Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
File: Fz6pPabl71KPpzMJc4hIg92lJ-4.cer (raw, json)
Hash identifier: iLqear0i19jU03pj0bpKzRUBvQSsIKJ3XiSl7VQfNmQ=
Subject key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E3D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Oct 2025 14:12:52 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 153202
IP: 2401:bce0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 16:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159293 (0x26e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 21 14:12:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6c:fb:54:bc:02:2f:a0:48:81:a0:0d:12:1d:
41:1b:c6:ce:6a:21:49:23:bd:ba:e7:7f:07:d6:88:
23:ff:ad:d0:b9:8f:42:1f:24:5f:4b:fa:54:2b:a6:
cd:44:19:6c:1d:fd:3e:4f:ad:42:37:1c:8b:00:53:
bb:71:fc:10:bf:20:7d:26:9b:1c:85:18:63:f0:d3:
13:a0:86:73:a3:c2:4c:07:e1:f9:c3:eb:f8:a2:51:
69:f1:cd:c4:d7:16:4d:de:b7:14:a2:e9:bc:bc:e5:
36:86:7c:0e:73:53:d3:24:29:8e:ff:3b:9b:79:44:
cb:21:bd:89:82:d6:00:af:9b:a5:b7:4f:80:66:fa:
2a:10:2c:dc:6f:87:fc:e1:ec:b7:3a:eb:90:2a:6e:
00:b4:39:9b:1e:7b:25:36:81:6f:4e:65:0c:a4:a7:
54:41:1e:66:c3:48:80:76:a0:61:86:79:d5:22:87:
71:78:a3:6f:18:47:9c:f8:6d:35:ad:4c:eb:ef:15:
5e:5a:5a:96:1e:b1:e6:ad:fd:48:cb:6c:06:f7:92:
32:03:0b:10:76:15:8f:4c:18:a7:9e:43:a5:dc:7c:
ad:d6:36:72:7f:62:e1:8c:ff:e2:9a:19:41:43:f0:
17:a0:28:58:8f:6e:0e:47:40:f1:8b:13:24:63:05:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153202
sbgp-ipAddrBlock: critical
IPv6:
2401:bce0::/32
Signature Algorithm: sha256WithRSAEncryption
63:71:cf:47:b2:69:d9:36:76:3c:71:4e:f4:8d:49:6c:25:16:
78:e5:37:c1:14:9a:5e:86:dc:a5:f4:dc:9b:6f:fd:eb:3d:2d:
02:6c:58:3c:cf:7e:9c:8b:30:d0:66:0d:e5:26:f3:29:3b:bc:
a9:1c:fa:42:3f:a7:49:40:2d:34:54:f7:a4:0f:19:97:ad:24:
5a:a2:d8:f6:b8:a8:40:38:66:26:21:b0:e3:0d:a8:d1:d4:5f:
0b:0e:e6:58:b3:63:8a:38:a7:68:49:62:12:f5:e1:70:59:5f:
96:8d:6c:5a:7f:5b:ae:9c:0e:a1:f3:fe:88:ed:43:01:15:58:
60:ea:0c:be:ec:82:f3:2d:4d:f8:1d:ee:3c:60:4f:c3:3e:f3:
96:cd:7a:88:da:41:51:fe:e4:7e:81:c5:45:7d:fa:46:d1:83:
db:63:2c:85:08:d4:6f:5e:cc:39:a0:8b:55:3e:22:da:b3:c7:
88:c7:09:0b:10:3f:20:5c:0e:34:1f:f5:16:47:f1:5e:ae:5c:
17:e1:aa:b8:0b:8f:f0:93:5b:b1:74:d4:75:9f:fb:ae:74:71:
e1:d5:e5:89:b5:ea:6b:57:b8:e0:70:f1:81:27:11:d2:69:1a:
86:7f:3d:d9:ad:13:d5:dd:15:dc:67:82:58:89:94:8c:8e:5e:
8f:76:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:05:10 2025 by rpki-client