Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer
File: nFFy5DAbErBXIH5LhA56y5CyCK4.cer (raw, json)
Hash identifier: nBre+q/LMrVBB+9Rf2it/Lf4XJqzn+IHrg/shxmf3NQ=
Subject key identifier: 9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CC3C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Aug 2026 04:42:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 154301
IP: 203.14.38.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183356 (0x2cc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 10 04:42:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A919125D, serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:a1:b7:b7:24:81:c3:5d:b4:8b:d5:a5:36:
08:1c:4e:4f:81:2a:0d:af:c8:7f:22:b4:e7:5b:a0:
0a:13:d4:81:47:c0:03:5c:85:28:4d:f3:e8:f7:61:
b6:5a:ab:5e:d7:7f:6c:db:26:8b:8e:f3:ee:9c:57:
99:94:7e:c1:a4:cf:a2:bf:ed:f2:74:ce:0e:0b:85:
eb:1c:8c:c8:8b:72:83:fb:8f:37:03:99:90:38:4b:
71:06:32:a2:48:f5:dc:d4:a9:d0:21:fb:68:9f:8b:
3f:ef:fd:18:5f:42:7d:27:53:43:9a:62:31:94:4f:
dd:e4:9d:e1:d2:fb:d8:2e:03:b9:ee:f3:17:be:dd:
7c:2f:8c:8d:52:eb:e0:0e:b4:aa:6e:1a:6f:a1:2c:
9f:84:03:db:59:22:63:f3:05:20:94:6d:04:17:eb:
fc:35:66:74:92:c5:4a:1b:a9:47:64:de:fd:a0:5b:
46:b0:e3:78:f5:dc:dc:8c:1a:35:a3:5c:33:0f:3d:
3e:54:bf:a1:3b:76:fd:1a:aa:dd:7f:24:9a:ee:e6:
ce:0d:bf:26:32:5c:3d:1e:c5:aa:d9:e9:53:aa:5c:
ed:b4:51:a1:b7:bc:88:1e:d5:0b:d1:b3:6c:33:13:
6a:0b:0e:f4:55:c2:c2:70:7f:2c:85:56:fa:a5:33:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154301
sbgp-ipAddrBlock: critical
IPv4:
203.14.38.0/23
Signature Algorithm: sha256WithRSAEncryption
35:0c:a0:54:d7:a9:ec:be:c4:63:b7:c6:85:ab:38:d4:ba:c2:
83:54:a1:2f:fa:b9:09:13:b4:2e:56:2a:98:d1:01:d2:7c:c1:
ed:6f:55:8d:45:1a:09:a7:22:3b:7e:f1:6f:ad:10:fd:af:87:
fa:61:4c:06:0c:69:32:a3:08:f5:f5:3c:19:a6:24:d5:ec:d8:
ff:bc:d8:df:06:aa:88:5c:bf:48:e7:cb:f1:05:2a:d8:85:5f:
ee:0d:24:62:eb:89:0c:6e:b9:f9:c1:45:56:17:8f:61:47:f1:
cb:c4:00:73:1f:ac:b2:d3:40:fc:f7:c5:d9:27:62:9e:ec:a3:
ce:c7:f9:17:29:79:9a:ce:3e:60:41:b2:ab:8c:f8:4f:26:3e:
e6:a7:d0:e3:e9:1f:6c:4c:2e:1e:0b:cf:e1:28:72:66:75:60:
27:2c:4f:5e:21:7f:5c:59:b1:77:b3:b6:87:d2:cd:1f:30:c0:
32:90:f4:2d:6c:56:54:52:cf:ed:94:c7:1b:5c:ac:2e:38:e2:
dc:95:67:af:1e:9d:db:cf:fe:ee:9c:23:b2:9c:9b:4f:87:c7:
d6:7f:a8:a7:94:1f:ec:b9:30:0f:a2:24:6e:b5:95:ed:85:8a:
56:a4:02:91:13:d7:0f:28:2f:c1:46:f5:fb:65:b3:88:c8:1b:
7f:3c:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:06 2026 by rpki-client