Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer
File: fOoThFDUNhs1PnBX2C_Bx2qMflg.cer (raw, json)
Hash identifier: BZHXm3qk94wamHxjucyQWY+mXwbxLP7eN8Qm4oeDYDA=
Subject key identifier: 7C:EA:13:84:50:D4:36:1B:35:3E:70:57:D8:2F:C1:C7:6A:8C:7E:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CDE9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 02:28:22 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 154840
IP: 2402:6fe0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183785 (0x2cde9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 02:28:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9173526, serialNumber=7CEA138450D4361B353E7057D82FC1C76A8C7E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:e6:b0:1c:82:7d:81:14:45:de:82:67:a1:
29:bb:94:30:3f:d5:9f:ca:34:1e:85:b7:ee:c2:44:
66:d4:83:03:d1:d7:45:6d:e4:ca:33:ab:e2:bd:79:
ce:a0:39:43:16:7a:b2:03:5a:64:8d:f9:50:dd:69:
a6:ff:6d:97:69:d5:e9:e6:8d:84:88:60:da:f7:7b:
2c:15:97:4f:91:9d:92:78:79:a5:a6:7f:22:ab:da:
cd:0c:cb:04:94:bf:b7:9e:95:78:78:ce:93:ce:cf:
f6:e1:a7:87:fc:eb:16:21:2d:1c:e5:4c:00:a6:6c:
fc:e9:c4:bc:91:ae:b1:3c:e5:49:8c:4f:3d:7e:01:
e4:7e:ec:77:94:4e:f7:e2:91:95:f5:a5:b0:6b:0f:
fd:27:45:73:b4:ef:19:c6:50:bb:49:14:a4:38:a8:
77:53:3a:b4:7c:04:3f:58:fa:11:69:78:52:60:4d:
0e:93:de:c9:b1:72:43:88:96:93:4c:99:f9:89:f4:
68:82:c5:9d:fd:b7:e6:82:c9:85:bc:82:23:dc:7a:
7a:64:99:e6:99:59:e4:86:ec:0b:cd:6c:af:d0:ae:
74:09:a2:45:52:6d:a8:05:0d:f0:84:14:fe:55:86:
f1:e2:25:5e:fd:4a:cc:78:6f:51:68:ec:3e:d9:be:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EA:13:84:50:D4:36:1B:35:3E:70:57:D8:2F:C1:C7:6A:8C:7E:58
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154840
sbgp-ipAddrBlock: critical
IPv6:
2402:6fe0::/32
Signature Algorithm: sha256WithRSAEncryption
97:d2:7f:95:cc:7c:af:2c:04:7e:aa:bc:eb:f5:ff:a3:35:01:
22:c5:94:d3:5f:a8:55:d6:c4:f3:7b:b4:fc:15:d6:8b:c0:fc:
1e:33:71:a3:04:e1:42:ba:a5:b3:64:73:86:67:69:b3:dc:d1:
c5:59:1e:e8:bf:41:bd:f8:13:0f:03:d5:52:48:cf:6e:42:3f:
e5:45:a3:d7:1c:14:e7:7d:1e:15:ef:4d:41:40:13:01:5b:7a:
40:89:2a:6a:d1:de:5b:3a:e0:4f:0d:e0:ad:16:b9:05:99:50:
ca:36:84:d3:bd:ec:82:31:5e:9d:2f:e4:87:c5:ef:f2:1e:d4:
72:e5:0f:3f:e8:b0:9e:21:39:2d:63:ae:96:1a:e2:22:a4:bc:
bd:a6:8f:ed:0e:39:15:01:3d:e5:72:5f:93:68:c2:3a:97:c8:
6f:a5:fc:72:76:7e:5f:bb:01:52:74:c1:0c:21:24:a1:a0:2b:
25:1b:50:42:5e:52:6a:66:44:68:4d:00:80:3a:5e:45:15:0d:
97:b4:63:b4:c9:9e:4b:dc:c5:46:17:71:b1:f2:44:33:9e:a7:
a2:2d:81:e5:58:cb:06:8e:32:80:d5:83:7f:a8:16:85:84:ce:
e7:0b:97:9c:df:70:75:22:23:83:83:9c:54:8f:d9:80:40:16:
d2:a4:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:09 2026 by rpki-client