Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer (raw, json)
Hash identifier: eTCNgZSgxuFXJtIbxcMh9bhWhHHdROGhFfVpxs4ohiQ=
Subject key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028546
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 11 Jan 2026 02:40:17 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 151967
IP: 103.65.138.0/23
IP: 2001:df3:8c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 15:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165190 (0x28546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 11 02:40:17 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:8b:e2:ae:16:68:64:2b:c9:a2:b7:0f:c7:
25:32:f5:80:d0:58:36:91:bb:aa:5f:ce:1c:3f:db:
1f:36:45:28:9e:a0:9b:5f:ae:9a:29:1c:df:72:93:
f0:11:78:a1:c8:1d:c8:35:b1:57:f2:3d:a3:64:2a:
3e:7e:82:a9:81:5c:6d:a5:fb:a1:3c:4a:fe:a9:54:
a1:93:f7:e0:7f:ad:c6:36:71:4f:9d:cf:f5:25:3a:
04:e9:05:d9:7e:1d:35:76:46:7f:17:13:35:b2:ef:
45:f6:69:96:51:d7:eb:d8:1a:ba:a9:b9:c7:09:da:
d8:e3:b8:b8:4f:88:f7:8a:21:53:1f:2c:1a:a9:43:
5c:f7:4b:6e:74:80:b0:07:58:57:b6:be:f1:34:0b:
93:10:29:7f:75:d4:af:02:c1:9f:e1:6a:68:d1:00:
b3:66:1c:1b:a7:6d:73:1b:ec:fa:5d:1d:b2:c1:aa:
92:89:07:14:6d:b4:8a:b4:ae:d9:80:80:fc:70:fe:
6d:0c:4d:a5:7c:2b:18:d7:d5:12:3e:53:51:5e:54:
5f:94:56:37:c5:3c:04:70:05:7e:62:3c:d0:2b:5b:
27:d5:cd:16:e0:2a:66:f9:a4:77:6d:5a:c3:0f:96:
24:4b:48:34:26:60:35:9e:eb:ad:56:70:4e:bb:d3:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151967
sbgp-ipAddrBlock: critical
IPv4:
103.65.138.0/23
IPv6:
2001:df3:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
81:28:f6:12:45:10:c1:93:27:02:dd:27:ba:fd:4c:c3:dd:00:
b7:95:78:0b:c2:2d:07:5e:aa:76:72:96:37:c8:99:99:66:09:
70:19:d8:8a:38:66:30:5f:cc:a4:37:f5:0b:f1:e3:e3:5a:04:
68:1a:cf:9b:7a:2e:76:4b:62:75:27:b9:6a:06:09:29:72:9b:
fd:9b:c4:d3:56:70:db:a2:98:15:d4:9e:7d:18:95:c2:b6:46:
df:32:d7:44:05:88:1b:ca:1f:b5:3e:c2:ec:48:53:7c:0f:0b:
ef:9b:d0:e2:ec:84:97:c3:54:41:6b:4e:6c:d0:4d:33:f1:ee:
25:ed:32:b0:8e:79:ea:0b:0d:80:26:8c:dc:4d:1a:9f:57:cd:
12:32:08:87:e7:af:57:c6:3a:5d:c3:d7:fe:3b:65:af:bb:35:
29:4a:40:e4:17:03:7b:da:8c:3a:b5:d8:55:21:da:7f:bb:1b:
99:82:4e:eb:be:a3:be:be:bf:fb:95:77:94:cf:a5:af:d4:ae:
ab:d1:e8:ac:f4:51:a0:41:20:84:6e:38:53:7f:62:0b:41:b3:
bc:9d:72:4f:ec:eb:a3:af:bb:f0:e7:c9:69:05:31:ba:29:9e:
16:5c:6d:5d:72:33:d0:14:bc:93:14:0b:f0:50:ef:67:ec:91:
bf:88:6d:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:01 2026 by rpki-client