Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.cer
File: fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.cer (raw, json)
Hash identifier: /KaI3FziKqbvq5+6CO9f8v5ShcWW3BHvYiUSFFrpRtQ=
Subject key identifier: 7C:D4:39:C1:F1:7B:44:0B:F9:53:1C:DD:D1:A3:36:15:01:EA:FB:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CB77
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 16:46:06 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 151357
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183159 (0x2cb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 16:46:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9111C7F, serialNumber=7CD439C1F17B440BF9531CDDD1A3361501EAFB83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:51:8c:78:9c:ca:66:7e:c2:e5:be:2d:6a:
e3:cc:64:66:0e:67:f5:76:5e:78:8f:8b:90:f3:99:
3b:56:8b:b3:a2:5d:dc:06:d0:58:b6:61:88:ed:c4:
64:cf:2d:c7:59:b1:ac:ac:18:d8:25:fe:49:eb:1b:
3c:e4:7f:cd:3a:9c:eb:07:e1:7b:41:be:8b:fa:9c:
d0:98:0a:5b:da:18:b2:1a:15:e0:c6:bf:ad:98:36:
07:e9:21:25:2c:14:42:60:78:ab:9a:dd:8b:06:6d:
41:90:68:eb:87:37:64:d3:c7:71:8b:17:4d:26:11:
04:36:87:84:e4:f3:fb:fe:68:d3:86:c4:72:fa:e5:
a7:85:ae:67:96:be:a6:2a:a3:cb:a8:d5:b5:c3:0b:
5f:ed:1c:85:a2:60:8d:7e:b1:05:2c:aa:0b:33:81:
2a:41:57:ac:a9:15:78:34:cb:fc:8a:83:25:7b:13:
8b:5c:ed:3f:c4:be:2d:57:bd:fa:59:80:1d:13:52:
99:93:19:f9:7b:73:24:52:74:d4:cb:85:9f:50:e9:
5f:9e:5b:a7:3e:bf:4f:77:8c:4d:72:98:d2:9e:b9:
d3:8b:15:f4:d3:d9:1f:14:e4:d3:74:82:e0:fa:47:
87:80:b9:67:84:52:1c:2b:ac:14:55:61:45:1c:6c:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D4:39:C1:F1:7B:44:0B:F9:53:1C:DD:D1:A3:36:15:01:EA:FB:83
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/2537EA3890ED11F1903363874A11F970/fNQ5wfF7RAv5Uxzd0aM2FQHq-4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151357
Signature Algorithm: sha256WithRSAEncryption
2a:a1:51:42:d6:9a:42:5e:44:c7:a0:72:b9:8f:78:ff:12:37:
9a:ba:04:0e:2c:23:be:b7:6f:20:50:eb:4e:87:f7:cf:79:28:
c5:e3:21:63:54:e3:9d:86:e6:43:d9:2f:b5:14:a6:07:c8:f6:
ef:3a:e0:20:c3:88:6d:06:90:cc:f3:1b:f4:ea:69:6d:1f:28:
dd:0a:6c:f7:d4:5f:2b:6e:ea:22:de:a2:22:b7:58:93:67:55:
f4:32:98:8f:52:11:8b:b3:30:fa:ad:7c:ba:bf:ce:d0:3b:34:
e0:5b:c1:f1:a8:3a:12:02:0a:a9:40:01:d5:d5:5a:b3:2b:10:
1a:66:f1:6e:ec:ac:62:aa:c3:30:67:c8:90:68:5c:27:2b:52:
02:ea:7d:82:8f:3c:39:0b:67:9f:5a:45:5f:ae:81:2b:ca:aa:
01:85:10:f6:cb:c0:20:32:2a:b1:f6:9a:b1:38:43:85:a1:49:
62:1a:c0:ec:f6:ba:06:85:28:1b:43:38:ec:a6:ec:60:1b:6e:
40:a1:b5:47:8c:15:37:95:f1:81:48:c5:c6:23:a7:46:37:e6:
0b:3b:ad:25:e1:0a:d9:bb:7d:58:89:f4:49:f1:2c:5c:fd:d8:
fe:e4:d5:49:67:0a:88:86:97:43:8a:51:fb:fb:71:0b:9e:37:
e4:fc:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:07 2026 by rpki-client