYK8iUXDIETNxZ
1HfFQqhkiRKTyBgTm6TRZ4Uka3AcSbYX+318c0IZpZtGE+UL7kwgLxBgWysjx2Y1
6kJxQ1x1o8wcEXp+62SzLYztYmn+IiYaWbU0D461YQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:06:06 2026 by rpki-client