Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer (raw, json)
Hash identifier: JKqT0sWkbaEaUsfdRsJUjJ55aG3rnO6L7QUn2rCOqe0=
Subject key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E461
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Nov 2026 05:31:42 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 153363
IP: 2001:df4:68c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 13:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189537 (0x2e461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 05:31:42 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:88:52:af:d2:e0:70:72:1c:cf:dc:b7:a7:
ef:ed:43:bc:86:56:1f:be:4b:9f:52:4e:04:06:9f:
87:f9:75:3a:4d:1b:db:71:a3:e9:8d:25:7f:cd:1e:
75:e5:71:3f:4a:e2:2d:ac:8d:13:94:01:5c:b9:12:
ab:ae:6d:c5:2c:24:09:9b:f9:2a:81:dc:85:92:97:
55:25:6c:bd:51:6d:78:5e:0c:bf:52:d4:33:bd:17:
f6:e7:b6:f8:c4:13:15:4f:e9:66:0d:3d:a8:18:88:
13:0f:77:02:d8:23:14:98:fb:2e:3e:a6:5c:1c:e3:
71:23:da:c9:38:26:42:8e:c6:90:70:fd:06:ed:45:
7e:c5:15:ef:74:50:68:d1:35:41:d2:5e:34:41:7e:
ac:29:db:6f:3a:ff:ee:5a:b8:8c:0b:70:c5:e8:81:
63:81:f2:48:e5:bf:82:ee:55:35:ea:c5:b8:c6:93:
da:27:97:2e:0d:c0:40:9b:1c:02:01:78:1d:68:c5:
36:6c:e1:bd:22:6e:63:56:80:fd:3f:c7:44:d3:27:
e4:99:de:d0:64:29:10:c4:ca:ae:ad:7c:e1:24:87:
ea:5e:54:f2:20:6c:7e:ca:0b:b5:e5:42:15:9e:32:
1f:bb:4a:e8:64:1b:79:56:8b:b3:ef:83:8c:ed:f1:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153363
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:68c0::/48
Signature Algorithm: sha256WithRSAEncryption
20:b8:be:17:3c:66:44:37:85:a0:bd:c4:96:7a:4b:05:c6:b7:
b4:97:f7:80:d8:12:1b:26:32:72:d4:7e:39:2b:60:7a:c1:76:
14:35:fe:47:58:9d:64:dd:1a:95:99:26:2d:78:14:5e:cf:16:
88:cc:40:c6:a8:07:79:b5:05:14:3a:f3:96:0a:63:6b:0c:cf:
20:6b:ef:c2:3d:9a:66:03:6a:39:77:00:77:c9:be:52:96:76:
0a:ec:fd:51:16:9a:8a:47:95:49:58:44:5a:6d:bc:43:02:5b:
73:0c:e1:0c:49:37:ac:2f:cd:51:d0:82:52:48:7c:29:51:a9:
77:39:c8:bb:ff:d0:01:01:c6:33:6b:e9:3e:81:63:02:a1:b1:
b3:03:09:e0:78:97:ee:5d:58:a3:aa:aa:d6:db:3e:9b:cc:87:
1c:ec:12:a4:79:e9:4f:82:76:d3:63:1c:d4:4a:16:a6:c6:37:
61:b2:c8:38:0a:89:84:e4:71:86:98:2f:30:99:e8:2e:18:58:
12:c4:8e:60:79:6f:4e:74:d9:02:aa:ba:ed:7c:1d:88:16:33:
f9:2a:7f:e8:ee:da:61:49:22:ef:45:a9:cc:ff:bd:30:6a:61:
c8:99:ad:00:31:75:87:73:1c:62:e3:2a:a2:26:68:fd:49:e1:
da:3a:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 15:05:27 2026 by rpki-client